Skip to content
OpenAdvisories

Archive

2 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /2 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2024-7029 Public exploit Scanner template EPSS 43%

    Command Injection in AVTech AVM1203 (IP Camera)

    Commands can be injected over the network and executed without authentication.

    AVTECH AVM1203 (IP Camera)
  • High 8.4
    CVE-2024-41127 Public exploit

    Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.

    Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its ci-failure-comment.yml GitHub Workflow, enabling attackers to gain pull-requests write access. The ci-failure-comm…

    monkeytypegame monkeytype
  • High 7.2
    CVE-2024-33896 Public exploit

    Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection du…

  • Medium 5.3
    CVE-2024-42461 Public exploit

    Elliptic allows BER-encoded signatures

    In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

    reaper elliptic node-elliptic node-elliptic Debian Ubuntu Azure Linux npm