Skip to content
OpenAdvisories

Archive

19 February 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-1651 Public exploit EPSS 34%

    Torrentpier 2.4.1 - RCE

    Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

  • Critical 9.7
    CVE-2023-50257 Public exploit

    Disconnect Vulnerability in RTPS Packets Used by SROS2

    eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and `guid` values used to disconnect between…

  • Medium 6.8
    CVE-2024-1346 Public exploit

    Weak MySQL database root password in LaborOfficeFree

    Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

  • Medium 5.5
    CVE-2024-26308 Public exploit

    Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.