Skip to content
OpenAdvisories

Archive

29 October 2024

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.8

    Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user

    The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagra…

  • Low 2.2

    Grafana org admin can delete pending invites in different org

    Organization admins can delete pending invites created in an organization they are not part of.

  • Low 2.7

    Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide p…

  • Low 2.4

    LinZhaoguan pb-cms Theme Management Module admin#themes cross site scripting

    A vulnerability, which was classified as problematic, was found in LinZhaoguan pb-cms up to 2.0.1. Affected is an unknown function of the file /admin#themes of the component Theme Management Module. The manipulation leads to cross site scripting. It is possib…

  • Low 2.4

    LinZhaoguan pb-cms Edit Article edit cross site scripting

    A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /admin#article/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site…

  • Low 2.4

    LinZhaoguan pb-cms Permission Management Page admin#permissions cross site scripting

    A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /admin#permissions of the component Permission Management Page. The manipulation leads to cross site scripting. The atta…