Skip to content
OpenAdvisories

Archive

19 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /19 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-7928 Public exploit Scanner template EPSS 17%

    FastAdmin lang path traversal

    A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attac…

  • Critical 9.1
    CVE-2024-43400 Public exploit

    XWiki Platform allows XSS through XClass name in string properties

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or Programming rights to craft a URL pointing to a page with arbitrary JavaScript. This requires social engineer …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-oldcore Maven
  • Critical 9.8
    CVE-2024-6330 Public exploit

    GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

    The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

    Web / CMS
  • Medium 5.3
    CVE-2024-35538 Public exploit

    Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP…

  • Medium 6.5
    CVE-2024-35539 Public exploit

    Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerabi…

  • High 7.5
    CVE-2024-44083 Public exploit

    ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jum…

  • Medium 6.1
    CVE-2024-23729 Public exploit

    The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute…

  • High 7.5
    CVE-2024-42657 Public exploit

    An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information …

  • High 8.8
    CVE-2024-42658 Public exploit

    An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information …