Skip to content
OpenAdvisories

Archive

21 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-42323 Public exploit Scanner template

    Apache HertzBeat: RCE by snakeYaml deser load malicious xml

    SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to versi…

  • High 8.8

    Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can b…