Skip to content
OpenAdvisories

Archive

10 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /10 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47167 Public exploit

    SSRF in the path parameter of /queue/join in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server…

    gradio-app gradio gradio PyPI
  • Critical 9.2
    CVE-2023-25581 Public exploit

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core…

    pac4j pac4j org.pac4j:pac4j-core Maven
  • Medium 5.9
    CVE-2024-9796 Public exploit Scanner template

    WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection

    The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

    Web / CMS