Skip to content
OpenAdvisories

Archive

20 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /20 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.4
    CVE-2024-47062 Public exploit Scanner template

    Multiple SQL Injections and ORM Leak in navidrome

    Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furtherm…

    navidrome navidrome github.com/navidrome/navidrome Go
  • Critical 9.8
    CVE-2024-9043

    Cellopoint Secure Email Gateway - Buffer Overflow

    Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.

    Cellopoint Secure Email Gateway
  • Critical 9.8
    CVE-2024-8853

    Webo-facto <= 1.40 - Unauthenticated Privilege Escalation

    The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves a…

    jeremieglotin Webo-facto Web / CMS
  • Critical 9.8
    CVE-2024-46103

    SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.

  • Critical 9.8
    CVE-2024-46640

    SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a chec…

  • Critical 9.8
    CVE-2024-46652

    Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

  • Critical 9.8
    CVE-2024-46101

    GDidees CMS <= v3.9.1 has a file upload vulnerability.

  • Critical 9.8
    CVE-2024-45489

    Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by…