Skip to content
OpenAdvisories

Archive

23 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /23 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

37 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-38207

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 6.5
    CVE-2024-45190

    Mage AI pipeline interaction request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

    mage-ai PyPI
  • Medium 6.5
    CVE-2024-45189

    Mage AI git content request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

    mage-ai PyPI
  • Medium 6.5
    CVE-2024-45188

    Mage AI file content request remote arbitrary file leak

    Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request

    mage-ai PyPI
  • Medium 4.8
    CVE-2024-7427

    Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Network Node Manager i (NNMi) could allow Cross-Site Scripting (XSS).This issue affects Network Node Manager i (NNMi): 2022.11, 2023.05, 23.…

    OpenText Network Node Manager i (NNMi)
  • Medium 4.8
    CVE-2024-7428

    Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi).

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in OpenText™ Network Node Manager i (NNMi) allows URL Redirector Abuse.This issue affects Network Node Manager i (NNMi): 2022.11, 2023.05, 23.4, 24.2.

    OpenText Network Node Manager i (NNMi)
  • Medium 5.4
    CVE-2024-41841

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41847

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41844

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 4.1
    CVE-2024-41849

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the …

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41845

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41875

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41848

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41843

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41876

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41846

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41877

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2024-41878

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to inject and execute arbitrary JavaScript code within the context of the user's browser sess…

    Adobe Adobe Experience Manager
  • Medium 4.8
    CVE-2024-41842

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

    Adobe Adobe Experience Manager
  • Medium 6.1
    CVE-2024-43794

    OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

    OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially …

    OpenSearch security-dashboards-plugin
  • Medium 6.5
    CVE-2024-42364

    homepage DNS rebinding vulnerability (GHSL-2024-096)

    Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1 is vulnerable to DNS rebinding. Homepage is setup without certificate and authentication by default, leaving it to vulnerable to DNS rebin…

    gethomepage homepage
  • Medium 4.3
    CVE-2024-8112

    thinkgem JeeSite Cookie login cross site scripting

    A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument skinName leads to cross site scripting. T…

    thinkgem JeeSite
  • Medium 6.3
    CVE-2024-41150

    Stored XSS

    An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; Suppor…

    ManageEngine ServiceDesk Plus MSP SupportCenter Plus ServiceDesk Plus
  • Medium 6.8
    CVE-2024-7986

    Rockwell Automation ThinManager® ThinServer™ Information Disclosure

    A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junc…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Medium 6.4
    CVE-2024-5502

    Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitizatio…

    piotnetdotcom Piotnet Addons For Elementor Web / CMS
  • Medium 6.3
    CVE-2024-38807

    CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader

    Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in…

    Spring Spring Boot libspring-java libspring-java Debian Ubuntu Maven
  • Medium 4.3
    CVE-2024-43105

    Excessive Resource Consumption via `/export`

    Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once.

    Mattermost Mattermost github.com/mattermost/mattermost-plugin-channel-export Go
  • Medium 6.1
    CVE-2024-6715

    Ditty 3.1.39-3.1.45 - Author+ Stored XSS

    The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue (https://wpscan.com/vulnerability/80a9eb3a-2cb1-4844-9004-ba2554b2d46c/) in v3.1.39

    Web / CMS
  • Medium 4.8
    CVE-2024-3282

    WP Table Builder <= 1.5.0 - Admin+ Stored XSS

    The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed…

    Web / CMS
  • Medium 4.8
    CVE-2024-40111 Public exploit

    A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulne…

  • Medium 6.5
    CVE-2024-44387

    Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.

  • Medium 5.4
    CVE-2024-42918

    itsourcecode Online Accreditation Management System contains a Cross Site Scripting vulnerability, which allows an atta…

  • Medium 6.1
    CVE-2024-42852 Scanner template

    Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary co…

  • Medium 5.4
    CVE-2024-42766

    Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.

  • Medium 6.1
    CVE-2024-37392

    A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0. The vulnerabi…

  • Medium 4.3
    CVE-2024-43031

    autMan v2.9.6 was discovered to contain an access control issue.

  • Medium 4.3
    CVE-2024-43032

    autMan v2.9.6 allows attackers to bypass authentication via a crafted web request.