Skip to content
OpenAdvisories

Archive

30 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /30 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-6536 Public exploit

    Zephyr Project Manager < 3.3.99 - Editor+ XSS

    The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors and admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabil…

    Web / CMS
  • Medium 5.3
    CVE-2024-40094 Public exploit

    GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service

    GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.

    com.graphql-java:graphql-java Maven