Skip to content
OpenAdvisories

Archive

31 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /31 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-8366

    code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting

    A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument …

    code-projects Pharmacy Management System
  • Medium 5.3
    CVE-2022-4539 Public exploit

    Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

    The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restr…

    cyberlord92 Web Application Firewall – website security Web / CMS
  • Medium 5.3
    CVE-2022-4536

    IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

    The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restricti…

    youtag Two-factor authentication (formerly IP Vault) Web / CMS
  • Medium 6.4
    CVE-2024-8108

    Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

    The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    mihail-barinov Share This Image Web / CMS
  • Medium 5.3
    CVE-2022-4100

    WP Cerber Security <= 9.4 - IP Protection Bypass

    The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked t…

    gioni WP Cerber Security, Anti-spam & Malware Scan Web / CMS
  • Medium 4.4
    CVE-2024-0111

    NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect…

    NVIDIA CUDA Toolkit nvidia-cuda-toolkit nvidia-cuda-toolkit Debian Ubuntu
  • Medium 4.4
    CVE-2024-0110

    NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by pas…

    NVIDIA CUDA Toolkit nvidia-cuda-toolkit nvidia-cuda-toolkit Debian Ubuntu
  • Medium 6.7
    CVE-2024-39579

    Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A loca…

    Dell PowerScale OneFS
  • Medium 6.4
    CVE-2024-8276

    WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute

    The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and including, 1.4.4 due to insufficient i…

    WPZOOM WPZOOM Portfolio Lite – Filterable Portfolio Plugin Web / CMS
  • Medium 6.3
    CVE-2024-39578

    Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability.…

    Dell PowerScale OneFS
  • Medium 6.1
    CVE-2024-3886

    tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]

    The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping within the on_ajax_check_envato_cod…

    tagDiv tagDiv Composer Web / CMS
  • Medium 6.1
    CVE-2024-5212

    tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]

    The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping within the on_ajax_register_forum_u…

    tagDiv tagDiv Composer Web / CMS