Skip to content
OpenAdvisories

Archive

25 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /25 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.0
    CVE-2024-53261

    Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit

    SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripti…

    sveltejs kit @sveltejs/kit npm
  • Low 2.0
    CVE-2024-53262

    Unescaped error message included on error page in SvelteKit

    SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html template for errors contains placeholders that are replaced without escaping the content first. error.html is the page that is rendered whe…

    sveltejs kit @sveltejs/kit npm
  • Low 1.0
    CVE-2020-12492

    Wifi information acquisition vulnerability in Framework Services

    Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.

    vivo Framework
  • Low 2.7
    CVE-2024-10492

    Keycloak-quarkus-server: keycloak path trasversal

    A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource cre…

    Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 8 Maven
  • Low 3.5
    CVE-2024-11660

    code-projects Farmacia usuario.php cross site scripting

    A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file usuario.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack re…

    code-projects Farmacia
  • Low 3.5
    CVE-2024-7056

    WPForms < 1.9.1.6 - Admin+ Stored XSS

    The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for exam…

    Web / CMS
  • Low 3.5
    CVE-2024-10710

    YaDisk Files <= 1.2.5 - Admin+ Stored XSS

    The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for …

    Web / CMS