Skip to content
OpenAdvisories

Archive

6 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /6 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 1.0
    CVE-2024-38642

    QuMagie

    An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in …

    QNAP Systems QuMagie
  • Low 3.5
    CVE-2024-27125

    Helpdesk

    A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version:…

    QNAP Systems Helpdesk
  • Low 2.6
    CVE-2024-32771

    QTS, QuTS hero

    An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network authenticated administrators to perform an arbitrary numbe…

    QNAP Systems QTS QuTS hero QuTScloud
  • Low 3.5
    CVE-2024-6792

    WP ULike < 4.7.2.1 - Subscriber+ Stored-XSS

    The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.

    Web / CMS