Skip to content
OpenAdvisories

Archive

19 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /19 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-43400 Public exploit

    XWiki Platform allows XSS through XClass name in string properties

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or Programming rights to craft a URL pointing to a page with arbitrary JavaScript. This requires social engineer …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-oldcore Maven
  • Critical 9.8
    CVE-2024-6330 Public exploit

    GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

    The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

    Web / CMS