Skip to content
OpenAdvisories

Archive

24 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /24 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-0231

    Improper Control of Resource Identifiers ('Resource Injection') in GitLab

    A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.6
    CVE-2024-7060

    Exposure of Sensitive Information to an Unauthorized Actor in GitLab

    An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows unauthorized users to view the resultant export.

    GitLab GitLab Web / CMS
  • Low 3.1
    CVE-2024-21684

    There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitb…

    Atlassian Bitbucket Data Center
  • Low 2.4
    CVE-2024-37533

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727.

    IBM InfoSphere Information Server
  • Low 3.5
    CVE-2024-7068

    SourceCodester Insurance Management System update_sub_category cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/update_sub_category. The manipulation of the argument name leads to cross site scripting. I…

    SourceCodester Insurance Management System
  • Low 3.5
    CVE-2024-3454

    In-Fabric Matter Cluster Attribute Disclosure

    An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to pr…

    Connectivity Standards Alliance connectedhomeip
  • Low 3.1
    CVE-2024-6874

    macidn punycode buffer overread

    libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to us…

    curl curl curl curl Debian Azure Linux Alpine