Skip to content
OpenAdvisories

Archive

9 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /9 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-42469

    CometVisu Backend for openHAB affected by RCE through path traversal

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authentication and additionally the endpoint to update an existing f…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Critical 10.0
    CVE-2024-42467

    CometVisu Backend for openHAB affected by SSRF/XSS

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. In versions 3.4.0.M4 through 4.2.0,, the proxy endpoint of openHAB's CometVisu add-on can be accessed without authentication. This proxy-fea…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Critical 9.9
    CVE-2024-22116

    Remote code execution within ping script

    An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereb…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • Critical 9.1
    CVE-2024-36461

    Direct access to memory pointers within the JS engine for modification

    Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • Critical 9.1
    CVE-2024-3279

    Improper Access Control in mintplex-labs/anything-llm

    An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allows an anonymous attacker, without an account in the application, to import their own database file, …

    Mintplex-Labs mintplex-labs/anything-llm
  • Critical 9.8
    CVE-2024-38989

    Prototype pollution in izatop bunt

    izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    @bunt/app npm
  • Critical 9.8
    CVE-2024-40480

    A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam …

  • Critical 9.8
    CVE-2024-41476

    AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card…

  • Critical 9.8
    CVE-2024-41570 Public exploit

    An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to sen…

  • Critical 9.8
    CVE-2024-41577

    An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute ar…