Archive
16 August 2024
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 8.8
CVE-2024-7646 in github.com/kubernetes/ingress-nginx
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the in…
-
Critical 9.8
Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
The Grow by Tradedoubler WordPress plugin through 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those fi…
-
Medium 6.5CVE-2024-42849 Public exploit
An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change …
-
Medium 5.4CVE-2024-42758 Public exploit
A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabl…
-
Critical 9.8CVE-2024-42850 Public exploit
Silverpeas vulnerable to password complexity rule bypass
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.