Skip to content
OpenAdvisories

Archive

10 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /10 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

58 results · Clear filters · Feed

  • Medium 6.2
    CVE-2024-39490

    ipv6: sr: fix missing sk_buff release in seg6_input_core

    In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is responsible for adding the SRH into a packet, delegating the operation to the seg6_input_core(). This fun…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.1
    CVE-2024-36453

    Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions p…

    Webmin Webmin Usermin
  • Medium 5.4
    CVE-2024-36450

    Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is ex…

    Webmin Webmin
  • Medium 4.3
    CVE-2024-6410

    ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

    The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.8.9 via the 'pm_upload_image' function due to missing validation on a user controlled key. T…

    Metagauss ProfileGrid – User Profiles, Groups and Communities Web / CMS
  • Medium 5.3
    CVE-2024-6550

    Gravity Forms: Multiple Form Instances <= 1.1.1 - Unauthenticated Full Path Disclosure

    The Gravity Forms: Multiple Form Instances plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.1. This is due to the plugin leaving test files with display_errors on. This makes it possible for unauthenticated …

    tyxla Gravity Forms: Multiple Form Instances Web / CMS
  • Medium 5.7
    CVE-2023-32467

    Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated ma…

    Dell PowerSwitch Z9664F-ON BIOS
  • Medium 5.7
    CVE-2023-32472

    Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated ma…

    Dell PowerSwitch Z9664F-ON BIOS
  • Medium 6.7
    CVE-2024-38301

    Dell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control vulnerability. A low priv…

    Dell Alienware Command Center (AWCC
  • Medium 4.3
    CVE-2024-5677

    Featured Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload

    The Featured Image Generator plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the fig_save_after_generate_image function in all versions up to, and including, 1.3.1. This makes it possible for authenticated …

    aumkub Featured Image Generator Web / CMS
  • Medium 6.4
    CVE-2024-4866

    UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and includ…

    codersaiful UltraAddons for Elementor Web / CMS
  • Medium 4.3
    CVE-2024-39330

    Django Path Traversal vulnerability

    An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentia…

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  • Medium 5.3
    CVE-2024-39329

    Django vulnerable to user enumeration attack

    An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable pa…

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  • Medium 6.1
    CVE-2024-40336

    idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'

  • Medium 6.8
    CVE-2024-40412

    Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

  • Medium 6.8
    CVE-2024-40332

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.ph…

  • Medium 6.5
    CVE-2024-40417

    A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the fil…

  • Medium 6.3
    CVE-2024-40328

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.p…

  • Medium 6.8
    CVE-2024-25076

    An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function respo…