Skip to content
OpenAdvisories

Archive

17 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    KEV Nov 4, 2024
  • Critical 9.8
    CVE-2024-38812 Exploited EPSS 55%

    Heap-overflow vulnerability

    The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to…

    KEV Nov 20, 2024