Skip to content
OpenAdvisories

Archive

9 October 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2024-3656 Public exploit Scanner template

    Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities

    A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or sys…

  • High 8.2
    CVE-2024-9466 Public exploit EPSS 14%

    Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure

    A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.