CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreAn information disclosure issue was addressed with improved private data redaction for log...5.5 Medium
- apple macos, tvos, visionos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 18.1, iOS 18.1...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and...5.4 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macos, mac os +1 moreA downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...2.4 Low
- apple ipados, macos, tvos +6 more +8 moreA path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS...7.8 High
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and...5.5 Medium
- apple ios, ipados, macos +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7...7.8 High
- apple ios, ipados, ios and ipados +1 more +3 moreA custom URL scheme handling issue was addressed with improved input validation. This issue is...9.6 Critical
- apple ios, ipados, macos +4 more +6 moreThis issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and...7.5 High
- nunomorgadinho plugin propagatorWordPress Plugin Propagator plugin <= 0.1 - Arbitrary File Upload vulnerability10.0 Critical
- webandprint ar, ar for wordpress +1 moreWordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability10.0 Critical
- theme horse newscardWordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability7.5 High
- theme horse meta newsWordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability7.5 High
- theme horse clean retinaWordPress Clean Retina theme <= 3.0.6 - Local File Inclusion vulnerability7.5 High
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- qode essential addons, qodeinteractive qode essential addons +1 moreWordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability7.5 High
- duende identityserverDuende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs3.1 Low
- microfocus operations agentA stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).1.8 Low
- progress software corporation chef habitat builderThe Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access token5.4 Medium
- coderCoder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter5.3 Medium
- blockart magazine blocksWordPress Magazine Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cloudways breezeWordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pickplugins post grid and gutenberg blocksWordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wowdevs sky addons for elementorWordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ayecode geodirectoryWordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andy moyle church adminWordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- brainstorm force astra widgetsWordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- chris coyier codepen embedded pens shortcode, codepen +1 moreWordPress CodePen Embedded Pens Shortcode plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- merkulove selection liteWordPress Selection Lite plugin <= 1.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- futuriowp futurio extraWordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreWordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 moreWordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- redefiningtheweb pdf generator addon for elementor page builderWordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pluginus meta data and taxonomies filter, realmag777 mdtf +1 moreWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp codeus advanced sermonsWordPress Advanced Sermons plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- firelight lightbox, firelightwp firelight lightbox +1 moreWordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpdeveloper embedpressWordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fla-shop interactive world mapWordPress Interactive World Map plugin <= 3.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pierre lebedel kodex posts likesWordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- siteengineai scrollbar by webxapp – best vertical/horizontal scrollbars pluginWordPress Scrollbar by webxapp plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- faceleg raptor editorWordPress Raptor Editor plugin <= 1.0.20 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brightvesseldev textboxesWordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hokku message bridge for contact form 7 and telegramContact Form 7 + Telegram <= 0.8.5 - Missing Authorization to Authenticated (Subscriber+) Subscription Approve/Pause/Refuse5.4 Medium
- joniles mpxjMPXJ has a Potential Path Traversal Vulnerability5.3 Medium
- Show moreLoading…