Skip to content
OpenAdvisories

Archive

October 2024

Vulnerabilities first published in this month (UTC), newest first.

← September 2024 2024 / October November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-51378 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers …

    KEV Dec 4, 2024
  • Critical 10.0
    CVE-2024-51567 Exploited · Ransomware Public exploit Scanner template EPSS 84%

    upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypa…

    KEV Nov 7, 2024
  • Critical 9.8
    CVE-2024-50623 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file u…

    KEV Dec 13, 2024
  • Medium 5.8
    CVE-2024-20481 Exploited EPSS 16%

    A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco …

    Cisco Cisco Firepower Threat Defense Software Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Oct 24, 2024
  • Critical 9.8
    CVE-2024-47575 Exploited Public exploit EPSS 95%

    A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.…

    Fortinet FortiManager Network devices
    KEV Oct 23, 2024
  • Critical 9.1
    CVE-2024-41713 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) coul…

    KEV Jan 7, 2025
  • Critical 9.8
    CVE-2024-9537 Exploited

    ScienceLogic SL1 unspecified vulnerability

    ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for…

    ScienceLogic SL1
    KEV Oct 21, 2024
  • Critical 9.2
    CVE-2024-9465 Exploited Public exploit Scanner template EPSS 100%

    Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

    An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and…

    Palo Alto Networks Expedition Network devices
    KEV Nov 14, 2024
  • Critical 9.9
    CVE-2024-9463 Exploited Public exploit Scanner template EPSS 99%

    Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

    An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys…

    Palo Alto Networks Expedition Network devices
    KEV Nov 14, 2024
  • Critical 9.8
    CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
    KEV Oct 15, 2024
  • High 7.8
    CVE-2024-43572 Exploited EPSS 67%

    Microsoft Management Console Remote Code Execution Vulnerability

    Microsoft Management Console Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 8, 2024
  • Critical 9.8
    CVE-2024-43468 Exploited Public exploit EPSS 81%

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Microsoft Microsoft Configuration Manager
    KEV Feb 12, 2026
  • Medium 6.5
    CVE-2024-43573 Exploited EPSS 46%

    Windows MSHTML Platform Spoofing Vulnerability

    Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 8, 2024
  • High 7.2
    CVE-2024-9380 Exploited EPSS 58%

    An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authe…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Oct 9, 2024
  • Medium 6.5
    CVE-2024-9379 Exploited EPSS 44%

    SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with a…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Oct 9, 2024
  • High 7.8
    CVE-2024-43047 Exploited

    Use After Free in DSP Service

    Memory corruption while maintaining memory maps of HLOS memory.

    Qualcomm Snapdragon
    KEV Oct 8, 2024
  • Critical 10.0
    CVE-2024-45519 Exploited Public exploit Scanner template EPSS 100%

    The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9…

    KEV Oct 3, 2024