Skip to content
OpenAdvisories

Archive

5 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /5 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • High 7.5
    CVE-2024-39182

    An information disclosure vulnerability in ISPmanager v6.98.0 allows attackers to access sensitive details of the root …

  • Medium 5.4
    CVE-2024-39019

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php…

  • Medium 5.4
    CVE-2024-39178

    MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via the component /tcpdum…

  • High 8.8
    CVE-2024-39022

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mu…

  • Medium 6.3
    CVE-2024-39020

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php…

  • High 7.5
    CVE-2024-39210 Public exploit

    Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page pa…

  • Medium 5.9
    CVE-2024-39150

    vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.

  • High 7.5
    CVE-2024-39027

    SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through …

  • Medium 6.1
    CVE-2024-39174

    A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute a…

  • Medium 6.5
    CVE-2024-32498

    OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

    An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenti…

    nova nova glance nova Debian Ubuntu PyPI
  • Low 3.8
    CVE-2024-29319

    Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file.…

  • Medium 5.4
    CVE-2024-29318

    Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file w…

  • High 7.3
    CVE-2024-36041

    KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via…

    plasma-workspace plasma-workspace plasma-workspace Debian Ubuntu Alpine
  • High 8.8
    CVE-2024-27711

    An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privil…

  • Medium 5.4
    CVE-2024-27716

    Cross Site Scripting vulnerability in Eskooly Web Product v.3.0 and before allows a remote attacker to execute arbitrar…

  • High 8.2
    CVE-2024-27715

    An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privil…

  • High 8.8
    CVE-2024-27713

    An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privil…

  • Critical 9.8
    CVE-2024-27709

    SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the sea…

  • Medium 6.5
    CVE-2024-27717

    Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a re…

  • Critical 9.8
    CVE-2024-27710

    An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privil…

  • Critical 9.8
    CVE-2024-27712

    An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privil…

  • Medium 5.0
    CVE-2024-23998 Public exploit

    goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.…

  • Medium 6.1
    CVE-2024-23997 Public exploit

    Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.

  • Critical 9.1
    CVE-2024-37768

    14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/user?id.

  • High 8.8
    CVE-2024-37769

    Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a cr…

  • High 7.5
    CVE-2024-37767

    Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information …