Skip to content
OpenAdvisories

Archive

19 July 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2024-41107 Public exploit Scanner template EPSS 18%

    Apache CloudStack: SAML Signature Exclusion

    The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication…

  • High 7.6
    CVE-2024-6205 Public exploit Scanner template

    PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi

    The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.