Skip to content
OpenAdvisories

Archive

9 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /9 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Medium 6.7
    CVE-2024-27383

    An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. …

  • Medium 4.4
    CVE-2024-27364

    An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exyno…

  • Medium 6.7
    CVE-2024-27387

    An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. …

  • Medium 6.1
    CVE-2024-44085

    ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use o…

  • Critical 9.8
    CVE-2024-44721

    SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.

  • High 7.5
    CVE-2024-44375

    D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.

  • Critical 9.8
    CVE-2024-44411

    D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.

  • High 7.2
    CVE-2024-44725

    AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.

  • Critical 9.8
    CVE-2024-44902 Public exploit

    ThinkPHP deserialization vulnerability

    A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

    topthink/framework Packagist
  • High 8.8
    CVE-2024-44335 EPSS 12%

    D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04…

  • High 7.2
    CVE-2024-44724

    AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_…

  • High 7.5
    CVE-2024-44720

    SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.

  • Critical 9.8
    CVE-2024-44410

    D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.

  • Critical 9.8
    CVE-2024-44849 Public exploit Scanner template EPSS 46%

    Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.

  • High 8.8
    CVE-2024-44334 EPSS 32%

    D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24…

  • High 8.8
    CVE-2024-44333 EPSS 12%

    D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24…

  • Medium 6.3
    CVE-2024-42759

    An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplent…