Skip to content
OpenAdvisories

Archive

20 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /20 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

51 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-44293

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

    Apple macOS macOS
  • Medium 5.5
    CVE-2024-44292

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

    Apple macOS macOS
  • Medium 4.6
    CVE-2024-44223

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with…

    Apple macOS macOS
  • Medium 6.4
    CVE-2024-11776

    PCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The PCRecruiter Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'PCRecruiter' shortcode in all versions up to, and including, 1.4.22 due to insufficient input sanitization and output escaping on user supplied attr…

    mstdev PCRecruiter Extensions Web / CMS
  • Medium 6.5
    CVE-2024-12678

    Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

    Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and N…

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 6.6
    CVE-2024-12831

    Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

    Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low…

    Arista Networks NG Firewall Network devices
  • Medium 4.7
    CVE-2024-55341

    Piranha CMS Cross-site Scripting vulnerability

    A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.

    Piranha NuGet
  • Medium 4.3
    CVE-2024-55186

    Oqtane Framework Insecure Direct Object Reference vulnerability

    An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker c…

    Oqtane.Server Oqtane.Framework Oqtane.Client Oqtane.Shared NuGet
  • Medium 6.5
    CVE-2024-55471

    Oqtane Framework Insecure Direct Object Reference vulnerability

    Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.

    Oqtane.Framework Oqtane.Server NuGet
  • Medium 4.7
    CVE-2024-55342

    Piranha CMS Cross-site Scripting vulnerability

    A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their…

    Piranha NuGet
  • Medium 6.1
    CVE-2021-40959

    A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.…