Skip to content
OpenAdvisories

Archive

11 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /11 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-51575

    WordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md. Abdullah Al Masum Extender All In One For Elementor extender-all-in-one-for-elementor allows Stored XSS.This issue affects Extender All In One For Elemen…

    Md. Abdullah Al Masum Extender All In One For Elementor
  • Medium 5.3
    CVE-2024-38826

    CVE-2024-38826 Cloud Controller Denial of Service Attack

    Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgr…

    Cloud Foundry Cloud Foundry
  • Medium 6.3
    CVE-2024-11060

    Jinher Network Collaborative Management Platform 金和数字化智能办公平台 AcceptShow.aspx sql injection

    A vulnerability classified as critical has been found in Jinher Network Collaborative Management Platform 金和数字化智能办公平台 1.0. Affected is an unknown function of the file /C6/JHSoft.Web.AcceptAip/AcceptShow.aspx/. The manipulation of the argument id leads to sql …

    Jinher Network Collaborative Management Platform 金和数字化智能办公平台
  • Medium 4.8
    CVE-2024-50991

    A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Managemen…

  • Medium 6.1
    CVE-2024-50990

    A Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Re…

  • Medium 6.1
    CVE-2024-50601

    Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to v…

  • Medium 5.4
    CVE-2024-46965

    The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows …

  • Medium 6.5
    CVE-2024-52531

    GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_par…

    GNOME libsoup libsoup3 libsoup3 Debian Ubuntu Azure Linux
  • Medium 4.8
    CVE-2024-51188

    TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS…

  • Medium 6.1
    CVE-2024-51213

    Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via th…

  • Medium 4.8
    CVE-2024-51190

    TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS…

  • Medium 4.8
    CVE-2024-51189

    TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS…

  • Medium 4.8
    CVE-2024-51054

    A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registratio…

  • Medium 4.8
    CVE-2024-51187

    TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS…

  • Medium 5.4
    CVE-2024-51026 Public exploit

    The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx end…