CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- code-projects blood bank management system code-projects Blood Bank Management System request.php cross-site request forgery 6.9 Medium
- tongda oa 2017, tongda2000 office anywhere +1 more Tongda OA 2017 data_picker_link.php sql injection 5.3 Medium
- tongda oa 2017, tongda2000 office anywhere +1 more Tongda OA 2017 delete.php sql injection 5.3 Medium
- tongda oa 2017, tongda2000 office anywhere +1 more Tongda OA 2017 submenu.php sql injection 6.9 Medium
- tongda oa 2017, tongda2000 office anywhere +1 more Tongda OA 2017 package_static_resources.php resource consumption 6.9 Medium
- jinher oa, tongda oa 2017, tongda2000 office anywhere +2 more Tongda OA Annual Leave data.php improper authorization 6.9 Medium
- shopitpress sip reviews shortcode for woocommerce SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) SQL Injection 6.5 Medium
- shopitpress sip reviews shortcode for woocommerce SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting 6.4 Medium
- esafenet cdg ESAFENET CDG PolicyActionService.java delPolicyAction sql injection 5.3 Medium
- esafenet cdg ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection 5.3 Medium
- esafenet cdg ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection 5.3 Medium
- esafenet cdg ESAFENET CDG FileDirectoryService.java docHistory sql injection 5.3 Medium
- zoneminder Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64 10.0 Critical
- frappe press Press has a potential 2FA bypass 0.0 None
- laravel reverb Laravel Reverb has Missing API Signature Verification 6.3 Medium
- arm compiler for embedded, compiler for embedded fusa, compiler for functional safety +4 more +6 more CMSE secure state may leak from stack to floating-point registers 3.7 Low
- yeswiki Use of a Broken or Risky Cryptographic Algorithm in YesWiki 9.9 Critical
- nixos nix Nix allows macOS sandbox escape via built-in builders 1.0 Low
- consensys gnark Out-of-memory during deserialization with crafted inputs 5.5 Medium
- hashicorp vault, vault enterprise, openbao +2 more Vault Vulnerable to Denial of Service When Processing Raft Join Requests 7.5 High
- red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8, satellite 6.15 for rhel 8 +2 more +4 more Foreman: read-only access to entire db from templates 6.3 Medium
- cure53 dompurify DOMPurify vulnerable to tampering by prototype polution 9.1 Critical
- clibo manager manager Clickjacking vulnerability in Clibo Manager 6.1 Medium
- beckhoff twincat package manager, twincat packet manager +1 more Beckhoff: Local command injection via TwinCAT Package Manager 6.5 Medium
-
fast-floatcrates.io `fast-float` has multiple soundness issues 2.7 Low -
orcTuxCare,orc-compilerTuxCare,orc-develTuxCare +1 more +3 more Update of orc No score -
microcode_ctlTuxCare Update of microcode_ctl No score -
microcode_ctlTuxCare Update of microcode_ctl No score - eyecix jobsearch WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - Broken Access Control vulnerability 4.3 Medium
- amauri wpmobile.app WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability 7.1 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability 9.6 Critical
- lukas huser ekc tournament manager WordPress EKC Tournament Manager plugin <= 2.2.1 - CSRF to Arbitrary File Upload vulnerability 9.6 Critical
- smash balloon custom twitter feeds (tweets widget), smashballoon custom twitter feeds +1 more WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerability 5.4 Medium
- apache lucene, lucene.net, apache software foundation lucene.net.replicator +2 more Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator 8.0 High
- hcl software appscan source HCL AppScan Source is affected by an expired TLS/SSL certificate 4.8 Medium
- alexgff wpglobus translate options WPGlobus Translate Options <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting 6.1 Medium
- kilukrumedia wp simple anchors links WP Simple Anchors Links <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpanchor Shortcode 6.4 Medium
- wpcloudtechnologies get quote for woocommerce – request a quote for woocommerce, get a quote for woocommerce +1 more Get Quote For Woocommerce – Request A Quote For Woocommerce <= 1.0.0 - Missing Authorization to Unauthenticated Quote PDF and CSV Download 5.3 Medium
- codemenschen gift cards (gift vouchers and packages) (woocommerce supported) Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 6.4 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation 5.3 Medium
- aipower, senols ai puffer – your ai engine for wordpress (formerly ai power) +1 more AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload 9.8 Critical
- antonk52 lilconfig lilconfig Code Injection vulnerability 9.3 Critical
- delowerhossain easy svg upload Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 6.4 Medium
- prasidhda woo manage fraud orders Woo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files 5.3 Medium
- codezips pet shop management system Codezips Pet Shop Management System birdsupdate.php sql injection 6.9 Medium
- razormist airport booking management system SourceCodester Airport Booking Management System details buffer overflow 4.8 Medium
- code-projects blood bank management system code-projects Blood Bank Management System updateprofile.php cross-site request forgery 6.9 Medium
- codezips pet shop management system Codezips Pet Shop Management System birdsadd.php sql injection 6.9 Medium
- sourcecodester online diagnostic lab management system Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0... 6.4 Medium
- draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... 9.8 Critical
- Show olderLoading…