Skip to content
OpenAdvisories

Archive

10 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /10 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8503 Public exploit Scanner template EPSS 79%

    VICIdial Unauthenticated SQL Injection

    An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database.

    VICIdial VICIdial
  • Critical 10.0
    CVE-2024-45409 Public exploit EPSS 12%

    The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

    The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by t…

    SAML-Toolkits ruby-saml ruby-saml ruby-saml Debian Ubuntu RubyGems