Skip to content
OpenAdvisories

Archive

29 August 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-35133 Public exploit

    IBM Security Verify Access HTTP open redirect

    IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploi…

  • Medium 5.3
    CVE-2024-45440 Public exploit Scanner template

    Drupal Full Path Disclosure

    core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

  • Medium 6.1
    CVE-2024-41358 Public exploit

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.