Skip to content
OpenAdvisories

Archive

19 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /19 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • High 7.5
    CVE-2024-27489

    An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.

  • High 8.8
    CVE-2024-40400

    Automad arbitrary file upload vulnerability

    An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.

    automad/automad Packagist
  • High 7.5
    CVE-2024-41600

    Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitiv…

  • High 7.5
    CVE-2024-41492

    A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  • Medium 4.2
    CVE-2024-41597

    ProcessWire Cross Site Request Forgery vulnerability

    Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by the Supplier because the product intentionally accepts anonymous, unauthenticated comments and thus there are fewer situa…

    processwire/processwire Packagist
  • High 8.8
    CVE-2024-41281

    Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function.

  • High 8.8
    CVE-2024-41602

    Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileg…

  • Critical 9.6
    CVE-2024-41603

    Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.

  • Medium 6.1
    CVE-2024-41599

    Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via t…

  • High 7.5
    CVE-2024-41601

    Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive informati…