Skip to content
OpenAdvisories

Archive

July 2024

Vulnerabilities first published in this month (UTC), newest first.

← June 2024 2024 / July August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-45249 Exploited Public exploit Scanner template EPSS 54%

    Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruc…

    Acronis Acronis Cyber Infrastructure
    KEV Jul 29, 2024
  • High 7.5
    CVE-2024-21182 Exploited Public exploit EPSS 74%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Jun 1, 2026
  • Critical 9.3
    CVE-2024-5910 Exploited Public exploit Scanner template EPSS 92%

    Expedition: Missing Authentication Leads to Admin Account Takeover

    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichm…

    Palo Alto Networks Expedition Network devices
    KEV Nov 7, 2024
  • Critical 9.8
    CVE-2024-5217 Exploited Scanner template EPSS 100%

    Incomplete Input Validation in GlideExpression Script

    ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now P…

    ServiceNow Now Platform
    KEV Jul 29, 2024
  • Critical 9.8
    CVE-2024-4879 Exploited Public exploit Scanner template EPSS 100%

    Jelly Template Injection Vulnerability in ServiceNow UI Macros

    ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. Servi…

    ServiceNow Now Platform
    KEV Jul 29, 2024
  • High 7.2
    CVE-2024-38094 Exploited · Ransomware EPSS 51%

    Microsoft SharePoint Remote Code Execution Vulnerability

    Microsoft SharePoint Remote Code Execution Vulnerability

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
    KEV Oct 22, 2024
  • High 7.5
    CVE-2024-38112 Exploited Public exploit EPSS 84%

    Windows MSHTML Platform Spoofing Vulnerability

    Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jul 9, 2024
  • High 7.8
    CVE-2024-38080 Exploited Public exploit

    Windows Hyper-V Elevation of Privilege Vulnerability

    Windows Hyper-V Elevation of Privilege Vulnerability

    Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows
    KEV Jul 9, 2024
  • Medium 5.3
    CVE-2024-39891 Exploited

    In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoi…

    KEV Jul 23, 2024
  • Critical 9.1
    CVE-2024-38475 Exploited Public exploit Scanner template EPSS 100%

    Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

    Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV May 1, 2025
  • Medium 6.0
    CVE-2024-20399 Exploited Public exploit

    Cisco NX-OS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insuff…

    Cisco Cisco NX-OS Software Network devices
    KEV Jul 2, 2024
  • Critical 9.8
    CVE-2024-36401 Exploited Public exploit Scanner template EPSS 100%

    Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted …

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Jul 15, 2024