Skip to content
OpenAdvisories

Archive

1 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /1 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.1
    CVE-2024-38473 Public exploit Scanner template EPSS 26%

    Apache HTTP Server proxy encoding problem

    Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, w…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-38472 Public exploit Scanner template EPSS 69%

    Apache HTTP Server on WIndows UNC SSRF

    SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access…

    Apache Software Foundation Apache HTTP Server apache2 Alpine
  • High 7.5
    CVE-2024-36991 Public exploit Scanner template EPSS 13%

    Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

    In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.

    Splunk Splunk Enterprise
  • High 8.8
    CVE-2024-36985 Public exploit

    Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.

    Splunk Splunk Enterprise
  • High 7.5
    CVE-2024-36420 Public exploit Scanner template

    GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

    Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the `/api/v1/openai-assistants-file` endpoint in `index.ts` is vulnerable to arbitrary file read due to lack of sanitization of the `fileName…

    FlowiseAI Flowise flowise npm
  • High 8.1
    CVE-2024-6387 Public exploit EPSS 100%

    Openssh: regresshion - race condition in ssh allows rce/dos

    A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2024-4007 Public exploit

    Hard coded default credential contained in install package

    Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

    ABB NEXUS Series (NEX-2x, NEXUS-3-x) ASPECT Enterprise (ASP-ENT-x) MATRIX Series(MAT-x) ICS / OT
  • High 8.8
    CVE-2024-37765 Public exploit

    Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page.