Skip to content
OpenAdvisories

Archive

25 July 2024

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • High 7.2
    CVE-2024-40318 Public exploit

    An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via upload…

  • Critical 9.8
    CVE-2024-40324 Public exploit

    A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) chara…

  • Medium 4.8

    An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A …

  • High 7.3

    A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer …

  • High 7.1

    A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user c…

  • High 8.0

    Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/W…

  • Critical 9.8

    Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /gofor…