Skip to content
OpenAdvisories

Archive

1 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /1 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 4.3
    CVE-2024-45270

    WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero…

    Sayful Islam Carousel Slider Web / CMS
  • Medium 4.3
    CVE-2024-45269

    WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Caro…

    Sayful Islam Carousel Slider Web / CMS
  • Low 3.5
    CVE-2024-8370

    Grocy SVG File Upload recipepictures cross site scripting

    A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the file /api/files/recipepictures/ of the component SVG File Upload Handler. The manipulation of the argument force_serve_as with the input p…

  • Unscored —
    RUSTSEC-2024-0384

    `instant` is unmaintained

    This crate is no longer maintained, and the author recommends using the maintained [`web-time`] crate instead. [`web-time`]: https://crates.io/crates/web-time

    instant crates.io
  • Unscored —
    RUSTSEC-2024-0370

    proc-macro-error is unmaintained

    proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email. proc-macro-error also depends on `syn 1.x`, which may be bringing duplicate dependenci…

    proc-macro-error crates.io
  • Medium 4.2
    CVE-2024-5053

    Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification

    The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized Malichimp API key update due to an insufficient capability check on the verifyRequest function in all versions up to, …

    techjewel Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • High 7.3
    CVE-2024-8368

    code-projects Hospital Management System Login index.php sql injection

    A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql…

    code-projects Hospital Management System
  • Low 3.5
    CVE-2024-8367

    HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection

    A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/Notifi…

    HM Courts & Tribunals Service Probate Back Office
  • Critical 9.8
    CVE-2024-45508

    HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leadin…

    htmldoc htmldoc Debian Ubuntu
  • Critical 9.1
    CVE-2024-45522

    Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occu…

  • Critical 9.8
    CVE-2024-45509

    In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in …