Skip to content
OpenAdvisories

Archive

20 August 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.6
    CVE-2024-21689 Public exploit

    This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9…

  • Critical 9.8
    CVE-2024-43202 Public exploit

    Apache DolphinScheduler: Remote Code Execution Vulnerability

    Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.

  • Critical 10.0
    CVE-2024-5932 Public exploit Scanner template EPSS 77%

    GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

    The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for un…

  • High 7.6
    CVE-2024-35540 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts o…

  • Critical 9.8
    CVE-2024-42919 Public exploit

    eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.