Skip to content
OpenAdvisories

Archive

6 August 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-6651 Public exploit Scanner template EPSS 16%

    WordPress File Upload < 4.24.8 - Reflected XSS

    The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

  • Critical 9.8
    CVE-2024-6782 Public exploit Scanner template EPSS 84%

    Calibre Remote Code Execution

    Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

  • Medium 5.5
    CVE-2024-36424 Public exploit

    K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of…