Skip to content
OpenAdvisories

Archive

19 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /19 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2024-41107 Public exploit Scanner template EPSS 18%

    Apache CloudStack: SAML Signature Exclusion

    The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication…

    Apache Software Foundation Apache CloudStack
  • High 7.6
    CVE-2024-6205 Public exploit Scanner template

    PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi

    The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.

    Web / CMS
  • Medium 5.4
    CVE-2024-39123 Public exploit EPSS 23%

    Calibre-Web Cross Site Scripting (XSS)

    In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles H…

    calibreweb PyPI