Skip to content
OpenAdvisories

Archive

17 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-8957 Exploited EPSS 80%

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

    KEV Nov 4, 2024
  • High 7.5
    CVE-2024-38813 Exploited EPSS 17%

    Privilege escalation vulnerability

    The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

    KEV Nov 20, 2024