Skip to content
OpenAdvisories

Archive

8 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /8 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-45763

    Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an…

    Dell Enterprise SONiC OS
  • Critical 9.0
    CVE-2024-45764

    Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. …

    Dell Enterprise SONiC OS
  • Critical 9.1
    CVE-2024-45765

    Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an…

    Dell Enterprise SONiC OS
  • Critical 9.8
    CVE-2024-50588

    Unprotected Exposed Firebird Database with default credentials

    An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other s…

    HASOMED Elefant
  • Critical 9.8
    CVE-2024-50206

    net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init

    In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must only touch as many descriptors, otherwise it ends…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.6
    CVE-2024-7982

    Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS

    The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

    Web / CMS
  • Critical 9.8
    CVE-2020-8007

    The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS com…

  • Critical 9.8
    CVE-2023-27195

    Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve t…

  • Critical 9.3
    CVE-2024-50966

    dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction…

  • Critical 9.1
    CVE-2024-50811

    hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \…

  • Critical 9.8
    CVE-2024-35426

    vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c.

  • Critical 9.8
    CVE-2024-48073

    sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is…

  • Critical 9.8
    CVE-2024-51211 Scanner template

    SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. Th…