Skip to content
OpenAdvisories

Archive

5 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /5 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-6915

    JFrog Artifactory Cache Poisoning

    JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.

    jfrog artifactory
  • Critical 9.3
    CVE-2024-7397

    Unauthenticated Command Injection

    Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2.

    Korenix JetPort 5601v3
  • Critical 9.3
    CVE-2024-7395

    Insufficient Authentication

    An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2.

    Korenix JetPort 5601v3
  • Critical 9.8
    CVE-2024-42447

    Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow

    Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from loggin…

    Apache Software Foundation Apache Airflow Providers FAB apache-airflow airflow Wolfi PyPI
  • Critical 9.3
    CVE-2024-6118

    Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

    A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

    HAMASTAR Technology MeetingHub Paperless Meetings
  • Critical 9.3
    CVE-2024-6117

    Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type

    A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file.

    HAMASTAR Technology MeetingHub Paperless Meetings
  • Critical 9.8
    CVE-2024-40498 Public exploit

    SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbi…

  • Critical 9.3
    CVE-2024-42008 Public exploit EPSS 34%

    A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.…

    roundcube roundcube Debian Ubuntu
  • Critical 9.3
    CVE-2024-42009 Exploited Public exploit Scanner template EPSS 83%

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to ste…

    roundcube roundcube Debian Ubuntu
    KEV Jun 9, 2025