Skip to content
OpenAdvisories

Archive

14 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /14 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 2.9
    CVE-2024-30120

    HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application

    HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application.

    HCL Software DRYiCE Optibot Reset Station
  • Low 3.7
    CVE-2024-30119

    HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header

    HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacker to intercept or manipulate data during redirection.

    HCL Software DRYiCE Optibot Reset Station
  • Low 3.5
    CVE-2024-37887

    Nextcloud Server's events information leaked with shared calendars on recurrence exceptions

    Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Ser…

    Nextcloud security-advisories
  • Low 3.8
    CVE-2024-37885

    Code injection in Nextcloud Desktop Client for macOS

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the envirome…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2024-37884

    Nextcloud Server's users can delete old versions of read-only shared files

    Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.12 or 27.1.7 or 28…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2024-37315

    Nextcloud Server's read-only users can restore old versions

    Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2024-37314

    Nextcloud Photos' shared albums have no restriction on photo removal

    Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

    Nextcloud security-advisories
  • Low 3.8
    CVE-2024-36287

    Bypass of TCC restrictions on macOS

    Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

    Mattermost Mattermost mattermost-desktop tcc Ubuntu npm
  • Low 3.1
    CVE-2024-5469

    Uncontrolled Resource Consumption in GitLab

    DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests.

    GitLab GitLab gitlab Web / CMS Ubuntu