Skip to content
OpenAdvisories

Archive

16 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /16 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-45496

    Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

    A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing un…

    Red Hat Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.16 Red Hat OpenShift Container Platform 4.18 Go
  • Critical 9.1
    CVE-2024-7387

    Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

    A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable file…

    Red Hat Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.16 Red Hat OpenShift Container Platform 4.18 Go
  • Critical 10.0
    CVE-2024-44148

    This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app m…

    Apple macOS macOS
  • Critical 10.0
    CVE-2024-44146

    A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to…

    Apple macOS macOS
  • Critical 9.3
    CVE-2024-8752 Public exploit Scanner template EPSS 12%

    WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability

    The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system.

    Smart HMI WebIQ
  • Critical 9.2
    CVE-2024-6401

    SQLi in SFS Consulting's InsureE GL

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2.

    SFS Consulting InsureE GL
  • Critical 9.2
    CVE-2024-7104

    Remote Code Execution in SFS Consulting's ww.Winsure

    Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

    SFS Consulting ww.Winsure
  • Critical 9.2
    CVE-2024-7098

    XML Injection in SFS Consulting's ww.Winsure

    Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.

    SFS Consulting ww.Winsure
  • Critical 9.8
    CVE-2024-22399

    Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server

    Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending by…

    Apache Software Foundation Apache Seata org.apache.seata:seata-core Maven
  • Critical 9.8
    CVE-2024-45698

    D-Link WiFi router - OS Command Injection

    Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the…

    D-Link DIR-X4860 A1 Network devices
  • Critical 9.8
    CVE-2024-45697

    D-Link WiFi router - Hidden Functionality

    Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

    D-Link DIR-X4860 A1 Network devices
  • Critical 9.8
    CVE-2024-45695

    D-Link WiFi router - Stack-based Buffer Overflow

    The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

    D-Link DIR-X4860 A1 Network devices
  • Critical 9.8
    CVE-2024-45694

    D-Link WiFi router - Stack-based Buffer Overflow

    The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

    D-Link DIR-X4860 A1 DIR-X5460 A1 Network devices
  • Critical 9.1
    CVE-2024-46937

    An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Se…

  • Critical 9.1
    CVE-2024-46958

    In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may beco…

    nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • Critical 9.8
    CVE-2024-46451 Public exploit

    TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the d…

  • Critical 9.8
    CVE-2024-46419

    TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid…

  • Critical 9.8
    CVE-2024-45415

    The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity functi…

  • Critical 9.8
    CVE-2024-45414

    The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function.…