Skip to content
OpenAdvisories

Archive

15 November 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2024-52510 Public exploit

    Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It i…

  • Medium 5.3
    CVE-2024-24450 Public exploit

    Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface C…