Skip to content
OpenAdvisories

Archive

16 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /16 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Medium 6.3
    CVE-2024-7851

    SourceCodester Yoga Class Registration System Add User Users.php improper authorization

    A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper…

    SourceCodester Yoga Class Registration System
  • Medium 5.4
    CVE-2024-25837

    A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to ex…

  • Medium 6.5
    CVE-2024-42849 Public exploit

    An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change …

  • High 8.3
    CVE-2024-42995

    VTiger CRM <= 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Mig…

  • Critical 9.8
    CVE-2024-42638

    H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attac…

  • High 7.2
    CVE-2024-42994

    VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injectio…

  • Critical 9.8
    CVE-2024-42639

    H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as ro…

  • Medium 5.4
    CVE-2024-42758 Public exploit

    A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabl…

  • Critical 9.8
    CVE-2024-42634

    A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result,…

  • Critical 9.8
    CVE-2024-42637

    H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke…

  • Critical 9.8
    CVE-2024-42850 Public exploit

    Silverpeas vulnerable to password complexity rule bypass

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    org.silverpeas.core:silverpeas-core Maven
  • Medium 4.7
    CVE-2024-43005

    A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attacker…

  • Critical 9.8
    CVE-2024-43042

    Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

  • Medium 4.7
    CVE-2024-43009

    A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The…

  • Medium 5.4
    CVE-2024-43006

    A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker …

  • Medium 4.9
    CVE-2024-43011

    An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to …