Skip to content
OpenAdvisories

Archive

22 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /22 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-47407 Public exploit EPSS 64%

    mySCADA myPRO OS Command Injection

    A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

    mySCADA myPRO Manager myPRO Runtime
  • High 8.8
    CVE-2024-11394 Public exploit

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requir…

    Hugging Face transformers transformers PyPI
  • High 8.8
    CVE-2024-11393 Public exploit

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is …

    Hugging Face transformers transformers PyPI
  • High 7.5
    CVE-2024-11392 Public exploit

    Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requi…

    Hugging Face transformers transformers PyPI
  • High 7.8
    CVE-2024-11477 Public exploit EPSS 22%

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…

    7-Zip 7-Zip qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Alpine
  • High 8.1
    CVE-2024-5721 Public exploit

    Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability

    Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to ex…

    Logsign Unified SecOps Platform
  • High 8.6
    CVE-2024-5716 Public exploit

    Logsign Unified SecOps Platform Authentication Bypass Vulnerability

    Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability…

    Logsign Unified SecOps Platform
  • High 8.1
    CVE-2024-10220 Public exploit

    Arbitrary command execution through gitRepo volume

    The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

    Kubernetes Kubelet kubeflow-pipelines-apiserver kubeflow-pipelines-frontend Debian Azure Linux Wolfi Go
  • Medium 6.9
    CVE-2024-50395 Public exploit

    Media Streaming add-on

    An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the followi…

    QNAP Systems Media Streaming Add-on
  • Medium 6.8
    CVE-2024-50657 Public exploit

    An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCode…