Skip to content
OpenAdvisories

Archive

13 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /13 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

230 results · Feed

  • High 7.2
    CVE-2024-32844

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti EPM Network devices
  • High 7.2
    CVE-2024-32839

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti EPM Network devices
  • High 7.1
    CVE-2024-29211

    A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify s…

    ivanti Secure Access Client Network devices
  • High 7.8
    CVE-2024-37398

    Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate …

    ivanti Secure Access Client Network devices
  • High 7.2
    CVE-2024-37376

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti EPM Network devices
  • High 7.5
    CVE-2024-37400

    An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trig…

    ivanti Connect Secure Network devices
  • Medium 4.8
    CVE-2023-38920

    Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary c…

  • Medium 6.5
    CVE-2024-50956

    A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN…

  • High 7.5
    CVE-2024-50955

    An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of…

  • Medium 6.1
    CVE-2024-50969 Public exploit

    A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote att…

  • Medium 6.5
    CVE-2024-50970 Public exploit

    A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote att…

  • Medium 6.5
    CVE-2024-50971 Public exploit

    A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers t…

  • High 8.8
    CVE-2024-50853

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.

  • High 8.8
    CVE-2024-50854

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.

  • Medium 6.5
    CVE-2024-50972 Public exploit

    A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attacke…

  • High 8.8
    CVE-2024-50852

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount…

  • Critical 9.1
    CVE-2024-48510 Public exploit

    DotNetZip Directory Traversal vulnerability

    Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maint…

    DotNetZip ProDotNetZip NuGet
  • Medium 6.1
    CVE-2024-45879

    The file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 (fixed in version 1.35.29…

  • Medium 6.5
    CVE-2024-45877

    baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incorrect Access Control in the User Management function in /App…

  • Medium 6.5
    CVE-2024-45876

    The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vuln…

  • Medium 5.4
    CVE-2024-45875

    The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerMan…

  • Medium 6.1
    CVE-2024-45878

    The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in /Apps/TOPqw/qwStammdaten…

  • Medium 4.8
    CVE-2024-40410

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for…

  • High 7.5
    CVE-2024-40407

    A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root pa…

  • Medium 4.3
    CVE-2024-40443 Public exploit

    SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker t…

  • High 8.1
    CVE-2024-40405

    Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a…

  • Critical 9.8
    CVE-2024-40404

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API end…

  • High 7.3
    CVE-2024-40408

    Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create …

  • Medium 6.1
    CVE-2024-42834 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SA…

  • Medium 6.5
    CVE-2024-51027

    Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the pro…