Skip to content
OpenAdvisories

Archive

2 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /2 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9441 Public exploit EPSS 53%

    Linear eMerge e3-Series Forgot Password Command Injection

    The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over…

    Linear eMerge e3-Series
  • Critical 9.9
    CVE-2024-20432

    Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability

    A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device.   This vulnerability is due to im…

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2024-44097

    According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the applic…

    Google Android Android
  • Critical 9.1
    CVE-2024-35293

    Schneider Elektronik Series 700 prone to missing authentication for critical reset function

    An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS.

    Schneider Elektronik Series 700 ICS / OT
  • Critical 9.8
    CVE-2024-24117

    Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to …

  • Critical 9.8
    CVE-2024-24122

    A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an at…

  • Critical 9.8
    CVE-2024-24116 Scanner template EPSS 28%

    An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the sys…

  • Critical 10.0
    CVE-2024-45519 Exploited Public exploit Scanner template EPSS 100%

    The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9…

    KEV Oct 3, 2024
  • Critical 9.8
    CVE-2024-45186

    FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.