Skip to content
OpenAdvisories

Archive

16 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /16 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-1578

    Multiple MiCard PLUS card reader dropped characters

    The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assi…

    Rebranded by NT-ware (originally developed and provided by rf IDEAS) MiCard PLUS Ci MiCard PLUS BLE
  • Medium 4.5
    CVE-2024-45833

    Mobile password gets saved in dictionary under conditions

    Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the mas…

    Mattermost Mattermost
  • Medium 5.3
    CVE-2024-39613

    RCE in desktop app in Windows by local attacker

    Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machi…

    Mattermost Mattermost mattermost-desktop npm
  • Medium 6.5
    CVE-2024-8780

    The SYSCOM Group OMFLOW - Improper Authorization for Data Query Function

    OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of other users.

    The SYSCOM Group OMFLOW
  • Medium 6.5
    CVE-2024-8778

    The SYSCOM Group OMFLOW - Arbitrary File Read

    OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.

    The SYSCOM Group OMFLOW
  • Medium 6.1
    CVE-2024-8776

    INTUMIT SmartRobot - Cross-site Scripting

    SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.

    INTUMIT SmartRobot
  • Medium 5.6
    CVE-2024-8880

    playSMS Template index.php code injection

    A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=core_auth&route=forgot&op=forgot of the component Template Handler. The manipulation of the a…

  • Medium 4.7
    CVE-2024-42794

    Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.

  • Medium 4.2
    CVE-2024-42795

    An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_us…

  • Medium 5.9
    CVE-2024-42796

    An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Managemen…