Skip to content
OpenAdvisories

Archive

26 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /26 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.6
    CVE-2024-47175 Public exploit EPSS 64%

    libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

    CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other funct…

    OpenPrinting libppd cups cups Debian Ubuntu Alpine
  • High 8.6
    CVE-2024-47076 Public exploit EPSS 80%

    libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

    CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetP…

    OpenPrinting libcupsfilters cups-filters cups-filters Debian Ubuntu
  • Medium 5.3
    CVE-2024-47176 Public exploit Scanner template EPSS 51%

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trus…

    OpenPrinting cups-browsed cups-filters cups-filters Debian Ubuntu
  • Medium 6.7
    CVE-2024-6769 Public exploit

    Medium to High Integrity Privilege Escalation in Microsoft Windows

    A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medi…

    Microsoft Windows Server 2019 Windows Server 2022 Windows Server 2016 Windows
  • High 8.8
    CVE-2024-47179 Public exploit

    RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover.

    RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00…

    DIYgod RSSHub
  • Medium 5.1
    CVE-2024-8118 Public exploit

    Grafana alerting wrong permission on datasource rule write endpoint

    In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine
  • Critical 9.3
    CVE-2024-9166 Public exploit Scanner template

    OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

    The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

    Atelmo Atemio AM 520 HD Full HD Satellite Receiver
  • Critical 9.0
    CVE-2024-0132 Public exploit EPSS 41%

    NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

    NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases wh…

    NVIDIA Container Toolkit GPU Operator nvidia-container-toolkit Azure Linux Wolfi Go
  • High 7.3
    CVE-2024-40507 Public exploit

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via …

  • High 7.3
    CVE-2024-40508 Public exploit

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via …

  • High 7.3
    CVE-2024-40506 Public exploit

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via …