Skip to content
OpenAdvisories

Archive

18 November 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2024-43416 Public exploit

    GLPI vulnerable to enumeration of users' email addresses by unauthenticated user

    GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application endpoint to check if an email address corresponds to a valid GLPI user. Version 10.0.17 fixes the is…

  • High 7.5
    CVE-2024-11318 Public exploit

    IDOR vulnerability in AbsysNet

    An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifie…

  • High 7.8
    CVE-2024-50804 Public exploit

    Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execu…

  • High 7.5
    CVE-2024-52940 Public exploit

    AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address w…