Skip to content
OpenAdvisories

Archive

October 2024

Vulnerabilities first published in this month (UTC), newest first.

← September 2024 2024 / October November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-51378 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers …

    KEV Dec 4, 2024
  • Critical 10.0
    CVE-2024-51567 Exploited · Ransomware Public exploit Scanner template EPSS 84%

    upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypa…

    KEV Nov 7, 2024
  • Critical 9.8
    CVE-2024-50623 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file u…

    KEV Dec 13, 2024
  • Critical 9.8
    CVE-2024-47575 Exploited Public exploit EPSS 95%

    A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.…

    Fortinet FortiManager Network devices
    KEV Oct 23, 2024
  • Critical 9.1
    CVE-2024-41713 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) coul…

    KEV Jan 7, 2025
  • Critical 9.2
    CVE-2024-9465 Exploited Public exploit Scanner template EPSS 100%

    Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

    An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and…

    Palo Alto Networks Expedition Network devices
    KEV Nov 14, 2024
  • Critical 9.9
    CVE-2024-9463 Exploited Public exploit Scanner template EPSS 99%

    Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

    An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys…

    Palo Alto Networks Expedition Network devices
    KEV Nov 14, 2024
  • Critical 9.8
    CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
    KEV Oct 15, 2024
  • Critical 9.8
    CVE-2024-43468 Exploited Public exploit EPSS 81%

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Microsoft Microsoft Configuration Manager
    KEV Feb 12, 2026
  • Critical 10.0
    CVE-2024-45519 Exploited Public exploit Scanner template EPSS 100%

    The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9…

    KEV Oct 3, 2024