Skip to content
OpenAdvisories

Archive

July 2024

Vulnerabilities first published in this month (UTC), newest first.

← June 2024 2024 / July August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-45249 Exploited Public exploit Scanner template EPSS 54%

    Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruc…

    Acronis Acronis Cyber Infrastructure
    KEV Jul 29, 2024
  • Critical 9.3
    CVE-2024-5910 Exploited Public exploit Scanner template EPSS 92%

    Expedition: Missing Authentication Leads to Admin Account Takeover

    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichm…

    Palo Alto Networks Expedition Network devices
    KEV Nov 7, 2024
  • Critical 9.8
    CVE-2024-4879 Exploited Public exploit Scanner template EPSS 100%

    Jelly Template Injection Vulnerability in ServiceNow UI Macros

    ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. Servi…

    ServiceNow Now Platform
    KEV Jul 29, 2024
  • Critical 9.1
    CVE-2024-38475 Exploited Public exploit Scanner template EPSS 100%

    Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

    Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV May 1, 2025
  • Critical 9.8
    CVE-2024-36401 Exploited Public exploit Scanner template EPSS 100%

    Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted …

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Jul 15, 2024