Skip to content
OpenAdvisories

Archive

22 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /22 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.4
    CVE-2022-23862 Public exploit

    A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 969…

  • Medium 6.1
    CVE-2022-23861 Public exploit

    Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the…

  • Medium 4.6
    CVE-2024-48415 Public exploit

    itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastn…

  • Medium 5.3
    CVE-2024-48644 Public exploit

    Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23…

  • High 7.8
    CVE-2024-48605 Public exploit

    An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper …

  • Medium 4.8
    CVE-2024-48652 Public exploit

    camaleon_cms affected by cross site scripting

    Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.

    camaleon_cms RubyGems
  • Critical 9.8
    CVE-2024-46483 Public exploit

    Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which …

  • Critical 9.3
    CVE-2024-46538 Public exploit EPSS 80%

    A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML …

  • Critical 9.8
    CVE-2024-44812 Public exploit

    SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the user…