Skip to content
OpenAdvisories

Archive

14 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /14 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2023-50780 Public exploit EPSS 17%

    Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans

    Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to…

    Apache Software Foundation Apache ActiveMQ Artemis org.apache.activemq:artemis-cli Maven
  • Medium 6.5
    CVE-2024-48120 Public exploit

    X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject m…

  • Medium 4.3
    CVE-2024-46528 Public exploit

    KubeSphere IDOR vulnerability

    An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere 4.x before 4.1.3 and 3.x through 3.4.1 and KubeSphere Enterprise 4.x before 4.1.3 and 3.x through 3.5.0 allows low-privileged authenticated attackers to access sensitive resources without …

    github.com/kubesphere/kubesphere Go
  • Medium 6.6
    CVE-2024-41997 Public exploit

    An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vuln…