Skip to content
OpenAdvisories

Archive

7 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /7 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2024-43363 Public exploit EPSS 36%

    Remote code execution via Log Poisoning in Cacti

    Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to c…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 7.0
    CVE-2024-31449 Public exploit

    Lua library commands may lead to stack overflow and RCE in Redis

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in a…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2024-9570 Public exploit

    D-Link DIR-619L B1 formEasySetTimezone buffer overflow

    A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formEasySetTimezone of the file /goform/formEasySetTimezone. The manipulation of the argument curTime leads to buffer overflow. The attack …

    D-Link DIR-619L B1 Network devices
  • High 8.4
    CVE-2024-38399 Public exploit

    Use After Free in Graphics

    Memory corruption while processing user packets to generate page faults.

    Qualcomm Snapdragon
  • High 8.4
    CVE-2024-46278 Public exploit

    Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

  • Medium 6.1
    CVE-2024-42831 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to e…