Skip to content
OpenAdvisories

Archive

20 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /20 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.3
    CVE-2024-47061

    Arbitrary DOM attributes in element.attributes and leaf.attributes in Platejs

    Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors. One longstanding feature of Plate is the ability to add custom DOM attributes to any element or leaf using the `attributes` proper…

    udecode plate @udecode/plate-core npm
  • High 7.6
    CVE-2024-42346 Public exploit

    Stored Cross Site Scripting (Stored XSS) in Galaxy

    Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascrip…

    galaxyproject galaxy galaxy-auth galaxy-data PyPI
  • High 7.3
    CVE-2024-9039

    SourceCodester Best House Rental Management System ajax.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/l…

    SourceCodester Best House Rental Management System
  • High 7.3
    CVE-2024-9037

    Codezips Internal Marks Calculation index.php sql injection

    A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely.…

    CodeZips Internal Marks Calculation
  • High 7.3
    CVE-2024-9035

    code-projects Blood Bank Management System Admin Login login.php sql injection

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads t…

    code-projects Blood Bank Management System
  • High 7.3
    CVE-2024-9034

    code-projects Patient Record Management System login.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attac…

    code-projects Patient Record Management System
  • High 8.1
    CVE-2024-41721

    bhyve(8) out-of-bounds read access via XHCI emulation

    An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.

    FreeBSD FreeBSD
  • High 8.4
    CVE-2023-47480

    An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () funct…

    puredata puredata Debian Ubuntu
  • High 7.5
    CVE-2024-46649

    eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.

  • High 7.5
    CVE-2024-46645

    eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.

  • High 7.5
    CVE-2024-46648

    eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.