Skip to content
OpenAdvisories

Archive

12 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /12 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-42477

    llama.cpp global-buffer-overflow in ggml_type_size

    llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.

    ggerganov llama.cpp
  • Medium 6.1
    CVE-2024-21550

    SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, ac…

  • Medium 6.4
    CVE-2024-6639

    MDx <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdx_list_item Shortcode

    The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdx_list_item' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes …

    AxtonYao MDx Web / CMS
  • Medium 6.3
    CVE-2024-42165

    Arbitrary User Activation

    Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.

    FIWARE FIWARE Keyrock
  • Medium 4.3
    CVE-2024-42164

    Disabling MFA without Authentication

    Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa link.

    FIWARE FIWARE Keyrock
  • Medium 6.5
    CVE-2024-6758

    Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

    Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.

    Sprecher Automation SPRECON-E
  • Medium 5.4
    CVE-2024-33536

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input va…

  • Medium 5.4
    CVE-2024-33533

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS…

  • Medium 6.1
    CVE-2024-27443 Exploited Scanner template EPSS 25%

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists i…

    KEV May 19, 2025
  • Medium 6.8
    CVE-2024-41710 Exploited EPSS 42%

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit,…

    KEV Feb 12, 2025
  • Medium 5.4
    CVE-2024-42629

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.

  • Medium 5.4
    CVE-2024-42625

    FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add