Skip to content
OpenAdvisories

Archive

23 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /23 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-7954 Public exploit Scanner template EPSS 90%

    SPIP porte_plume Plugin Arbitrary PHP Execution

    The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.

    SPIP SPIP spip spip Debian Ubuntu
  • Critical 9.8
    CVE-2024-43883

    usb: vhci-hcd: Do not drop references before new references are gained

    In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.3
    CVE-2024-40766 Exploited · Ransomware EPSS 18%

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

    SonicWall SonicOS Network devices
    KEV Sep 9, 2024
  • Critical 9.1
    CVE-2024-33852

    A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 2…

  • Critical 9.1
    CVE-2024-33853

    A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before…

  • Critical 9.1
    CVE-2024-33854

    A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x be…

  • Critical 9.8
    CVE-2024-32501 EPSS 19%

    A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.…

  • Critical 9.8
    CVE-2024-42765

    A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attacke…

  • Critical 9.4
    CVE-2024-42764

    Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.

  • Critical 9.1
    CVE-2024-42914

    A host header injection vulnerability exists in the forgot password functionality of ArrowCMS version 1.0.0. By sending…

  • Critical 9.8
    CVE-2024-42531

    Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting …