Skip to content
OpenAdvisories

Archive

5 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /5 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low —
    GHSA-xr7q-jx4m-x55m

    Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go

    ### Impact This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information. ### Patches The issue first appe…

    google.golang.org/grpc Go
  • Low 3.5
    CVE-2024-6526

    CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

    A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument search_title/catName/sub/name/categorie lead…

    CodeIgniter Ecommerce-CodeIgniter-Bootstrap
  • Low 2.7
    CVE-2024-6525

    D-Link DAR-7000 decodmail.php deserialization

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to …

    D-Link DAR-7000 Network devices
  • Low 3.5
    CVE-2024-6523

    ZKTeco BioTime system-group-add cross site scripting

    A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input <script>alert('XSS')</script> leads…

    ZKTeco BioTime
  • Low 3.8
    CVE-2024-29319

    Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file.…