Skip to content
OpenAdvisories

Archive

27 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /27 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-5991

    Buffer overread in domain name matching

    In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL …

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2024-7720

    HP Security Manager - Potential Remote Code Execution

    HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries.

    HP HP Security Manager
  • Critical 9.8
    CVE-2024-6633

    Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

    The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The …

    Fortra FileCatalyst Workflow
  • Critical 9.3
    CVE-2024-7071

    Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection. This issue affects Brain Low-Code: before 2.1.…

    Brain Information Technologies Brain Low-Code
  • Critical 9.8
    CVE-2024-8181 Scanner template EPSS 45%

    Flowise Authentication Bypass

    An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

    FlowiseAI Flowise flowise npm
  • Critical 9.8
    CVE-2024-45321

    The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for networ…

    cpanminus cpanminus Debian Ubuntu