Skip to content
OpenAdvisories

Archive

12 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /12 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-6678 Public exploit

    Authentication Bypass by Spoofing in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain ci…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2024-8522 Public exploit Scanner template EPSS 63%

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 10.0
    CVE-2024-8529 Public exploit Scanner template EPSS 12%

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on t…

    ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS
  • Critical 10.0
    CVE-2024-29847 Public exploit EPSS 52%

    Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allow…

    ivanti EPM Network devices
  • Critical 9.1
    CVE-2024-40457 Public exploit

    No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: …