Skip to content
OpenAdvisories

Archive

1 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /1 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-39018

    @cat5th/key-serializer Prototype Pollution vulnerability

    harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    @cat5th/key-serializer npm
  • Medium 6.5
    CVE-2024-39000

    adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabil…

  • Medium 6.3
    CVE-2024-39001

    ag-grid packages vulnerable to Prototype Pollution

    ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    ag-grid-community ag-grid-enterprise @ag-grid-enterprise/charts npm
  • Medium 6.5
    CVE-2024-39853

    adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerabili…

  • Medium 6.3
    CVE-2024-38990

    Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability…

  • Medium 6.3
    CVE-2024-38987

    @aofl/cli-lib Prototype Pollution vulnerability

    aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    @aofl/cli-lib npm
  • Medium 6.1
    CVE-2024-38953

    phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_c…

  • Medium 6.5
    CVE-2024-38997

    adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

    adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    @adolph_dudu/ratio-swiper npm
  • Medium 6.6
    CVE-2024-32228

    FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end.

    ffmpeg ffmpeg libav Debian Ubuntu
  • Medium 5.4
    CVE-2024-23737

    Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows …

  • Medium 5.4
    CVE-2024-37763 Public exploit

    MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid …

  • Medium 5.4
    CVE-2024-37764 Public exploit

    MachForm up to version 19 is affected by an authenticated stored cross-site scripting.