Skip to content
OpenAdvisories

Archive

30 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /30 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-8016

    The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution

    The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in widgets. This makes it possible for authenticated attackers, …

    The Events Calendar The Events Calendar Pro Web / CMS
  • Critical 9.1
    CVE-2024-3673 Public exploit Scanner template

    Web Directory Free < 1.7.3 - Unauthenticated LFI

    The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.

    Web / CMS
  • Critical 9.8
    CVE-2024-45488 Scanner template EPSS 51%

    One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to …

  • Critical 9.8
    CVE-2024-45490 Public exploit

    An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

    qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi