Skip to content
OpenAdvisories

Archive

8 November 2024

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.6
    CVE-2024-52002 Public exploit

    Cross-Site Request Forgery (CSRF) in several iTop pages

    Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and a…

  • High 8.8
    CVE-2024-24409 Public exploit

    Privilege Escalation

    Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.

  • Medium 6.5
    CVE-2024-44765 Public exploit

    An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.…

  • Medium 5.4
    CVE-2024-51032 Public exploit

    A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 all…

  • Medium 6.5
    CVE-2024-51030 Public exploit

    A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows …

  • Medium 5.4
    CVE-2024-51031 Public exploit

    A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows rem…