Skip to content
OpenAdvisories

Archive

7 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /7 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.4
    CVE-2024-51993

    Password is stored in clear in the database in Combodo iTop

    Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for misconfigured Users. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. Users unable to u…

    Combodo iTop
  • Low 2.3
    CVE-2024-51758

    Exported files stored in default (`public`) filesystem if not reconfigured in filament

    Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the `default_filesystem_disk` config option. This allows the user to easily swap their storage driver to something prod…

    filamentphp filament filament/actions Packagist
  • Low 3.8
    CVE-2024-30142

    HCL BigFix Compliance is affected by a missing secure flag on a cookie

    HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.

    HCL Software BigFix Compliance