Skip to content
OpenAdvisories

Archive

21 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /21 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-28987 Exploited Public exploit Scanner template EPSS 93%

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

    SolarWinds Web Help Desk
    KEV Oct 15, 2024
  • Critical 9.9
    CVE-2024-6386 Public exploit EPSS 26%

    WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection

    The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible …

    WPML WPML Web / CMS
  • Critical 9.8
    CVE-2024-28000 Public exploit Scanner template EPSS 68%

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

    LiteSpeed Technologies LiteSpeed Cache
  • Critical 9.8
    CVE-2024-5335

    Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection

    The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the _ultimate_store_kit…

    bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor Web / CMS
  • Critical 10.0
    CVE-2024-7854 Public exploit Scanner template

    Woo Inquiry <= 0.1 - Unauthenticated SQL Injection

    The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the existing SQL query. This makes it possib…

    sjhoo Woo Inquiry Web / CMS
  • Critical 9.8
    CVE-2024-40453 Public exploit

    squirrelly Code Injection vulnerability

    squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName.

    squirrelly npm
  • Critical 9.8
    CVE-2024-42777

    An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management Sy…

  • Critical 9.8
    CVE-2024-42784

    A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allo…

  • Critical 9.8
    CVE-2024-42781

    A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote…