Skip to content
OpenAdvisories

Archive

5 September 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-7591 Public exploit Scanner template EPSS 39%

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above

  • Critical 9.8
    CVE-2024-8465 Public exploit

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.

  • High 8.1
    CVE-2024-7627 Public exploit

    Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

    The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes …

  • Medium 6.5
    CVE-2024-45589 Public exploit

    RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts a…