Skip to content
OpenAdvisories

Archive

8 October 2024

Vulnerabilities first published on this day (UTC), newest first.

85 results · Clear filters · Feed

  • Medium 4.4

    AccessTokenManager has an use after free vulnerability

    in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free.

  • Medium 5.5

    Liteos_a has an out-of-bounds Read vulnerability

    in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

  • Medium 4.9

    Adguard Home arbitrary file read vulnerability

    An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.

  • Medium 4.8

    PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to th…

  • Medium 5.3

    Django allows enumeration of user e-mail addresses

    An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset r…