Skip to content
OpenAdvisories

Archive

19 December 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-52794 Public exploit

    Magnific lightbox susceptible to Cross-site Scripting in Discourse

    Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulne…

  • Medium 5.6
    CVE-2024-11616 Public exploit

    Double-fetch heap overflow

    Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes argument to ExAllocatePoolWithTag, and the L…