Skip to content
OpenAdvisories

Archive

9 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /9 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-21832

    PingFederate REST API Data Store Injection

    A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.

    Ping Identity PingFederate
  • Low 1.8
    CVE-2024-22477

    PingFederate OIDC Policy Management Editor Cross-Site Scripting

    A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.

    Ping Identity PingFederate
  • Low 3.1
    CVE-2024-6501

    Networkmanager: denial of service

    A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of serv…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Low 3.9
    CVE-2024-21759

    An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7…

    Fortinet FortiPortal Network devices
  • Low 3.1
    CVE-2024-26015

    An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, …

    Fortinet FortiOS FortiProxy Network devices
  • Low 3.3
    CVE-2024-37996

    A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (…

    Siemens JT2Go Teamcenter Visualization V14.3 Teamcenter Visualization V14.2 ICS / OT
  • Low 3.8
    CVE-2024-37442

    WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.

    Photo Gallery Team Photo Gallery by Ays
  • Low 2.7
    CVE-2024-37253

    WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This issue affects WP Directory Kit: from n/a through 1.3.6.

    Wp Directory Kit WP Directory Kit
  • Low 3.5
    CVE-2024-35777

    WordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Automattic WooCommerce allows Content Spoofing.This issue affects WooCommerce: from n/a through 8.9.2.

    Automattic WooCommerce Web / CMS
  • Low 3.3
    CVE-2024-34692

    [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

    Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploita…

    SAP SAP Enable Now