Skip to content
OpenAdvisories

Archive

7 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /7 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6890

    Journyx Unauthenticated Password Reset Bruteforce

    Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

    Journyx Journyx (jtime)
  • Critical 9.8
    CVE-2024-41912

    A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware fla…

    HP Poly Clariti Manager
  • Critical 9.8
    CVE-2024-20454

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…

    Cisco Cisco Small Business IP Phones Network devices
  • Critical 9.8
    CVE-2024-20450

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…

    Cisco Cisco Small Business IP Phones Network devices
  • Critical 9.8
    CVE-2024-42232

    libceph: fix race between delayed_work() and ceph_monc_stop()

    In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Bo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-36130

    An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker …

    ivanti EPMM Network devices
  • Critical 9.8
    CVE-2024-34479

    SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

  • Critical 9.8
    CVE-2024-34480

    SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

  • Critical 9.8
    CVE-2024-41237

    A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows a…

  • Critical 9.1
    CVE-2024-41247

    An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara …

  • Critical 9.8
    CVE-2024-42005

    Django SQL injection vulnerability

    An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI