Skip to content
OpenAdvisories

Archive

24 July 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.6
    CVE-2024-41662 Public exploit

    VNote vulnerable to Markdown XSS, which leads to RCE

    VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown rendering functionality of versions 3.18.1 and prior of the VNote note-taking application. This vulnerability allows the injection and execution of…

  • Critical 10.0
    CVE-2024-41110 Public exploit EPSS 16%

    Moby authz zero length regression

    Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances…

  • Critical 9.8
    CVE-2023-45249 Exploited Public exploit Scanner template EPSS 54%

    Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruc…

    KEV Jul 29, 2024
  • Critical 9.8
    CVE-2024-36539 Public exploit

    Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining …

  • Critical 9.1
    CVE-2024-40422 Public exploit Scanner template EPSS 11%

    The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path t…