CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- tezzeract league of legends shortcodesLeague of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode6.5 Medium
- naver whale browser installerWhale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user...6.3 Medium
- 10web social post feed10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting6.1 Medium
- mapster wp mapsMapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update8.8 High
- sohelwpexpert awesome buttonsAwesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode6.4 Medium
- buddypressBuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal8.1 High
- appcheap app builder – create native android & ios apps on the flight, app builder +1 moreApp Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTP8.1 High
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +321 more +323 moreSharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in...6.2 Medium
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +321 more +323 moreSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a...7.4 High
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +321 more +323 moreSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow...7.4 High
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +324 more +326 moreSharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an...9.1 Critical
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +324 more +326 moreSharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by...8.1 High
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +324 more +326 moreSharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path...5.3 Medium
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +321 more +323 moreSharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP...4.9 Medium
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +324 more +326 moreSharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds...7.5 High
- sharp bp-30c25 firmware, bp-30c25t firmware, bp-30c25y firmware +324 more +326 moreSharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper...7.5 High
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreComments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider9.8 Critical
- octolize woocommerce ups shipping, shipping live rates and access points for ups for woocommerce +1 moreUPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset4.3 Medium
- choplugins order notification for telegramOrder Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message5.3 Medium
- chidiwilliams buzzchidiwilliams buzz model_loader.py download_model temp file2.0 Low
- itsourcecode payroll management systemSourceCodester Payroll Management System main login buffer overflow5.3 Medium
- 1000 projects sales management systemCodezips Sales Management System addcustind.php sql injection6.9 Medium
- 1000 projects sales management systemCodezips Sales Management System addcustcom.php sql injection6.9 Medium
- 1000 projects sales management systemCodezips Sales Management System addstock.php sql injection6.9 Medium
h3OSS-FuzzHeap-buffer-overflow in polygonToCellsExperimentalNo score- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software invoice.php sql injection5.1 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software print.php sql injection5.1 Medium
- tektronix sentryCross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute...6.5 Medium
- kliqqi cmsKliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to...7.2 High
- totaljs total.js, total.js cms +1 moreAn issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js...8.8 High
- No product listedCross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute...6.1 Medium
- mayurik best courier management systemFile Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker...9.8 Critical
- mayurik best courier management systemSQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote...9.8 Critical
- mayurik best house rental management systemSQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a...9.8 Critical
- tenda ax2 pro firmwareA command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda...7.3 High
- hcengineering hulyAn arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute...6.5 Medium
- hulyAn arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute...6.1 Medium
- olivegroup olivevleAn issue in Olive VLE allows an attacker to obtain sensitive information via the reset password...9.8 Critical
- sohelamin chatbotAIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is...6.1 Medium
- esafenet cdgA SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute...6.3 Medium
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the...4.8 Medium
- wtcms project wtcmsWTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl...4.7 Medium
- wtcms project wtcmsWTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController...9.8 Critical
- ofcms project ofcmsAn issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the...6.5 Medium
- ofcms project ofcmsAn issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of...6.5 Medium
- mipjz project mipjzAn issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php...4.9 Medium
- mipjz project mipjzmipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller...4.8 Medium
- mipjz project mipjzAn issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool...4.9 Medium
- funadminSQL injection in funadmin7.2 High
- funadminSQL injection in funadmin7.2 High
- Show moreLoading…