Skip to content
OpenAdvisories

Archive

26 August 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-7313 Public exploit Scanner template

    Shield Security < 20.0.6 - Reflected XSS

    The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

  • Critical 9.8
    CVE-2024-45265 Public exploit

    A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to ex…

  • Critical 9.8
    CVE-2024-45256 Public exploit

    An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to over…

  • High 7.5
    CVE-2024-45241 Public exploit Scanner template EPSS 14%

    A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allo…