Skip to content
OpenAdvisories

Archive

26 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /26 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-11742

    SourceCodester Best House Rental Management System ajax.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=save_tenant. The manipulation of the argument lastna…

    SourceCodester Best House Rental Management System
  • Low 2.0
    CVE-2024-52008

    Password Policy Bypass Vulnerability in Fides Webserver

    Fides is an open-source privacy engineering platform. The user invite acceptance API endpoint lacks server-side password policy enforcement, allowing users to set arbitrarily weak passwords by bypassing client-side validation. While the UI enforces password c…

    ethyca fides ethyca-fides PyPI
  • Low 2.2
    CVE-2024-22117

    Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added

    When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysma…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • Low 3.8
    CVE-2024-8160

    Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a suffici…

    Axis Communications AB AXIS OS
  • Low 3.5
    CVE-2024-11678

    CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting

    A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /backend/doc/his_doc_register_patient.php. The manipulation of the argument pat_fname/pat_ailment/p…

    CodeAstro Hospital Management System
  • Low 3.5
    CVE-2024-11677

    CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting

    A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /backend/admin/his_admin_add_vendor.php of the component Add Vendor Details Page. The manipulation of the ar…

    CodeAstro Hospital Management System
  • Low 3.5
    CVE-2024-11676

    CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting

    A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /backend/admin/his_admin_add_lab_equipment.php of the component Add Laboratory Equipment Page…

    CodeAstro Hospital Management System
  • Low 3.5
    CVE-2024-11675

    CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting

    A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/his_admin_register_patient.php of the component Add Patient Details…

    CodeAstro Hospital Management System