Skip to content
OpenAdvisories

Archive

4 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /4 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-37474

    WordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerability

    Cross Site Scripting (XSS) vulnerability in Automattic Newspack Ads allows Stored XSS.This issue affects Newspack Ads: from n/a through 1.47.1.

    Automattic Newspack Ads
  • Medium 6.5
    CVE-2024-37476

    WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

    Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1.

    Automattic Newspack Campaigns
  • Medium 6.4
    CVE-2024-22277

    VMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor with network access to V…

  • Medium 6.7
    CVE-2024-1574

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing featu…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT
  • Medium 5.9
    CVE-2024-1573

    Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENE…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT
  • Medium 6.2
    CVE-2024-39884

    Apache HTTP Server: source code disclosure with handlers configured via AddType

    A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disc…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Medium 6.4
    CVE-2024-5641

    One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions up to, and including, 1.1.9. This makes it possible for auth…

    cedcommerce One Click Order Re-Order Web / CMS
  • Medium 6.4
    CVE-2024-3639

    Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid

    The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Posts Grid widget in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attri…

    Livemesh Livemesh Addons by Elementor Web / CMS
  • Medium 6.4
    CVE-2024-2926

    Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets

    The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. Thi…

    Livemesh Livemesh Addons by Elementor Web / CMS
  • Medium 6.4
    CVE-2024-3638

    Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets

    The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Marquee Text Widget, Testimonials Widget, and Testimonial Slider widgets in all versions up to, and including, 8.4.1 due to insufficient input …

    Livemesh Livemesh Addons by Elementor Web / CMS
  • Medium 6.8
    CVE-2024-38471

    Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS co…

    TP-Link Systems Archer AX3000 Archer AX5400 Archer AXE75 Network devices
  • Medium 5.4
    CVE-2024-38344

    A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4. If this vulnerability is e…

    Sola Plugins WP Tweet Walls
  • Medium 5.3
    CVE-2024-39211 Public exploit

    Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response…

  • Medium 5.4
    CVE-2024-39929 Public exploit EPSS 41%

    Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filena…

    exim4 exim4 exim Debian Ubuntu Alpine