CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- frappe pressFrappe Press possible HTML injection through SaaS Signup inputs1.2 Low
- renata bracichowicz 3d work in progressWordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Upload vulnerability9.9 Critical
- james eggers portfolleoWordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability9.9 Critical
- ecomerciar woocommerce custom profile pictureWordPress Woocommerce Custom Profile Picture plugin <= 1.0 - Arbitrary File Upload vulnerability9.9 Critical
- admin verbalize, verbalize wp +1 moreWordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- alexander de ridder ink officialWordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability9.9 Critical
- dogu pekgoz ai image generator for your content & featured images – ai postpix, postpix ai postpix +1 moreWordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability9.9 Critical
- michael bourne custom icons for elementorWordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability6.6 Medium
- zzcmsZZCMS ChangeTable.php unrestricted upload5.3 Medium
- zzcmsZZCMS phome.php Ebak_DotranExecutSQL sql injection5.3 Medium
- hcl sametimeHCL Sametime is impacted by insecure services4.0 Medium
- qode qi blocksWordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability7.5 High
- theme horse mags, themehorse interface +1 moreWordPress Mags theme <= 1.1.6 - Local File Inclusion vulnerability7.5 High
- revmakx backup and staging by wp time capsuleWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability7.2 High
- renata bracichowicz 3d work in progressWordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Deletion vulnerability7.7 High
- vitalii ibryl switch user, vitaliibryl switch user +1 moreWordPress iBryl Switch User plugin <= 1.0.1 - Account Takeover vulnerability8.8 High
- pimcoreChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing8.7 High
- fortinet fortimanager, fortimanager cloud +1 moreA missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through...9.8 Critical
- zzcmsZZCMS inc.php information disclosure6.9 Medium
- tenda rx9, rx9 pro, rx9 pro firmware +2 moreTenda RX9/RX9 Pro SetNetControlList sub_4337EC stack-based overflow8.7 High
- hcl sametimeHCL Sametime is impacted by misconfigured security related HTTP headers5.8 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Static hard-coded encryption passphrase used by default5.9 Medium
- tenda rx9, rx9 pro, rx9 pro firmware +2 moreTenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow8.7 High
- siemens intermesh 7177 hybrid 2.0 subscriber, intermesh 7707 fire subscriber, intermesh 7177 hybrid2.0 subscriber +1 more +3 moreA vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2...8.5 High
- siemens intermesh 7177 hybrid 2.0 subscriber, intermesh 7707 fire subscriber, intermesh 7707 fire subscriber firmware +2 moreA vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2...6.9 Medium
- siemens intermesh 7177 hybrid 2.0 subscriber, intermesh 7707 fire subscriber, intermesh 7177 hybrid2.0 subscriber +1 more +3 moreA vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2...6.9 Medium
- siemens intermesh 7177 hybrid 2.0 subscriber, intermesh 7707 fire subscriber, intermesh 7177 hybrid2.0 subscriber +1 more +3 moreA vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2...10.0 Critical
- tenda rx9, rx9 pro, rx9 pro firmware +2 moreTenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow8.7 High
- steelthemes nioland, nioland - saas & software startup tech wordpress theme +1 moreNioland <= 1.2.6 - Reflected Cross-Site Scripting via s6.1 Medium
- linux-pam, red hat enterprise linux 10, enterprise linux 7 +3 more +5 morePam: libpam: libpam vulnerable to read hashed password4.7 Medium
- llamastack llama stackLlama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a...6.3 Medium
- tenda ac10, ac10u, ac1206 +17 more +19 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference7.1 High
- esafenet cdgESAFENET CDG PrintPolicyService.java sql injection5.3 Medium
- esafenet cdgESAFENET CDG ReUserOrganiseService.java sql injection5.3 Medium
- drupal svg embed, svg embed project embed +1 moreSVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-0505.4 Medium
- localserverCross-Site Scripting (XSS) vulnerability in LocalServer6.1 Medium
- localserverCross-Site Scripting (XSS) vulnerability in LocalServer6.1 Medium
- localserverCross-Site Scripting (XSS) vulnerability in LocalServer6.1 Medium
- localserverCross-Site Scripting (XSS) vulnerability in LocalServer6.1 Medium
- esafenet cdgESAFENET CDG UsbKeyAjax.java sql injection5.3 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting5.4 Medium
- sentryTelestream Sentry Reports Page page cross site scripting5.3 Medium
- ibm cics transaction gateway for multiplatforms, cics transaction gateway +1 moreIBM CICS Transaction Gateway for Multiplatforms information disclosure4.9 Medium
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure4.3 Medium
- smub transients managerTransients Manager <= 2.0.6 - Cross-Site Request Forgery4.3 Medium
- dfactory responsive lightboxWordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability5.3 Medium
- profilepress, profilepress team pro +1 moreProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider8.1 High
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 moreRSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization4.3 Medium
- metagauss download pluginDownload Plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download6.5 Medium
- linux, linux kernel +1 moremm/mremap: fix move_normal_pmd/retract_page_tables race7.8 High
- Show moreLoading…