Skip to content
OpenAdvisories

Archive

24 September 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.8

    TCC Bypass in Cursor's macOS Application

    Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being…

  • Low 3.7

    IBM Aspera Console information disclosure

    IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie.

  • Low 3.7
    CVE-2023-5359 Public exploit

    W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

    The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to…