CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- chimurai http-proxy-middlewareDenial of service in http-proxy-middleware8.7 High
- infiniflow infiniflow/ragflow, ragflow +1 moreRemote Code Execution in infiniflow/ragflow8.8 High
- nik00726 photo gallery slideshow & masonry tiled gallery, i13websolution photo gallery slideshow \& masonry tiled gallery +1 morePhoto Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection4.9 Medium
- maxfoundry social share buttonsWordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting6.1 Medium
wasmtimeOSS-FuzzSegv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4No scorekamailioOSS-FuzzHeap-buffer-overflow in extract_rtpmapNo score- ivanti connect secure, policy secure +1 moreImproper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18...9.1 Critical
- ivanti dsm, desktop \& server management +1 moreIvanti DSM < version 2024.2 allows authenticated users on the local machine to run code with...7.8 High
- ivanti dsm, desktop \& server management +1 moreIvanti DSM < version 2024.2 allows authenticated users on the local machine to run code with...7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- tenda ac8, ac8 firmware +1 moreTenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow8.7 High
- hfo4 shudong-shareHFO4 shudong-share Share create_share.php sql injection5.3 Medium
- topdata inner rep plus webserver, inner rep plus +1 moreTopdata Inner Rep Plus WebServer td.js.gz risky encryption5.1 Medium
- opcfoundation ua-.netstandardSecurity Update for the OPC UA .NET Standard Stack5.3 Medium
OPCFoundation.NetStandard.Opc.UaNuGet,OPCFoundation.NetStandard.Opc.Ua.CoreNuGet +1 moreSecurity Update for the OPC UA .NET Standard Stack7.5 High- tenda ac8, ac8 firmware +1 moreTenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflow8.7 High
- topdata inner rep plus webserver, inner rep plus +1 moreTopdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking5.1 Medium
- aconPotential Vulnerability in ACON Library: Improper Input Validation Leading to Malicious Code Execution8.1 High
github.com/facebookincubator/tacquitoGoPermissive Regular Expression in tacquito7.1 High- radarwfh45678 Radar Interface authorization6.9 Medium
- scott paterson time clock pro, wpplugin time clock, scottpaterson time clock – a wordpress employee & volunteer time clock plugin +2 moreTime Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution8.3 High
- radarwfh45678 Radar upload unrestricted upload6.9 Medium
- dell secure connect gateway (scg) 5.0 appliance - srs, secure connect gateway +1 moreDell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a...4.6 Medium
- dell secure connect gateway (scg) 5.0 appliance - srs, secure connect gateway +1 moreDell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper...5.5 Medium
- lakeside software systrack lsiagent installer, lakesidesoftware systrack lsiagent +1 morePrivilege Escalation to SYSTEM in Lakeside Software Installer7.8 High
- hewlett packard enterprise (hpe) hpe oneview, hpe oneview +1 moreThis vulnerability could be exploited, leading to unauthorized disclosure of information to...5.5 Medium
- sciencelogic sl1ScienceLogic SL1 unspecified vulnerability9.3 Critical
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A...5.5 Medium
- morceaudebois debrandify · remove or replace wordpress branding, tahoe debrandify +1 moreDebrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- bert movie databaseWordPress Movie Database plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mahesh patel mitm bug trackerWordPress Mitm Bug Tracker plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- swebdeveloper wppricing builderWordPress wpPricing Builder plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crossedcode bverse convertWordPress bVerse Convert plugin <= 1.3.7.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- harpreet singh ajax custom css/js, harpreetsingh ajax custom css\/js +1 moreWordPress Ajax Custom CSS/JS plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability6.5 Medium
- cyclop wordpress videoWordPress WordPress Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- derethor el mejor clusterWordPress El mejor Cluster plugin <= 1.1.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- madrasthemes mas elementorWordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeworm plexx elementor extensionWordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hafiz uddin ahmed crazy call to action boxWordPress Crazy Call To Action Box plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dh9sb.dx-info adif log search widgetWordPress ADIF Log Search Widget plugin <= 1.0f - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nikhil vaghela add categories post footerWordPress Add Categories Post Footer plugin <= 2.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agustin berasategui ab categories search widgetWordPress AB Categories Search Widget plugin <= 0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tady titoWordPress Tito plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jon vincent mendoza dynamic elementor addonsWordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- sajjad67 advanced category and custom taxonomy imageAdvanced Category and Custom Taxonomy Image <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode6.4 Medium
- fahad mahmood rss feed widgetRSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode6.4 Medium
- hikvision hikcentral master lite, hikcentral master +1 moreThere is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker...2.1 Low
- hikvision hikcentral professionalThere is a SQL injection vulnerability in some HikCentral Professional versions. This could allow...7.2 High
- hikvision hikcentral master lite, hikcentral master +1 moreThere is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an...5.5 Medium
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Use of Hard-coded Credentials5.3 Medium
- Show moreLoading…