Skip to content
OpenAdvisories

Archive

16 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /16 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Low 2.4
    CVE-2024-44180

    The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical ac…

    Apple iOS and iPadOS iOS
  • Low 3.3
    CVE-2024-40838

    A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15…

    Apple macOS macOS
  • Low 2.4
    CVE-2024-44139

    The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical ac…

    Apple iOS and iPadOS iOS
  • Low 3.3
    CVE-2024-40791

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and…

    Apple macOS iOS and iPadOS macOS iOS
  • Low 3.3
    CVE-2024-40830

    This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able…

    Apple iOS and iPadOS iOS
  • Low 3.1
    CVE-2024-6685

    Authorization Bypass Through User-Controlled Key in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to unauthorised group members.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low —
    GHSA-2326-pfpj-vx3h

    lexical-core has multiple soundness issues

    `RUSTSEC-2024-0377` contains multiple soundness issues: 1. [Bytes::read() allows creating instances of types with invalid bit patterns](https://github.com/Alexhuszagh/rust-lexical/issues/102) 1. [BytesIter::read() advances iterators out of bounds](https://git…

    lexical-core crates.io
  • Low 2.5
    CVE-2023-25546

    Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable deni…

  • Low 3.3
    CVE-2024-28170

    Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable…

  • Low 3.5
    CVE-2024-36261

    Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potential…

  • Low 3.7
    CVE-2024-39772

    Silent Desktop Screenshot Capture

    Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.

    Mattermost Mattermost mattermost-desktop npm
  • Low 2.5
    CVE-2024-45835

    Insufficient Electron Fuses Configuration

    Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.

    Mattermost Mattermost mattermost-desktop npm
  • Low 3.3
    CVE-2024-46970

    In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible

    JetBrains IntelliJ IDEA