Skip to content
OpenAdvisories

Archive

23 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /23 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-9014 Public exploit Scanner template

    OAuth2 client id and secret exposed through the web browser in pgAdmin 4

    pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Critical 9.0
    CVE-2024-47066 Public exploit EPSS 12%

    Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

    Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an externa…

    lobehub lobe-chat @lobehub/chat npm
  • Medium 6.8
    CVE-2024-23922 Public exploit

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required …

    Sony XAV-AX5500
  • Medium 5.4
    CVE-2023-46948 Public exploit

    A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote atta…

  • High 7.5
    CVE-2024-42861 Public exploit

    An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafte…

    linuxptp linuxptp linuxptp Debian Ubuntu Azure Linux