Skip to content
OpenAdvisories

Archive

19 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /19 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.2
    CVE-2024-52589

    Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse

    Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgr…

    Discourse Discourse
  • Low 3.5
    CVE-2024-12790

    code-projects Hostel Management Site room-details.php cross site scripting

    A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remot…

    code-projects Hostel Management Site
  • Low 2.4
    CVE-2024-12801

    SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

    Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modific…

    QOS.CH Sarl logback thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Low 2.1
    CVE-2024-9101

    phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php

    A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafe…

    phpLDAPadmin phpLDAPadmin phpldapadmin phpldapadmin Debian Ubuntu
  • Low 3.5
    CVE-2024-12783

    itsourcecode Vehicle Management System billaction.php cross site scripting

    A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attac…

    itsourcecode Vehicle Management System