Skip to content
OpenAdvisories

Archive

11 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /11 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.3
    CVE-2024-54503

    An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and …

    Apple iOS and iPadOS iOS
  • Low 3.3
    CVE-2024-54493

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicato…

    Apple macOS macOS
  • Low 3.3
    CVE-2024-44290

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Low 2.0
    CVE-2024-53274

    GHSL-2024-111: Reflected XSS in /home in habitica

    Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home.vue` containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker ca…

    HabitRPG habatica
  • Low 3.7
    CVE-2024-12483 Public exploit

    Dromara UJCMS User ID id authorization

    A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack r…

    dromara UJCMS
  • Low 3.1
    CVE-2023-23472

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.

    IBM InfoSphere Information Server
  • Low 3.4
    CVE-2024-11053

    netrc and redirect credential leak

    When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 2.5
    CVE-2023-37395

    IBM Aspera Faspex information disclosure

    IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data.

    IBM Aspera Faspex