Skip to content
OpenAdvisories

Archive

21 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /21 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

177 results · Feed

  • High 8.1
    CVE-2024-39344

    An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The Apttus_DocuApi__DocusignAuthentication…

  • Critical 9.8
    CVE-2024-40453 Public exploit

    squirrelly Code Injection vulnerability

    squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName.

    squirrelly npm
  • Medium 6.1
    CVE-2024-41572

    Learning with Texts (LWT) 2.0.3 is vulnerable to Cross Site Scripting (XSS). The application has a specific function th…

  • Medium 5.4
    CVE-2024-42550

    A cross-site scripting (XSS) vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management S…

  • High 8.8
    CVE-2024-42779

    An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Managemen…

  • Critical 9.8
    CVE-2024-42777

    An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management Sy…

  • Medium 5.4
    CVE-2024-42783

    Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker…

  • Critical 9.8
    CVE-2024-42784

    A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allo…

  • High 7.6
    CVE-2024-42782

    A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows a…

  • Critical 9.8
    CVE-2024-42781

    A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote…

  • High 7.6
    CVE-2024-42785

    A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows a…

  • High 8.8
    CVE-2024-42778

    An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Manage…

  • High 8.8
    CVE-2024-42786

    A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to…

  • Medium 4.6
    CVE-2024-42939

    A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to exec…

  • High 8.8
    CVE-2024-42780

    An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Managemen…

  • High 7.5
    CVE-2024-43022

    An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attacke…

  • High 8.0
    CVE-2024-43027

    DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5…