Skip to content
OpenAdvisories

Archive

9 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /9 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

212 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-12349

    JFinalCMS save cross-site request forgery

    A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely.…

  • Medium 4.8
    CVE-2023-43962

    Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary c…

  • Medium 4.3
    CVE-2022-29974

    AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver i…

  • Medium 6.6
    CVE-2024-55566

    ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseede…

    colpack colpack Debian Ubuntu
  • Medium 5.3
    CVE-2024-55563

    Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-202…

  • Medium 4.3
    CVE-2024-55578

    Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log …

  • Medium 4.3
    CVE-2024-55565

    Predictable results in nanoid generation when given non-integer values

    nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-pbt-enas Debian Ubuntu Wolfi npm
  • Medium 5.7
    CVE-2024-55582

    Oxide before 6 has unencrypted Control Plane datastores.

  • Medium 5.4
    CVE-2024-54936

    A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management Sys…

  • Medium 5.4
    CVE-2024-54935

    A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message_teacher_to_student.php of kashipara E-lear…

  • Medium 5.3
    CVE-2024-54937

    A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to ac…

  • Medium 5.4
    CVE-2024-54919

    A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management System v1.0. T…