Skip to content
OpenAdvisories

Archive

15 November 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-11182 Exploited EPSS 33%

    Stored XSS vulnerability in MDaemon Email Server

    An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's brow…

    KEV May 19, 2025
  • Critical 9.8
    CVE-2024-11120 Exploited EPSS 28%

    GeoVision EOL devices - OS Command Injection

    Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by…

    KEV May 7, 2025