Skip to content
OpenAdvisories

Archive

10 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /10 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2024-8190 Exploited Public exploit EPSS 89%

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 13, 2024
  • High 7.5
    CVE-2024-8232 Public exploit EPSS 13%

    iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type

    SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication.

    iniNet Solutions SpiderControl SCADA Web Server
  • High 8.8
    CVE-2024-8504 Public exploit EPSS 76%

    VICIdial Authenticated Remote Code Execution

    An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.

    VICIdial VICIdial
  • High 7.5
    CVE-2024-45590 Public exploit

    body-parser vulnerable to denial of service when url encoding is enabled

    body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denia…

    expressjs body-parser kubeflow-pipelines-apiserver kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  • High 7.2
    CVE-2024-44871 Public exploit EPSS 16%

    An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute …

  • High 8.0
    CVE-2024-44815 Public exploit

    Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user creden…

  • High 7.5
    CVE-2024-44867 Public exploit

    phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.