Skip to content
OpenAdvisories

Archive

21 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /21 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-11320 Public exploit Scanner template EPSS 91%

    Command Injection leading to RCE via LDAP Misconfiguration

    Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4

    Pandora FMS Pandora FMS
  • High 7.5
    CVE-2024-10400 Public exploit Scanner template EPSS 83%

    Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter

    The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up to, and including, 2.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL …

    Themeum Tutor LMS – eLearning and online course solution Web / CMS
  • Critical 9.1
    CVE-2024-30896 Public exploit

    InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows au…

    influxdb influxdb Ubuntu Azure Linux