Skip to content
OpenAdvisories

Archive

23 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /23 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-41665

    Ampache Stored Cross-site Scripting Vulnerability

    Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnerability in versions prior to 6.6.0. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An at…

    ampache ampache ampache Ubuntu
  • Medium 5.4
    CVE-2024-41664

    Blind SSRF via Canarytoken Webhook

    Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulnerable to a blind SSRF in the Webhook alert feature. When a Canarytoken is created, users choose to receive alerts either via email or via a webhook. I…

    thinkst canarytokens
  • Medium 4.8
    CVE-2024-6783 Public exploit

    Vue client-side XSS via prototype pollution

    A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute ar…

    vue vue vue-template-compiler npm
  • Medium 5.5
    CVE-2024-41836

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulti…

    Adobe InDesign Desktop
  • Medium 5.4
    CVE-2024-34128

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 6.5
    CVE-2024-4260

    CoBlocks < 3.1.12 - Contributor+ SSRF

    The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

    Web / CMS
  • Medium 5.9
    CVE-2024-6231

    Request a Quote < 2.4.1 - Admin+ Stored XSS

    The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (fo…

    Web / CMS
  • Medium 6.5
    CVE-2024-1575

    The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions…

    Zyxel WBE660S firmware Network devices
  • Medium 5.9
    CVE-2024-39702

    In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) all…