Skip to content
OpenAdvisories

Archive

27 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /27 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-9291

    kalvinGit kvf-admin XML File cross site scripting

    A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=ueditor/config.json&action=uploadfile of the component XML F…

    kalvinGit kvf-admin
  • Low 3.0
    CVE-2024-45744

    TopQuadrant TopBraid EDG password manager stores external credentials insecurely

    TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can read edg-setup.properites and obtain the secret to decrypt external passwords stored in edg-vault.properties. An authenticated attacker coul…

    TopQuadrant TopBraid EDG
  • Low 3.3
    CVE-2024-9283

    RelaxedJS ReLaXed Pug to PDF Converter cross site scripting

    A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The explo…

    RelaxedJS ReLaXed relaxedjs npm
  • Low 2.4
    CVE-2024-9279

    funnyzpc Mee-Admin User Center index cross site scripting

    A vulnerability, which was classified as problematic, was found in funnyzpc Mee-Admin up to 1.6. This affects an unknown part of the file /mee/index of the component User Center. The manipulation of the argument User Nickname leads to cross site scripting. It…

    funnyzpc Mee-Admin
  • Low 3.5
    CVE-2024-9277

    Langflow HTTP POST Request utils.py redos

    A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of …

    langflow PyPI
  • Low 3.5
    CVE-2024-9276

    TMsoft MyAuth Gateway index.php cross site scripting

    A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attac…

    TMsoft MyAuth Gateway