Skip to content
OpenAdvisories

Archive

24 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /24 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.3
    CVE-2024-11646

    1000 Projects Beauty Parlour Management System edit-services.php sql injection

    A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql inje…

    1000 Projects Beauty Parlour Management System
  • High 8.8
    CVE-2024-11665

    Unauthenticated Remote Command Injection

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.

    hardy-barth cph2_echarge_firmware
  • High 8.4
    CVE-2024-53899

    virtualenv allows command injection through activation scripts for a virtual environment

    virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

    py3-cassandra-medusa python-virtualenv py3-cassandra-medusa-compat virtualenv Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2024-53916

    OpenStack Neutron can use an incorrect ID during policy enforcement

    In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network …

    neutron neutron neutron Debian Ubuntu PyPI