CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System update.php upload unrestricted upload5.3 Medium
- poco-z guns-medical, guns-medial +1 morePoco-z Guns-Medical File Upload upload cross site scripting5.3 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System controller.php doCheckout sql injection5.3 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System controller.php upload unrestricted upload5.3 Medium
- code-projects blood bank management, code projects blood bank management system +1 morecode-projects Blood Bank Management accept.php sql injection5.3 Medium
- code-projects blood bank management, code projects blood bank management system +1 morecode-projects Blood Bank Management abs.php sql injection5.3 Medium
kamailioOSS-FuzzHeap-buffer-overflow in extract_fmtpNo score- kde kmailispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of...5.9 Medium
- cleo harmony, lexicom, vltrader +1 more +3 moreIn Cleo Harmony before 5.8.0.20, VLTrader before 5.8.0.20, and LexiCom before 5.8.0.20, there is...9.8 Critical
- ironmansoftware powershell universalIronman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their...8.8 High
- tinyxml2 project tinyxml2TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to...6.5 Medium
- tinyxml2 project tinyxml2TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application...6.5 Medium
- libsndfile project libsndfilelibsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in...6.5 Medium
- libsndfile project libsndfilelibsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.5.5 Medium
- cyclonedx cdxgenCycloneDX cdxgen may execute code contained within build-related files7.2 High
- gnu scientific libraryGSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many...3.6 Low
- libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 moreAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...5.9 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software edit_customer.php sql injection5.3 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software edit_fuel.php sql injection5.3 Medium
- 3rd-eden useragentGHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent8.7 High
- blowsie pure javascript html5 parser, pure-javascript-html5-parser +1 moreGHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser8.7 High
- ftonato nope-validatorGHSL-2020-303: Regular Expression Denial of Service (ReDoS) in nope-validator8.7 High
- ansman validate.jsGHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js8.7 High
- kates html2markdownGHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown8.7 High
- benhmoore knwlGHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js8.7 High
- talyssonoc commonregexjsGHSL-2020-291: Regular Expression Denial of Service (ReDoS) in CommonRegexJS8.7 High
- foundation, foundation foundation-sites +1 moreGHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites8.7 High
- bevacqua insaneGHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane8.7 High
- roxnor wp social login and register social counterWp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider9.8 Critical
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +2 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation7.5 High
- themeum wp crowdfundingWP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode6.4 Medium
- cleversoft clever addons for elementorClever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates4.3 Medium
- monkeeboy monkee-boy essentialsMonkee-Boy Essentials <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- uiux uix shortcodesUix Shortcodes – Compatible with Gutenberg <= 1.9.9 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- rock4temps editor custom color paletteEditor Custom Color Palette <= 3.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- delabon wordpress post grid layouts with pagination – sogridWordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion7.2 High
- igexsolutions wpschoolpress, jdsofttech school management system – wpschoolpress, school management system +2 moreSchool Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation8.8 High
- jamos wp show moreWP show more <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_more Shortcode6.4 Medium
- idsk id-sk toolkit, slovenskoit id sk toolkit +1 moreID-SK Toolkit <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- nvidia virtual gpu manager, cloud gaming virtual gpu, vgpu and cloud gaming +2 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of...7.1 High
- nvidia cloud gaming virtual gpu, vgpu and cloud gaming, virtual gpu manager +2 moreNVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for...7.8 High
- nvidia gpu display driver, cloud gaming guest, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- nvidia gpu display driver, cloud gaming guest, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- nvidia gpu display driver, cloud gaming guest, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- nvidia gpu display driver, cloud gaming guest, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- nvidia gpu display driver, cloud gaming guest, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- nvidia gpu display driver, cloud gaming virtual gpu, gpu, vgpu, and cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a...8.2 High
- wp chill download monitorDownload Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation4.3 Medium
- elvishp2006 wp awesome loginWP Awesome Login <= 0.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- fatcatapps forms for mailchimp by optin cat – grow your mailchimp list, forms for mailchimp by optin cat +1 moreForms for Mailchimp by Optin Cat – Grow Your MailChimp List <= 2.5.7 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…