Skip to content
OpenAdvisories

Archive

October 2024

Vulnerabilities first published in this month (UTC), newest first.

← September 2024 2024 / October November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2024-38820 Public exploit

    CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

    The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

    VMware Spring thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Low 3.7
    CVE-2024-9506 Public exploit

    Regular Expression Denial of Service (ReDoS)

    Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

    vue vue nextcloud-server-33 vue Wolfi npm
  • Low 3.7
    CVE-2024-9513 Public exploit

    Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

    A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. …

    Netadmin Software NetAdmin IAM