Skip to content
OpenAdvisories

Archive

19 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /19 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2024-44308 Exploited Public exploit

    The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 1…

    Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
    KEV Nov 21, 2024
  • High 8.8
    CVE-2018-9411 Public exploit

    In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could l…

    Google Android Android
  • High 7.8
    CVE-2018-9338 Public exploit

    In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

    Google Android Android
  • High 7.8
    CVE-2024-48990 Public exploit EPSS 29%

    Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tri…

    needrestart needrestart needrestart needrestart Debian Ubuntu
  • High 7.8
    CVE-2024-11003 Public exploit EPSS 12%

    Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which …

    needrestart needrestart needrestart needrestart Debian Ubuntu
  • Critical 9.6
    CVE-2024-52402 Public exploit

    WordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in gunghoinc Exclusive Content Password Protect exclusive-content-password-protect allows Upload a Web Shell to a Web Server.This issue affects Exclusive Content Password Protect: from n/a through <= 1.1.0.

    gunghoinc Exclusive Content Password Protect
  • Medium 6.1
    CVE-2024-50803 Public exploit

    Redaxo Core CMS Cross Site Scripting (XSS)

    The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges

    redaxo/source Packagist
  • Medium 5.7
    CVE-2024-52711 Public exploit

    DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.