Skip to content
OpenAdvisories

Archive

18 July 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-40725 Public exploit

    Apache HTTP Server: source code disclosure with handlers configured via AddType

    A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result …

  • Medium 6.1
    CVE-2024-39090 Public exploit

    The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forge…