Skip to content
OpenAdvisories

Archive

22 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /22 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

136 results · Feed

  • Critical 9.8
    CVE-2024-38944 Public exploit

    An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via th…

  • Medium 4.6
    CVE-2024-24507

    Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser pa…

  • Critical 9.8
    CVE-2024-40502

    SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute a…

  • High 7.5
    CVE-2024-40051

    IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter.

  • Medium 4.3
    CVE-2024-40075

    Laravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability.

  • Medium 6.8
    CVE-2024-41315

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parame…

  • Medium 5.3
    CVE-2024-41880

    In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiv…

  • Medium 6.1
    CVE-2024-41709

    Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places

    Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the "administer fields" permission.

    backdrop/backdrop Packagist
  • Medium 5.4
    CVE-2024-41703

    LibreChat through 0.7.4-rc1 has incorrect access control for message updates.

  • Critical 9.8
    CVE-2024-41316

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parame…

  • Critical 9.8
    CVE-2024-41318

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parame…

  • High 8.8
    CVE-2024-41320

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parame…

  • High 8.0
    CVE-2024-41317

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parame…

  • Critical 9.1
    CVE-2024-41704

    LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.

  • Medium 6.8
    CVE-2024-41314

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface paramet…

  • High 7.8
    CVE-2024-37391

    ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{a…