Skip to content
OpenAdvisories

Archive

8 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /8 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.0
    CVE-2024-38372

    Undici vulnerable to data leak when using response.arrayBuffer()

    Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.

    Node.js undici node-undici undici Ubuntu npm
  • Low 2.3
    CVE-2024-6580

    /n software IPWorks SSH insufficient file access verification

    The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user acc…

    /n software IPWorks SSH SFTPServer
  • Low —
    GHSA-3v33-3wmw-3785

    yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

    ### Impact yt-dlp's DouyuTV and DouyuShow extractors used a `cdn.bootcdn.net` URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it ext…

    yt-dlp PyPI
  • Low 3.3
    CVE-2024-34602

    Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local att…

    Samsung Mobile Samsung Mobile Devices