Skip to content
OpenAdvisories

Archive

5 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /5 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2024-50335 Public exploit

    Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting (XSS), allowing an attacker to inject malicious J…

    salesagility SuiteCRM
  • Critical 9.8
    CVE-2024-51132 Public exploit

    HAPI FHIR XML External Entity (XXE) vulnerability

    An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

    ca.uhn.hapi.fhir:org.hl7.fhir.r5 ca.uhn.hapi.fhir:org.hl7.fhir.validation ca.uhn.hapi.fhir:org.hl7.fhir.r4b ca.uhn.hapi.fhir:org.hl7.fhir.utilities Maven
  • Critical 9.8
    CVE-2024-51358 Public exploit

    An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to th…