Skip to content
OpenAdvisories

Archive

19 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /19 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-43354

    WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.

    Saad Iqbal myCred
  • Critical 9.8
    CVE-2024-43311

    WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability

    Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2.

    Geek Code Lab Login As Users
  • Critical 9.6
    CVE-2024-43261

    WordPress Compute Links plugin <= 1.2.1 - Remote File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hamed Naderfar Compute Links allows PHP Remote File Inclusion.This issue affects Compute Links: from n/a through 1.2.1.

    Hamed Naderfar Compute Links
  • Critical 9.0
    CVE-2024-43252

    WordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through <= 1.1.1.

    Crew HRM Crew HRM
  • Critical 9.9
    CVE-2024-43249

    WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.

    Bit Apps Bit Form Pro
  • Critical 9.8
    CVE-2024-43245

    WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

    Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4.

    EyeCix Technologies JobSearch
  • Critical 9.0
    CVE-2024-43242

    WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

    azzaroco Ultimate Membership Pro
  • Critical 9.4
    CVE-2024-43240

    WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

    Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

    azzaroco Ultimate Membership Pro
  • Critical 10.0
    CVE-2024-37099

    WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.

    Liquid Web GiveWP
  • Critical 9.1
    CVE-2024-43400 Public exploit

    XWiki Platform allows XSS through XClass name in string properties

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or Programming rights to craft a URL pointing to a page with arbitrary JavaScript. This requires social engineer …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-oldcore Maven
  • Critical 9.1
    CVE-2024-43401

    In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Critical 9.8
    CVE-2024-6330 Public exploit

    GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

    The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

    Web / CMS
  • Critical 9.8
    CVE-2024-44070

    An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual re…

    frr frr quagga frr Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-44076

    Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access

    In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

    io.github.microcks:microcks-app Maven
  • Critical 9.8
    CVE-2024-42813

    In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for t…

  • Critical 9.8
    CVE-2024-42812 EPSS 16%

    In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID f…

  • Critical 9.8
    CVE-2024-42815

    In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the…