Skip to content
OpenAdvisories

Archive

2 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /2 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

92 results · Feed

  • High 7.5
    CVE-2024-33662

    Portainer improperly uses an encryption algorithm in the AesEncrypt function

    Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.

    github.com/portainer/portainer Go
  • Critical 9.8
    CVE-2024-24117

    Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to …

  • Critical 9.8
    CVE-2024-24122

    A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an at…

  • Critical 9.8
    CVE-2024-24116 Scanner template EPSS 28%

    An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the sys…

  • High 8.8
    CVE-2024-46626 Public exploit

    OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload.

  • Medium 4.8
    CVE-2024-45964

    Zenario Cross Site Scripting in the Image library

    Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

    tribalsystems/zenario Packagist
  • Critical 10.0
    CVE-2024-45519 Exploited Public exploit Scanner template EPSS 100%

    The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9…

    KEV Oct 3, 2024
  • Medium 6.4
    CVE-2024-45965

    Contao before 5.5.6 allows XSS via an SVG document. This affects (in contao/core-bundle in Composer) 4.x before 4.13.54…

    contao contao
  • Medium 4.7
    CVE-2024-45962

    October allows an admin account to upload PDF containing malicious JavaScript

    October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a…

    october/october Packagist
  • Medium 4.8
    CVE-2024-45960

    Zenario allows authenticated admin users to upload PDF files containing malicious code

    Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.

    tribalsystems/zenario Packagist
  • Critical 9.8
    CVE-2024-45186

    FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.

  • High 8.1
    CVE-2024-41290 Public exploit

    FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.