Skip to content
OpenAdvisories

Archive

9 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /9 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-6795

    Vulnerability in Baxter Connex Health Portal

    In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Conn…

    Baxter Connex Health Portal
  • Critical 9.3
    CVE-2024-42500

    HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services.

    Hewlett Packard Enterprise (HPE) HPE HP-UX ONCplus
  • Critical 9.7
    CVE-2024-40643

    Joplin has a parsing error leading to Cross-site Scripting (XSS)

    Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.

    laurent22 joplin
  • Critical 9.9
    CVE-2024-37288

    A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document co…

    Elastic Kibana
  • Critical 9.8
    CVE-2024-8584

    LEARNING DIGITAL Orca HCM - Missing Authentication

    Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in.

    Learning Digital Orca HCM
  • Critical 9.8
    CVE-2024-44721

    SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.

  • Critical 9.8
    CVE-2024-44411

    D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.

  • Critical 9.8
    CVE-2024-44902 Public exploit

    ThinkPHP deserialization vulnerability

    A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

    topthink/framework Packagist
  • Critical 9.8
    CVE-2024-44410

    D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.

  • Critical 9.8
    CVE-2024-44849 Public exploit Scanner template EPSS 46%

    Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.