Skip to content
OpenAdvisories

Archive

September 2024

Vulnerabilities first published in this month (UTC), newest first.

← August 2024 2024 / September October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.4
    CVE-2024-8963 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted fun…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 19, 2024
  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    PTZOptics PT30X-NDI PT30X-SDI
    KEV Nov 4, 2024
  • Critical 9.8
    CVE-2024-38812 Exploited EPSS 55%

    Heap-overflow vulnerability

    The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to…

    Virtualization
    KEV Nov 20, 2024
  • Critical 9.8
    CVE-2024-40711 Exploited · Ransomware Public exploit Scanner template EPSS 90%

    A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exe…

    Veeam Backup and Recovery
    KEV Oct 17, 2024
  • Critical 9.8
    CVE-2024-20439 Exploited Scanner template EPSS 97%

    A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an …

    Cisco Cisco Smart License Utility Network devices
    KEV Mar 31, 2025
  • Critical 9.8
    CVE-2024-45195 Exploited Public exploit Scanner template EPSS 100%

    Apache OFBiz: Confused controller-view authorization logic (forced browsing)

    Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Feb 4, 2025