CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- oisf suricataSuricata http/byte-ranges: missing hashtable random seed leads to potential DoS7.5 High
- oisf suricataSuricata datasets: missing hashtable random seed leads to potential DoS7.5 High
- oisf libhtpLibHTP's unbounded header handling leads to denial service7.5 High
- oisf suricataSuricata defrag: off by one can lead to policy bypass5.3 Medium
- oisf suricataSuricata detect/datasets: reachable assertion with unimplemented rule option7.5 High
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, redhat ansible automation platform +2 more +4 moreAap-gateway: xss on aap-gateway6.1 Medium
- vmware hcxAn authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A ...8.8 High
- microfocus application automation toolsMultiple missing permission checks1.8 Low
- microfocus application automation toolsInsecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools5.1 Medium
- microfocus application automation toolsMultiple missing permission checks1.8 Low
- microfocus application automation toolsMultiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools5.9 Medium
- microfocus application automation toolsMultiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools5.9 Medium
- opentext™ application lifecycle management (alm),quality center, opentext alm quality center +1 moreCode injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.5.3 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Improper error handling - SA-CORE-2024-0025.9 Medium
- ibm websphere application serverIBM WebSphere Application Server cross-site scripting5.5 Medium
- cisco unified contact center management portalCisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Command Injection and Denial of Service Vulnerability5.4 Medium
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Information Disclosure Vulnerability5.5 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Command Injection Vulnerability6.0 Medium
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Command Injection Vulnerability6.5 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.2 High
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Cross-Site Request Forgery Vulnerability7.1 High
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Privilege Escalation Vulnerability5.4 Medium
- cisco ucs central software, unified computing system central software +1 moreCisco UCS Central Software Configuration Backup Static Key Vulnerability6.3 Medium
- ibm websphere application serverIBM WebSphere Application Server XML external entity injection5.5 Medium
- microchip rn4870Denial of service on Microchip RN4870 devices4.3 Medium
- booking banner creator, partnerships at booking.com booking.com banner creator +1 moreWordPress Booking.com Banner Creator plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- docker desktopDocker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view8.9 High
- thimo grauerholz wp-spreadpluginWordPress WP-Spreadplugin plugin <= 4.8.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nayon46 unlimited addon for elementorWordPress Unlimited Addon For Elementor plugin <=2.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sunburntkamel disconnectedWordPress disconnected theme <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP monitors vulnerability8.6 High
- f5 big-iq, big-iq centralized management +1 moreF5 BIG-IQ Vulnerability4.8 Medium
- nextendweb nextend social login proNextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider9.8 Critical
- hashthemes smart blocksWordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- teplitsa of social technologies leykaWordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability5.3 Medium
- ahime image printer, nahimsalami ahime image printer +1 moreWordPress Ahime Image Printer plugin <= 1.0.0 - Arbitrary File Download vulnerability7.5 High
- limb wordpress gallery plugin – limb image galleryWordPress Limb Gallery plugin <= 1.5.7 - Arbitrary File Download vulnerability6.5 Medium
- fliperrr creates 3d flipbook, pdf flipbook, fliperr team creates 3d flipbook pdf flipbook +1 moreWordPress Creates 3D Flipbook, PDF Flipbook plugin <= 1.2 - Arbitrary File Upload vulnerability9.9 Critical
- jclay06 feed comments numberWordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerability10.0 Critical
- shafiq digital lottery, digital library +1 moreWordPress Digital Lottery plugin <= 3.0.5 - Arbitrary File Upload vulnerability10.0 Critical
- limb image gallery, wordpress gallery plugin – limb image gallery +1 moreWordPress Limb Gallery plugin <= 1.5.7 - Arbitrary File Upload vulnerability9.9 Critical
- the cssigniter team maxsliderWordPress MaxSlider plugin <= 1.2.3 - Local File Inclusion vulnerability7.5 High
- danish ali malik top bar – popups – by wpoptin, sajidjaved top bar-popups-by wpoptin +1 moreWordPress WPOptin plugin <= 2.0.1 - Local File Inclusion vulnerability7.5 High
- hung trang si sb random posts widgetWordPress SB Random Posts Widget plugin <= 1.0 - Local File Inclusion vulnerability7.5 High
- acnoo maan addons for elementorWordPress Maan Addons For Elementor plugin <= 1.0.1 - Local File Inclusion vulnerability7.5 High
- gmrobbins disc golf managerWordPress Disc Golf Manager plugin <= 1.0.0 - PHP Object Injection vulnerability9.8 Critical
- boyan raichev ip loc8WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…