Skip to content
OpenAdvisories

Archive

3 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /3 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2024-7444

    itsourcecode Ticket Reservation System Login Page login.php sql injection

    A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Login Page. The manipulation of the argument username leads to sq…

    itsourcecode Ticket Reservation System
  • High 8.8
    CVE-2024-7441

    Vivotek SD9364 httpd read stack-based overflow

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based…

    Vivotek SD9364
  • High 8.8
    CVE-2024-7439

    Vivotek CC8160 httpd read stack-based overflow

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer …

    Vivotek CC8160
  • High 7.5
    CVE-2024-7031

    File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update

    The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for …

    Ninja Team File Manager Pro – Filester Web / CMS
  • High 7.2
    CVE-2024-7291

    JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation

    The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to improper restriction on user meta fields. This makes it possible for authenticated attackers, with administrator-level …

    jetmonsters JetFormBuilder — Dynamic Blocks Form Builder Web / CMS
  • High 7.5
    CVE-2024-6477

    UsersWP < 1.2.12 - Users Information Disclosure

    The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address

    Web / CMS