Skip to content
OpenAdvisories

Archive

23 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /23 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-49653 Public exploit

    WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through <= 1.2.

    james-eggers Portfolleo
  • Critical 10.0
    CVE-2024-49668 Public exploit

    WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This issue affects Verbalize WP: from n/a through <= 1.0.

    christopherdewese1099 Verbalize WP
  • Critical 9.8
    CVE-2024-47575 Exploited Public exploit EPSS 95%

    A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.…

    Fortinet FortiManager Network devices
    KEV Oct 23, 2024
  • Medium 5.9
    CVE-2024-5764 Public exploit

    Nexus Repository 3 - Static hard-coded encryption passphrase used by default

    Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among o…

    Sonatype Nexus Repository
  • Medium 6.3
    CVE-2024-50050 Public exploit

    Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket…

    Meta Platforms Llama Stack
  • High 8.8
    CVE-2024-40431 Public exploit

    A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the I…

  • Medium 6.5
    CVE-2024-40432 Public exploit

    A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the I…