|
cve-2024-28072
|
5.7 (v3.1)
|
Arbitrary File Overwrite Vulnerability
|
SolarWinds
|
Serv-U
|
2024-05-03T07:50:00.696Z |
2024-08-02T00:48:48.228Z |
|
cve-2024-28094
|
8.8 (v3.1)
|
Blind SQL Injection in Chat functionality in Schoolbox
|
Schoolbox Pty Ltd
|
Schoolbox
|
2024-03-07T03:14:25.843Z |
2024-08-02T00:48:48.241Z |
|
cve-2024-28076
|
7 (v3.1)
|
SolarWinds Platform Arbitrary Open Redirection Vulnerability
|
SolarWinds
|
SolarWinds Platform
|
2024-04-18T09:05:42.592Z |
2024-08-02T00:48:48.245Z |
|
cve-2024-28095
|
7.3 (v3.1)
|
Stored Cross-site Scripting in News functionality in S…
|
Schoolbox Pty Ltd
|
Schoolbox
|
2024-03-07T03:17:02.562Z |
2024-08-02T00:48:48.247Z |
|
cve-2024-28075
|
9 (v3.1)
|
SolarWinds ARM Deserialization of Untrusted Data Remot…
|
SolarWinds
|
Access Rights Manager
|
2024-05-09T12:42:44.975Z |
2024-08-02T00:48:48.249Z |
|
cve-2024-28109
|
|
Potential XSLT injection vulnerability when using poli…
|
veraPDF
|
veraPDF-library
|
2024-03-28T13:19:39.906Z |
2024-08-02T00:48:48.254Z |
|
cve-2024-28073
|
8.4 (v3.1)
|
SolarWinds Serv-U Directory Traversal Remote Code Exec…
|
SolarWinds
|
ServU
|
2024-04-17T16:58:12.353Z |
2024-08-02T00:48:48.255Z |
|
cve-2024-28108
|
|
phpMyFAQ Stored HTML Injection at contentLink
|
thorsten
|
phpMyFAQ
|
2024-03-25T18:52:19.325Z |
2024-08-02T00:48:48.813Z |
|
cve-2024-28096
|
7.3 (v3.1)
|
Stored Cross-site Scripting in Class functionality in …
|
Schoolbox Pty Ltd
|
Schoolbox
|
2024-03-07T03:18:33.101Z |
2024-08-02T00:48:48.893Z |
|
cve-2024-28132
|
4.4 (v3.1)
|
BIG-IP NEXT CNF vulnerability
|
F5
|
BIG-IP Next CNF
|
2024-05-08T15:01:27.035Z |
2024-08-02T00:48:49.036Z |
|
cve-2024-28118
|
|
Grav vulnerable to Server Side Template Injection (SSTI)
|
getgrav
|
grav
|
2024-03-21T21:55:11.788Z |
2024-08-02T00:48:49.053Z |
|
cve-2024-28148
|
4.3 (v3.1)
|
Apache Superset: Incorrect datasource authorization on…
|
Apache Software Foundation
|
Apache Superset
|
2024-05-07T13:33:42.137Z |
2024-08-02T00:48:49.154Z |
|
cve-2024-28120
|
|
API key leak in codeium-chrome
|
Exafunction
|
codeium-chrome
|
2024-03-11T21:14:22.675Z |
2024-08-02T00:48:49.158Z |
|
cve-2024-28137
|
7.8 (v3.1)
|
PHOENIX CONTACT: privilege escalation due to a TOCTOU…
|
PHOENIX CONTACT
|
CHARX SEC-3000
|
2024-05-14T08:10:06.014Z |
2024-08-02T00:48:49.163Z |
|
cve-2024-28164
|
5.3 (v3.1)
|
Information Disclosure vulnerability in SAP NetWeaver …
|
SAP_SE
|
SAP NetWeaver AS Java
|
2024-06-11T02:18:48.019Z |
2024-08-02T00:48:49.198Z |
|
cve-2024-28133
|
7.8 (v3.1)
|
PHOENIX CONTACT: Privilege escalation in CHARX Series
|
PHOENIX CONTACT
|
CHARX SEC-3000
|
2024-05-14T08:09:11.136Z |
2024-08-02T00:48:49.201Z |
|
cve-2024-28113
|
|
Open redirection using the return_url parameter in Pee…
|
peering-manager
|
peering-manager
|
2024-03-12T19:56:01.358Z |
2024-08-02T00:48:49.208Z |
|
cve-2024-28116
|
|
Server-Side Template Injection (SSTI) with Grav CMS se…
|
getgrav
|
grav
|
2024-03-21T21:44:29.489Z |
2024-08-02T00:48:49.256Z |
|
cve-2024-28173
|
4.3 (v3.1)
|
In JetBrains TeamCity between 2023.11 and 2023.11…
|
JetBrains
|
TeamCity
|
2024-03-06T16:52:10.211Z |
2024-08-02T00:48:49.258Z |
|
cve-2024-28134
|
7 (v3.1)
|
PHOENIX CONTACT: MitM attack gains privileges of the c…
|
PHOENIX CONTACT
|
CHARX SEC-3000
|
2024-05-14T08:09:24.900Z |
2024-08-02T00:48:49.289Z |
|
cve-2024-28111
|
|
CSV Injection in exported history CSV files
|
thinkst
|
canarytokens
|
2024-03-06T21:15:02.404Z |
2024-08-02T00:48:49.290Z |
|
cve-2024-28167
|
6.5 (v3.1)
|
Missing Authorization check in SAP Group Reporting Dat…
|
SAP_SE
|
SAP Group Reporting Data Collection (Enter Package Data)
|
2024-04-09T00:55:46.326Z |
2024-08-02T00:48:49.373Z |
|
cve-2024-28179
|
|
Jupyter Server Proxy's Websocket Proxying does not req…
|
jupyterhub
|
jupyter-server-proxy
|
2024-03-20T19:54:38.247Z |
2024-08-02T00:48:49.393Z |
|
cve-2024-28174
|
5.8 (v3.1)
|
In JetBrains TeamCity before 2023.11.4 presigned …
|
JetBrains
|
TeamCity
|
2024-03-06T16:52:10.853Z |
2024-08-02T00:48:49.417Z |
|
cve-2024-28186
|
|
SMTP Mail Credentials Disclosed in Error Log in freescout
|
freescout-helpdesk
|
freescout
|
2024-03-12T19:36:05.964Z |
2024-08-02T00:48:49.423Z |
|
cve-2024-28200
|
9.1 (v3.1)
|
N-central Authentication Bypass
|
N-able
|
N-central
|
2024-07-01T20:49:38.092Z |
2024-08-02T00:48:49.431Z |
|
cve-2024-28230
|
6.5 (v3.1)
|
In JetBrains YouTrack before 2024.1.25893 attachi…
|
JetBrains
|
YouTrack
|
2024-03-07T11:40:00.296Z |
2024-08-02T00:48:49.436Z |
|
cve-2024-28198
|
|
XML external entity (XXE) injection in OpenOLAT
|
OpenOLAT
|
OpenOLAT
|
2024-03-11T19:38:26.088Z |
2024-08-02T00:48:49.441Z |
|
cve-2024-28199
|
|
Cross-site Scripting (XSS) possible with maliciously f…
|
phlex-ruby
|
phlex
|
2024-03-11T22:50:38.789Z |
2024-08-02T00:48:49.443Z |
|
cve-2024-28246
|
|
KaTeX is missing normalization of the protocol in URLs…
|
KaTeX
|
KaTeX
|
2024-03-25T20:00:17.211Z |
2024-08-02T00:48:49.457Z |