Skip to content
OpenAdvisories

Archive

10 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /10 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-5910 Exploited Public exploit Scanner template EPSS 92%

    Expedition: Missing Authentication Leads to Admin Account Takeover

    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichm…

    Palo Alto Networks Expedition Network devices
    KEV Nov 7, 2024
  • Medium 4.3
    CVE-2024-37147 Public exploit

    GLPI allows Authenticated File Upload to Restricted Tickets

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to …

    GLPI glpi glpi Ubuntu
  • Critical 9.8
    CVE-2024-4879 Exploited Public exploit Scanner template EPSS 100%

    Jelly Template Injection Vulnerability in ServiceNow UI Macros

    ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. Servi…

    ServiceNow Now Platform
    KEV Jul 29, 2024
  • High 7.5
    CVE-2024-39614 Public exploit EPSS 29%

    Django vulnerable to Denial of Service

    An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  • Critical 9.1
    CVE-2024-37770 Public exploit

    14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. Thi…