Skip to content
OpenAdvisories

Archive

5 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /5 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.8
    CVE-2024-6219

    lxd has a restricted TLS certificate privilege escalation when in PKI mode

    Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.

    Canonical LXD lxd github.com/canonical/lxd Ubuntu Go
  • Low 3.8
    CVE-2024-6156

    lxd CA certificate sign check bypass

    Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

    Canonical LXD lxd incus Debian Ubuntu Go
  • Low 2.1
    CVE-2024-54140

    sigstore-java has a vulnerability with bundle verification

    sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of Key…

    sigstore sigstore-java dev.sigstore:sigstore-java Maven
  • Low —
    GHSA-gw5w-5j7f-jmjj

    Unsound usages of `std::slice::from_raw_parts`

    The library breaks the safety assumptions when using unsafe API `std::slice::from_raw_parts`. First, when using the API in iterator implementation (`TempFdArrayIterator.next`), generic type could be any type, which would create and pass a misaligned pointer t…

    pprof crates.io
  • Low 3.5
    CVE-2024-12232

    code-projects Simple CRUD Functionality index.php cross site scripting

    A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The …

    code-projects Simple CRUD Functionality
  • Low 3.1
    CVE-2024-42195

    HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

    HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

    HCL Software DevOps Deploy / Launch
  • Low 3.6
    CVE-2024-54014

    Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skyl…

    SKYLARK HOLDINGS 'Skylark' App for Android 'Skylark' App for iOS Android iOS