Skip to content
OpenAdvisories

Archive

15 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /15 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-21262 Public exploit

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are …

    Oracle MySQL Connectors mysql-connector-java Ubuntu
  • Critical 9.1
    CVE-2024-48914 Public exploit Scanner template EPSS 60%

    Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy

    Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbit…

    vendure-ecommerce vendure @vendure/asset-server-plugin npm
  • Low 3.7
    CVE-2024-9506 Public exploit

    Regular Expression Denial of Service (ReDoS)

    Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

    vue vue nextcloud-server-33 vue Wolfi npm
  • High 8.8
    CVE-2024-35584 Public exploit Scanner template

    SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/Hacking…

  • Medium 5.1
    CVE-2024-44337 Public exploit

    Infinite loop in github.com/gomarkdown/markdown

    The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical…

    cri-o kube-metrics-adapter fq github.com/gomarkdown/markdown Debian Ubuntu Azure Linux Wolfi Go