Skip to content
OpenAdvisories

Archive

31 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /31 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2024-24747 Public exploit EPSS 34%

    MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

    MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for `s3:*` actions, but also `admin:*` actions. Which means unless somewhere above in the access-key hierarchy, the `admin`…

    minio minio github.com/minio/minio minio Alpine Go
  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 8.2
    CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

    ivanti IPS ICS Network devices
    KEV Jan 31, 2024
  • High 8.4
    CVE-2023-6246 Public exploit

    Glibc: heap-based buffer overflow in __vsyslog_internal()

    A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to N…

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Wolfi
  • High 7.3
    CVE-2024-1112 Public exploit

    Buffer Overflow Vulnerability in Resource Hacker

    Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument.

    Angus Johnson Resource Hacker
  • High 7.8
    CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV May 30, 2024