Skip to content
OpenAdvisories

Archive

1 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /1 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.0
    CVE-2024-32758

    exacqVision - Key exchanges

    Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange

    Johnson Controls exacqVision
  • Critical 9.4
    CVE-2024-7093

    Server-Side Template Injection in Dispatch Message Templates

    Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly sanitized nor sandboxed. This vulnerability enables users to construct command line scripts in their cu…

    Netflix Dispatch
  • Critical 9.8
    CVE-2024-38770

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability

    Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20.

    revmakx Backup and Staging by WP Time Capsule
  • Critical 9.0
    CVE-2024-39619

    WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • Critical 9.2
    CVE-2024-41961

    Elektra vulnerable to remote code execution in universal search

    Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack Services. A code injection vulnerability was found in the live search functionality of the Ruby on Rails based Elektra web application. An authenticated user can craft a se…

    sapcc elektra
  • Critical 9.8
    CVE-2024-7332 Scanner template EPSS 21%

    TOTOLINK CP450 Telnet Service product.ini hard-coded password

    A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password…

    Toto Link CP450
  • Critical 9.1
    CVE-2024-41259

    Navidrome uses MD5 hashing algorithm

    Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information.

    github.com/navidrome/navidrome Go