Skip to content
OpenAdvisories

Archive

26 July 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-39304 Public exploit

    ChurchCRM SQL Injection Vulnerability

    ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessa…

  • High 7.1
    CVE-2024-41357 Public exploit

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.

  • High 7.5
    CVE-2024-41628 Public exploit Scanner template

    Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and…