Skip to content
OpenAdvisories

Archive

18 October 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 2.7

    Topdata Inner Rep Plus WebServer td.js.gz risky encryption

    A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads to risky cryptographic algorithm. The attack may be launche…

  • Low 2.7

    Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking

    A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field …

  • Low 2.1

    There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts i…

  • Low 3.8

    Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and …

  • Low 3.1
    CVE-2024-38820 Public exploit

    CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

    The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.