Skip to content
OpenAdvisories

Archive

9 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /9 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 7.5
    CVE-2024-42473

    OpenFGA Authorization Bypass

    OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses `but not` and `from` expressions and a userset. Users should downgrade to v1.5.6 as soon as possible.…

    openfga openfga github.com/openfga/openfga Go
  • High 8.3
    CVE-2024-42370 Public exploit

    Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow

    Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-preview.yml` workflow is vulnerable to Environment Variable injection which may lead to secret exfiltration and repository manipulation. This…

    litestar-org litestar
  • High 7.5
    CVE-2023-31315

    Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM …

    AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Debian Ubuntu
  • High 8.8
    CVE-2024-30188 Scanner template

    Apache DolphinScheduler: Resource File Read And Write Vulnerability

    File read and write vulnerability in Apache DolphinScheduler ,  authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2. Users are recommended to upgrade to version 3.2.2, which f…

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • High 8.8
    CVE-2024-29831

    Apache DolphinScheduler: RCE by arbitrary js execution

    Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • High 7.3
    CVE-2024-7637

    code-projects Online Polling Registration registeracc.php sql injection

    A vulnerability was found in code-projects Online Polling 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file registeracc.php of the component Registration. The manipulation of the argument email leads to sql i…

    code-projects Online Polling
  • High 7.3
    CVE-2024-7636

    code-projects Simple Ticket Booking Login authenticate.php sql injection

    A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/pass…

    code-projects Simple Ticket Booking
  • High 7.3
    CVE-2024-7635

    code-projects Simple Ticket Booking Registration register_insert.php sql injection

    A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_insert.php of the component Registration Handler. The manipulation of the argument name/email/dob/pa…

    code-projects Simple Ticket Booking
  • High 8.6
    CVE-2024-7408

    Information Disclosure Vulnerability in Airveda Air Quality Monitor

    This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Su…

    Airveda Air Quality Monitor PM2.5 PM10
  • High 7.5
    CVE-2024-36462

    Allocation of resources without limits or throttling (uncontrolled resource consumption)

    Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls. This can cause a denial-of-service (DoS) attack or deg…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • High 8.1
    CVE-2024-36460

    Front-end audit log shows passwords in plaintext

    The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • High 8.8
    CVE-2024-7399 Exploited Public exploit Scanner template EPSS 92%

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before …

    Samsung Electronics MagicINFO 9 Server
    KEV Apr 24, 2026
  • High 7.5
    CVE-2024-0113

    NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can ca…

    NVIDIA MetroX-3 XC Skyway MetroX-2
  • High 7.8
    CVE-2023-50809

    In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly…

  • High 8.1
    CVE-2024-40479

    A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers…

  • High 7.5
    CVE-2024-37826

    A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTT…