Skip to content
OpenAdvisories

Archive

November 2024

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2024-52800 Public exploit

    Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

    veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution (RCE) vulnerability. This doesn't affect the standard va…

  • Low 2.4
    CVE-2024-46383 Public exploit

    Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected…