Skip to content
OpenAdvisories

Archive

12 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /12 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-49369 Public exploit

    Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an atta…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-50330 Public exploit EPSS 40%

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti Endpoint Manager Network devices
  • Critical 9.8
    CVE-2024-10245 Public exploit

    Relais 2FA <= 1.0 - Authentication Bypass

    The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rl_do_ajax' function. This makes it possible for unauthenticated attacker…

    mobisoft974 Relais 2FA Web / CMS
  • Critical 9.1
    CVE-2023-52268 Public exploit

    The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary use…