Skip to content
OpenAdvisories

Archive

15 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /15 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.2
    CVE-2024-52510 Public exploit

    Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It i…

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • High 7.5
    CVE-2024-11237 Public exploit

    TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow

    A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack…

    TP-Link Systems VN020 F3v(T) Network devices
  • High 7.2
    CVE-2024-10793 Public exploit

    WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter

    The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated …

    melapress WP Activity Log Web / CMS
  • Critical 9.8
    CVE-2024-10924 Public exploit Scanner template EPSS 82%

    Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

    The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_an…

    Really Simple Plugins rogierlankhorst Really Simple Security Pro Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
  • High 7.3
    CVE-2024-50986 Public exploit

    An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.

    clementine Ubuntu
  • Medium 5.3
    CVE-2024-24450 Public exploit

    Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface C…

  • Low 2.4
    CVE-2024-46383 Public exploit

    Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected…

  • High 8.8
    CVE-2024-44625 Public exploit EPSS 17%

    Remote Code Execution in Gogs

    Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.

    gogs.io/gogs Go