Skip to content
OpenAdvisories

Archive

17 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /17 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2024-8957 Exploited EPSS 80%

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

    PTZOptics PT30X-SDI PT30X-NDI
    KEV Nov 4, 2024
  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    PTZOptics PT30X-NDI PT30X-SDI
    KEV Nov 4, 2024
  • High 7.5
    CVE-2024-38813 Exploited EPSS 17%

    Privilege escalation vulnerability

    The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

    Virtualization
    KEV Nov 20, 2024
  • Critical 9.8
    CVE-2024-38812 Exploited EPSS 55%

    Heap-overflow vulnerability

    The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to…

    Virtualization
    KEV Nov 20, 2024