Skip to content
OpenAdvisories

Archive

26 September 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-47176 Public exploit Scanner template EPSS 51%

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trus…

  • Medium 6.7
    CVE-2024-6769 Public exploit

    Medium to High Integrity Privilege Escalation in Microsoft Windows

    A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medi…

  • Medium 5.1
    CVE-2024-8118 Public exploit

    Grafana alerting wrong permission on datasource rule write endpoint

    In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.