Skip to content
OpenAdvisories

Archive

21 October 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.8
    CVE-2024-49882 Public exploit

    ext4: fix double brelse() the buffer of the extents path

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has been released, otherwise it may be released twice. An example of …

  • High 8.9
    CVE-2024-49368 Public exploit EPSS 28%

    Unchecked logrotate settings lead to arbitrary command execution

    Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixe…

  • High 8.7
    CVE-2024-45309 Public exploit Scanner template EPSS 25%

    OneDev vulnerable to arbitrary file reading for unauthenticated user

    OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

  • Medium 5.6
    CVE-2024-35315 Public exploit

    A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instan…

  • Critical 9.1
    CVE-2024-41713 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) coul…

    KEV Jan 7, 2025