Skip to content
OpenAdvisories

Archive

16 August 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8
    CVE-2024-7646 Public exploit EPSS 27%

    CVE-2024-7646 in github.com/kubernetes/ingress-nginx

    A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the in…

  • Critical 9.8
    CVE-2024-6460 Public exploit Scanner template

    Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

    The Grow by Tradedoubler WordPress plugin through 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those fi…

  • Medium 6.5
    CVE-2024-42849 Public exploit

    An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change …

  • Medium 5.4
    CVE-2024-42758 Public exploit

    A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabl…

  • Critical 9.8
    CVE-2024-42850 Public exploit

    Silverpeas vulnerable to password complexity rule bypass

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.