Skip to content
OpenAdvisories

Archive

15 February 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2024-13488 Public exploit

    LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection

    The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of …

  • High 8.1

    Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit h…

  • High 8.8

    Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corr…

  • High 8.6

    Command or parameter injection via unique embedded switch SNMP commands.

    Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter in…