Skip to content
OpenAdvisories

Archive

31 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /31 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-10605 Public exploit

    code-projects Blood Bank Management System request.php cross-site request forgery

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate th…

    code-projects Blood Bank Management System
  • Critical 10.0
    CVE-2024-51482 Public exploit Scanner template EPSS 37%

    Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

    ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65.

    ZoneMinder zoneminder zoneminder Ubuntu
  • Critical 9.1
    CVE-2024-48910 Public exploit

    DOMPurify vulnerable to tampering by prototype polution

    DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

    cure53 DOMPurify cacti dompurify Debian Ubuntu npm
  • Medium 4.3
    CVE-2024-10557 Public exploit

    code-projects Blood Bank Management System updateprofile.php cross-site request forgery

    A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forger…

    code-projects Blood Bank Management System
  • High 7.5
    CVE-2024-39719 Public exploit

    An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the …

  • High 7.5
    CVE-2024-39722 Public exploit

    An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via…

  • Critical 9.8
    CVE-2024-48359 Public exploit

    Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden param…

  • High 7.5
    CVE-2024-48360 Public exploit Scanner template

    Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.…

  • Critical 9.8
    CVE-2024-48307 Public exploit Scanner template EPSS 50%

    JeecgBoot SQL Injection vulnerability

    JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 6.4
    CVE-2024-51430 Public exploit

    Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker …