Skip to content
OpenAdvisories

Archive

30 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /30 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.1
    CVE-2024-11946

    iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability

    iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS device…

    iXsystems TrueNAS CORE
  • Low —
    GHSA-gmx7-gr5q-85w5

    magic-crypt uses insecure cryptographic algorithms

    This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. `MagicCrypt64` uses the insecure DES block cipher in CBC mode without authentication.…

    magic-crypt crates.io
  • Low —
    GHSA-gv7f-5qqh-vxfx

    xous has unsound usages of `core::slice::from_raw_parts`

    We consider `as_slice` and `as_slice_mut` unsound because: the pointer with any bit patterns could be cast to the slice of arbitrary types. The pointer could be created by unsafe new and deprecated `from_parts`. We consider that `from_parts` should be removed…

    xous crates.io
  • Low 3.5
    CVE-2024-13034

    code-projects Chat System update_user.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate …

    code-projects Chat System
  • Low 3.5
    CVE-2024-13033

    code-projects Chat System chatroom.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The…

    code-projects Chat System
  • Low 2.7
    CVE-2024-13032

    Antabot White-Jotter Article Editor editor server-side request forgery

    A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCove…

    Antabot White-Jotter
  • Low 2.4
    CVE-2024-13031

    Antabot White-Jotter Article Content Editor editor cross site scripting

    A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is poss…

    Antabot White-Jotter