Skip to content
OpenAdvisories

Archive

1 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /1 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

129 results · Feed

  • Medium 6.8
    CVE-2024-39607

    OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to th…

    ELECOM WRC-X3000GS2A-B WRC-X3000GS2-W WRC-X3000GS2-B
  • Medium 6.8
    CVE-2024-34021

    Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafte…

    ELECOM WMC-X1800GST-B WRC-X3200GST3-B WRC-G01-W
  • High 8.8
    CVE-2024-7333

    TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow

    A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer …

    Toto Link N350RT
  • Critical 9.8
    CVE-2024-7332 Scanner template EPSS 21%

    TOTOLINK CP450 Telnet Service product.ini hard-coded password

    A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password…

    Toto Link CP450
  • High 8.8
    CVE-2024-7331

    TOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow

    A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The att…

    Toto Link A3300R
  • High 7.5
    CVE-2024-41260

    NetBird uses a static initialization vector (IV)

    A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

    github.com/netbirdio/netbird Go
  • High 7.5
    CVE-2024-41265

    cortex establishes TLS connections with `InsecureSkipVerify` set to `true`

    A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.

    github.com/cortexproject/cortex github.com/cortexlabs/cortex Go
  • High 7.5
    CVE-2024-41264

    casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification

    An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.

    github.com/casdoor/casdoor Go
  • Critical 9.1
    CVE-2024-41259

    Navidrome uses MD5 hashing algorithm

    Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information.

    github.com/navidrome/navidrome Go