Skip to content
OpenAdvisories

Archive

18 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /18 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-52587

    Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`

    StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multiple command injection weaknesses via environment variables tha…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Low 1.2
    CVE-2024-52585

    Autolab has HTML Injection Vulnerability

    Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vulnerability in version 3.0.1 that can affect instructors and CAs on the grade submissions page. The issue is patched in version 3.0.2. One ma…

    autolab Autolab
  • Low 3.8
    CVE-2024-5030

    CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

    The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack

    Web / CMS