Skip to content
OpenAdvisories

Archive

4 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /4 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-39930 Public exploit

    Gogs has an argument Injection in the built-in SSH server

    The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the …

    gogs.io/gogs github.com/gogs/gogs Go
  • Medium 5.3
    CVE-2024-39211 Public exploit

    Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response…

  • Critical 9.9
    CVE-2024-39943 Public exploit EPSS 39%

    rejetto HFS vulnerable to OS Command Execution by remote authenticated users

    rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnS…

    hfs npm
  • Medium 5.4
    CVE-2024-39929 Public exploit EPSS 41%

    Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filena…

    exim4 exim4 exim Debian Ubuntu Alpine