Skip to content
OpenAdvisories

Archive

29 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /29 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-40782

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  • Critical 9.8
    CVE-2024-41081

    ila: block BH in ila_output()

    In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2024-41073

    nvme: avoid double free special payload

    In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECI…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-41040

    net/sched: Fix UAF when resolving a clash

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct] Read of size 1 at addr ffff88…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.1
    CVE-2024-38529

    Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

    Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10, there is a Remote Code Execution Vulnerability in the Message module of the Admidio Application, where it is possible to upload a…

    Admidio admidio admidio/admidio Packagist
  • Critical 10.0
    CVE-2024-37906

    Admidio has Blind SQL Injection in ecard_send.php

    Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the `/adm_program/modules/ecards/ecard_send.php` source file of the Admidio Application. The SQL Inje…

    Admidio admidio admidio/admidio Packagist
  • Critical 9.1
    CVE-2024-6366 Public exploit Scanner template EPSS 29%

    User Profile Builder < 3.11.8 - Unauthenticated Media Upload

    The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.

    Web / CMS
  • Critical 9.8
    CVE-2024-7202

    Simopro Technology WinMatrix3 Web package - SQL Injection

    The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3
  • Critical 9.8
    CVE-2024-7201

    Simopro Technology WinMatrix3 Web package - SQL Injection

    The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3
  • Critical 9.8
    CVE-2024-5670

    Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection

    The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.

    Softnext SN OS 10.3 SN OS 12.3 SN OS 12.1
  • Critical 9.1
    CVE-2024-28805

    An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control.

  • Critical 9.8
    CVE-2024-37858

    SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges vi…