Skip to content
OpenAdvisories

Archive

28 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /28 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-11971

    Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

    A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument …

    Guizhou Xiaoma Technology jpress
  • Low 3.5
    CVE-2024-49502

    Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

    A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This i…

    SUSE SUSE Manager Server Module 4.3 Container suse/manager/5.0/x86_64/server:5.0.2.7.8.1
  • Low 3.5
    CVE-2024-49503

    Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web

    A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials sub page. This issue affects Container suse/manager/5.0/x86…

    SUSE SUSE Manager Server Module 4.3 Container suse/manager/5.0/x86_64/server:5.0.2.7.8.1
  • Low 2.4
    CVE-2024-46939

    Game Extension Engine Path Traversal Vulnerability

    The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

    vivo Game Extension Engine