CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- acronis cyber filesSensitive information disclosure due to spell-jacking. The following products are affected:...5.7 Medium
- acronis cyber filesLocal privilege escalation due to insecure folder permissions. The following products are...7.8 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- acronis cyber filesStored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following...5.7 Medium
- sendpulse free web pushSendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting7.2 High
- vladolaru fonto – custom web fonts manager, fonto custom web fonts manager +1 moreFonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- embedthis goaheadThis issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in...5.9 Medium
- opajaap wp photo album plusWordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting6.1 Medium
- embedthis goaheadCWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server ...5.3 Medium
- embedthis goaheadMultiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to...5.9 Medium
- persianscript افزونه پیامک ووکامرس persian woocommerce smsPersian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting6.1 Medium
- logichunt logo sliderLogo Slider < 4.1.0 - Contributor+ Stored XSS7.6 High
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation4.3 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation4.3 Medium
- flexmls flexmls® idx pluginFlexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting6.1 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure4.3 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting6.1 Medium
- arraytics timetics, timetics – appointment booking & scheduling +1 moreWP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover9.8 Critical
- codepeople calculated fields formCalculated Fields Form <= 5.2.45 - HTML Injection5.3 Medium
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification +1 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value9.8 Critical
- publishpress authors, co-authors, multiple authors and guest authors in an author box with publishpress authors +1 moreCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account…8.8 High
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification, otp verification with firebase +2 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change9.8 Critical
- thecatkin redi restaurant reservation – instant availability & confirmationReDi Restaurant Reservation <= 24.0902 - Reflected Cross-Site Scripting6.1 Medium
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification with firebase +1 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass8.1 High
- dell openmanage enterpriseDell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization...4.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of...8.0 High
- No product listedIn Advanced Custom Fields (ACF) before 6.3.9 and Secure Custom Fields before 6.3.6.3 (plugins for...5.3 Medium
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- dlink dir-878 firmware, dir-882 firmware +1 moreD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command...8.0 High
- tenda g3 firmwareTenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in ...8.0 High
- espressif esp-idfBuffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive...8.1 High
- jqueryui jquery uiCross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote...7.1 High
- mariadbAn issue in MYSQL MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the...5.7 Medium
- mariadbInsecure permissions in the sys_exec function of Oracle MYSQL MariaDB v10.5 allows authenticated...5.6 Medium
- mariadbMariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability.9.8 Critical
- apple ipados, macos, safari +17 more +19 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS...8.8 High
- autodesk revitStack-Based Buffer Overflow Vulnerability in Autodesk Revit7.8 High
- autodesk revitOut-of-Bounds Write Vulnerability in Autodesk Revit7.8 High
- rdsai rdslightLack of Input Validation in RDS Light - Potential for Injection Attacks and Memory Tampering8.1 High
- admidioAdmidio vulnerable to HTML Injection In The Messages Section3.5 Low
- oisf suricataSuricata ja4: invalid alpn leads to panic7.5 High
- Show moreLoading…