CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- bogdanfix wp sendfoxWordPress WP SendFox plugin <= 1.3.1 - Sensitive Data Exposure vulnerability5.3 Medium
- boxystudio cooked, gora tech llc cooked pro +1 moreWordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- jiangqie free mini program, zhuige jiangqie free mini program +1 moreWordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerability10.0 Critical
- jeroen berkvens ssv mailchimpWordPress SSV MailChimp plugin <= 3.1.5 - Local File Inclusion vulnerability7.5 High
- marco heine pdf-rechnungsverwaltungWordPress PDF-Rechnungsverwaltung plugin <= 0.0.1 - Local File Inclusion vulnerability7.5 High
- facebook tacquitoTacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to…9.8 Critical
- zipang point makerWordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability7.5 High
- olsonsp4c my reading libraryWordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability9.8 Critical
- edwiser bridge, wisdmlabs edwiser bridge +1 moreWordPress Edwiser Bridge plugin <= 3.0.7 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- flairflairNLP flair Mode File Loader clustering.py ClusteringModel code injection6.3 Medium
- esafenet cdgESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection5.3 Medium
- elvaco m-bus metering gateway cme3100, cme3100 firmware +1 moreMissing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe31008.7 High
- elvaco m-bus metering gateway cme3100, cme3100 firmware +1 moreUnrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe31008.8 High
- elvaco m-bus metering gateway cme3100, cme3100 firmware +1 moreCross-site Scripting in Elvaco M-Bus Metering Gateway CMe31009.2 Critical
- elvaco m-bus metering gateway cme3100, cme3100 firmware +1 moreInsufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe31008.7 High
oath-toolkitUbuntuoath-toolkit vulnerabilityNo score- esafenet cdgESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection5.3 Medium
- lcds - leão consultoria e desenvolvimento de sistemas ltda me laquis scadaCross-site Scripting vulnerability in LCDS LAquis SCADA7.0 High
- No product listedCoinGate Plugin Payment callback.php postProcess logic error5.3 Medium
- esafenet cdgESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection5.3 Medium
- esafenet cdgESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection5.3 Medium
- adobe substance3d - sampler, substance 3d sampler +1 moreSubstance3D - Sampler | NULL Pointer Dereference (CWE-476)5.5 Medium
- acm309 putongojPutongOJ: unprivileged users can escalate privileges by constructing requests9.1 Critical
- redhat quay, red hat quay 3 +1 moreQuay: quay allows successful authentication with trucated version of the password4.8 Medium
- mikexstudios xcomicmikexstudios Xcomic os command injection6.3 Medium
- xerox altalink firmware, altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c807, altalink® c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria certified (aug 2023) +18 more +20 moreAuthenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products7.2 High
- codeflock free download managerWordPress FREE DOWNLOAD MANAGER plugin <= 1.0.0 - Arbitrary File Deletion vulnerability8.6 High
- jetbrains ktorJetBrains Ktor information disclosure5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript...8.1 High
- scott paterson contact form 7 – paypal & stripe add-onWordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sysbasics shortcode for elementor templatesWordPress Shortcode For Elementor Templates plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rconnect305 restaurant reservations widgetWordPress Restaurant Reservations Widget plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dogrow simple baseball scoreboardWordPress Simple Baseball Scoreboard plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sumit surai featured posts with multiple custom groups (fpmcg)WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sktthemes skt blocksWordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nokia service router operating system, sr os (7250 ixr, 7450 ess, 7750 sr, 7950 ixr, vsr), 7705 sar os, 7210 sas os +1 moreNokia SR OS: File Access Security Vulnerability7.3 High
- supsystic contact form by supsysticWordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gabbykhrmon wsify widget, wsify – sales can fly widget +1 moreWordPress Wsify Widget plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- nokia sr os (7250 ixr, 7450 ess, 7750 sr, 7950 ixr, vsr), 7705 sar os, 7210 sas osNokia SR OS: BOF File Encryption Vulnerability3.3 Low
- sumit surai featured posts with multiple custom groups (fpmcg)WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Cross-Site Request Forgery (CSRF) vulnerability6.5 Medium
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability5.4 Medium
- hans matzen wp-monalisaWordPress wp-Monalisa plugin <= 6.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- razon komar pal linked variation for woocommerceWordPress Linked Variation for WooCommerce plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- shortpixel image optimizerWordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability7.6 High
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability7.5 High
- dennis encyclopedia / glossary / wikiWordPress Encyclopedia / Glossary / Wiki plugin <= 1.7.60 - Cross Site Scripting (XSS) vulnerability7.1 High
- duckdiverllc parallax imageParallax Image <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode6.4 Medium
- solarwinds kiwi cattoolsSolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability5.1 Medium
- flashfxpOpenSight Software FlashFXP FlashFXP.exe uncontrolled search path8.5 High
- sick ag clv6xx, lector6xx, rfx6xx +1 more +3 moreVulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx9.1 Critical
- Show moreLoading…