Skip to content
OpenAdvisories

Archive

5 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /5 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2024-39689 Public exploit

    Certifi removes GLOBALTRUST root certificate

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi…

    certifi python-certifi katib-suggestion-hyperopt katib-earlystopping Debian Wolfi PyPI
  • High 8.6
    CVE-2024-34361 Public exploit

    Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)

    Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlockl…

    pi-hole pi-hole
  • Critical 10.0
    CVE-2024-6209 Public exploit EPSS 17%

    unauthorized file access

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-6298 Public exploit EPSS 19%

    remote code execution

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.5
    CVE-2024-39210 Public exploit

    Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page pa…

  • Medium 5.0
    CVE-2024-23998 Public exploit

    goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.…

  • Medium 6.1
    CVE-2024-23997 Public exploit

    Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.