Skip to content
OpenAdvisories

Archive

9 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /9 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-7644

    SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

    A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leads_name/phone_n…

    SourceCodester Leads Manager Tool
  • Low 2.7
    CVE-2024-22123

    Zabbix Arbitrary File Read

    Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log fil…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • Low 3.0
    CVE-2024-22122

    AT(GSM) Command Injection

    Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute a…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu