Archive
24 July 2024
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 8.6CVE-2024-41662 Public exploit
VNote vulnerable to Markdown XSS, which leads to RCE
VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown rendering functionality of versions 3.18.1 and prior of the VNote note-taking application. This vulnerability allows the injection and execution of…
-
Critical 10.0
Moby authz zero length regression
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances…
-
Critical 9.8
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruc…
KEV Jul 29, 2024 -
Critical 9.8CVE-2024-36539 Public exploit
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining …
-
Critical 9.1
The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path t…