Skip to content
OpenAdvisories

Archive

13 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /13 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-28986 Exploited Scanner template EPSS 85%

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, Sola…

    SolarWinds Web Help Desk
    KEV Aug 15, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • Critical 9.6
    CVE-2024-7569

    An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows …

    ivanti ITSM Network devices
  • Critical 9.1
    CVE-2024-38109

    Azure Health Bot Elevation of Privilege Vulnerability

    An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

    Microsoft Azure Health Bot
  • Critical 9.8
    CVE-2024-38140

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2024-38063 Public exploit EPSS 74%

    Windows TCP/IP Remote Code Execution Vulnerability

    Windows TCP/IP Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2024-38199

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.1
    CVE-2024-38160

    Windows Network Virtualization Remote Code Execution Vulnerability

    Windows Network Virtualization Remote Code Execution Vulnerability

    Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  • Critical 9.1
    CVE-2024-38159

    Windows Network Virtualization Remote Code Execution Vulnerability

    Windows Network Virtualization Remote Code Execution Vulnerability

    Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  • Critical 9.3
    CVE-2024-38108

    Azure Stack Hub Spoofing Vulnerability

    Azure Stack Hub Spoofing Vulnerability

    Microsoft Azure Stack Hub
  • Critical 9.5
    CVE-2024-7746

    Use of default credentials at Traccar fleet management solution

    Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by t…

    traccar Server
  • Critical 10.0
    CVE-2024-43160 Public exploit Scanner template

    WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6.

    BerqWP BerqWP
  • Critical 9.8
    CVE-2024-43153

    WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.

    WofficeIO Woffice
  • Critical 9.8
    CVE-2024-43141

    WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2.

    Roland Barker, xnau webdesign Participants Database
  • Critical 9.1
    CVE-2024-37287

    Kibana arbitrary code execution via prototype pollution

    A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary c…

    Elastic Kibana
  • Critical 9.1
    CVE-2024-43121

    WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1.

    RealMag777 HUSKY
  • Critical 9.1
    CVE-2024-41940

    A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly vali…

    Siemens SINEC NMS ICS / OT
  • Critical 9.8
    CVE-2024-41730 EPSS 76%

    Missing Authentication check in SAP BusinessObjects Business Intelligence Platform

    In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on conf…

    SAP SAP BusinessObjects Business Intelligence Platform
  • Critical 9.8
    CVE-2024-7094 Public exploit EPSS 38%

    JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

    The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitizati…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS
  • Critical 9.8
    CVE-2024-41623

    An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code…

  • Critical 9.8
    CVE-2024-42737

    In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerabilit…