Skip to content
OpenAdvisories

Archive

29 July 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2024-40815 Public exploit

    A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonom…

  • High 7.0
    CVE-2024-41817 Public exploit

    Arbitrary Code Execution in `AppImage` version `ImageMagick`

    ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executi…

  • Critical 9.1
    CVE-2024-6366 Public exploit Scanner template EPSS 29%

    User Profile Builder < 3.11.8 - Unauthenticated Media Upload

    The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.

  • Medium 6.1
    CVE-2024-41640 Public exploit

    Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via craft…