Skip to content
OpenAdvisories

Archive

20 September 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2024-47062 Public exploit Scanner template

    Multiple SQL Injections and ORM Leak in navidrome

    Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furtherm…