CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- faurecia clarion electronics co., ltd. smartplayDefault Credentials in ssh service for SmartPlay in Maruti Suzuki7.4 High
- ubiquiti unifi network applicationA Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi...8.8 High
- cert vinceCERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.6.5 Medium
- argoproj argo workflows, argo-workflows +1 moreArgo Workflows Controller: Denial of Service via malicious daemon Workflows5.7 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System POST Parameter edit_profile.php sql injection5.3 Medium
- squid-cache squidSquid Denial of Service7.5 High
- codezips hospital appointment systemCodezips Hospital Appointment System loginAction.php sql injection6.9 Medium
- mattermostIncorrect Session Creation with Desktop SSO3.5 Low
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRexml: rexml: denial of service via inefficient regex parsing7.5 High
- ruby rexml, netapp ontap tools +1 moreREXML ReDoS vulnerability6.6 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System delete.php cross-site request forgery6.9 Medium
- d3tn µd3tn, ud3tn +1 moreReachable Assertion in µD3TN7.5 High
- wpxpo postxWordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- project worlds online time table generatorProject Worlds Online Time Table Generator staffdashboard.php sql injection5.3 Medium
- mongodb mongocryptd, mongo crypt v1.so +1 moreCSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines2.2 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header...5.3 Medium
- jetbrains hubIn JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent...4.3 Medium
- themes4wp youtube external subtitlesWordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- checklist trip planWordPress Trip Plan plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- amilia store, martin drapeau amilia store +1 moreWordPress Amilia Store plugin <= 2.9.8 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- climax themes kata plusWordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aa-team premium seo packWordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability8.5 High
- chenyenming woocommerce quote calculatorWordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability9.3 Critical
- micahblu rsvp me, micah blu rvsp me +1 moreWordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability9.3 Critical
- buynowdepot advanced online ordering and delivery platformWordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability8.1 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability4.7 Medium
- swoop 1-click login: passwordless authentication, 1-click login\: passwordless authentication, swoopnow 1-click login\ +2 moreWordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability9.8 Critical
- meetupWordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability9.8 Critical
- priyabrata sarkar token loginWordPress Token Login plugin <= 1.0.3 - Broken Authentication vulnerability8.8 High
- bob namaste! lms, kibokolabs namaste\! lms +1 moreWordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability8.8 High
- project worlds online time table generatorProject Worlds Online Time Table Generator admindashboard.php sql injection5.3 Medium
- wpclever wpc shop as a customer for woocommerceWordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability8.8 High
- realmag777 mdtf, pluginus wordpress meta data and taxonomies filter +1 moreWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability7.3 High
- scott paterson scottcartWordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability8.3 High
- ajit bohra wp query console, lubus wp querey table +1 moreWordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability10.0 Critical
- stacks mobile app builder, stacksmarket stacks mobile app builder +1 moreWordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability9.8 Critical
- acnoo flutter apiWordPress Acnoo Flutter API plugin <= 1.0.5 - Account Takeover vulnerability9.8 Critical
- acnoo maanstore apiWordPress MaanStore API plugin <= 1.0.1 - Account Takeover vulnerability9.8 Critical
- realty workstation workstation, realtyworkstation realty workstation +1 moreWordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability9.8 Critical
- royal-elementor-addons royal elementor addonsWordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability6.5 Medium
- spring, spring webflux +1 moreAuthorization Bypass of Static Resources in WebFlux Applications9.1 Critical
- Show moreLoading…