Skip to content
OpenAdvisories

Archive

8 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /8 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium 6.2
    CVE-2024-35420

    wac commit 385e1 was discovered to contain a heap overflow.

  • Medium 5.5
    CVE-2024-35419

    wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnera…

  • Medium 6.2
    CVE-2024-35410

    wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerabi…

  • Medium 6.2
    CVE-2024-35418

    wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerab…

  • Medium 6.5
    CVE-2024-46947

    Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.

  • Medium 5.3
    CVE-2024-46948

    Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

  • Medium 6.1
    CVE-2024-40240

    An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker …

  • Medium 6.1
    CVE-2024-40239

    An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate att…

  • Medium 6.5
    CVE-2024-44765 Public exploit

    An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.…

  • Medium 5.4
    CVE-2024-51032 Public exploit

    A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 all…

  • Medium 6.5
    CVE-2024-51030 Public exploit

    A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows …

  • Medium 4.7
    CVE-2024-51157

    07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80…

  • Medium 6.5
    CVE-2024-51055

    An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php compone…

  • Medium 5.4
    CVE-2024-51031 Public exploit

    A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows rem…