Skip to content
OpenAdvisories

Archive

5 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /5 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Medium 5.3
    GHSA-fqpg-rq76-99pq

    Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx

    Pipeline can panic when PgConn is busy or closed.

    github.com/jackc/pgx/v5 Go
  • Medium 4.3
    CVE-2024-39691

    Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

    matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access…

    Matrix matrix-appservice-irc matrix-appservice-irc npm
  • Medium 6.8
    CVE-2024-6505

    Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

    A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Virtualization Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2024-23588

    A denial of service vulnerability affects HCL Nomad server on Domino

    HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability.

    HCL Software Nomad server on Domino
  • Medium 5.5
    CVE-2024-6524

    ShopXO Uploader.php server-side request forgery

    A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file extend/base/Uploader.php. The manipulation of the argument source leads to server-side request forgery. T…

    shopxo/shopxo Packagist
  • Medium 6.1
    CVE-2024-34481

    drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.

    drupal7 Ubuntu
  • Medium 5.4
    CVE-2024-39021

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php…

  • Medium 5.4
    CVE-2024-39019

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php…

  • Medium 5.4
    CVE-2024-39178

    MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via the component /tcpdum…

  • Medium 6.3
    CVE-2024-39020

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php…

  • Medium 5.9
    CVE-2024-39150

    vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.

  • Medium 6.1
    CVE-2024-39174

    A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute a…

  • Medium 6.5
    CVE-2024-32498

    OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

    An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenti…

    nova nova glance nova Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2024-29318

    Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file w…

  • Medium 5.4
    CVE-2024-27716

    Cross Site Scripting vulnerability in Eskooly Web Product v.3.0 and before allows a remote attacker to execute arbitrar…

  • Medium 6.5
    CVE-2024-27717

    Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a re…

  • Medium 5.0
    CVE-2024-23998 Public exploit

    goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.…

  • Medium 6.1
    CVE-2024-23997 Public exploit

    Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.