CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +2 moreArbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt7.5 High
- mudler localai, mudler/localai +1 moreArbitrary File Write in mudler/LocalAI8.1 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreData Leak through CORS Misconfiguration in parisneo/lollms-webui8.1 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR in lunary-ai/lunary9.1 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +2 morePath Traversal in gaizhenbiao/chuanhuchatgpt9.1 Critical
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreImproper Access Control in lunary-ai/lunary9.1 Critical
- hitachi energy tro600, hitachienergy tro610 firmware, tro620 firmware +1 more +3 moreProfile files from TRO600 series radios are extracted in plain-text and encrypted file formats....2.7 Low
- ali azlan risk warning barWordPress Risk Warning Bar plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- edward stoever monitor.chatWordPress Monitor.chat plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- amadercode acl floating cart for woocommerceWordPress ACL Floating Cart for WooCommerce plugin <= 0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hitachi energy tro600, hitachienergy tro610 firmware, tro620 firmware +1 more +3 moreCommand injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows...7.2 High
- tidaweb tida url screenshotWordPress Tida URL Screenshot plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mozilla focus for ios, firefox focus +1 moreFocus was incorrectly allowing internal links to utilize the app scheme used for deeplinking,...6.5 Medium
- mozilla firefox, thunderbird +1 morePotential race conditions in IndexedDB could have caused memory corruption, leading to a...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBy sending a specially crafted push message, a remote server could have hung the parent process,...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreRepeated writes to history interface attributes could have been used to cause a Denial of Service...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreVideo frames could have been leaked between origins in some situations. This vulnerability...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreTruncation of a long URL could have allowed origin spoofing in a permission prompt. This...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe origin of an external protocol handler prompt could have been obscured using a data: URL...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have caused a use-after-free when accessibility was enabled, leading to a...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreA permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...7.5 High
- abdullah irfan whitelistWordPress Whitelist plugin <= 3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ilias gomatos affiliate platformWordPress Affiliate Platform plugin <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ioannup code generateWordPress Code Generate plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- carl alberto simple custom adminWordPress Simple Custom Admin plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rafasashi svg captchaWordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- xarbo buddypress greeting messageWordPress BuddyPress Greeting Message plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lunad3v arealoadLUNAD3v AreaLoad request.php sql injection5.1 Medium
- matt royal woocommerce maintenance modeWordPress WooCommerce Maintenance Mode plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- marian extra privacy for elementorWordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- abdullah irfan documentpress, document press +1 moreWordPress DocumentPress plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- chartscss coubWordPress Coub plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- campus explorer widget, campusexplorer campus explorer widget +1 moreWordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- leenk leenk.meWordPress leenk.me plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webgensis simple load moreWordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- elena zhyvohliad ucat – next story, elenazhyvohliad ucat +1 moreWordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- contrid newslettersNewsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode6.4 Medium
- chatplus chatplusjpWordPress chatplusjp plugin <= 1.02 - Cross Site Scripting (XSS) vulnerability7.1 High
- web bricks addons for elementor, webbricks web bricks addons +1 moreWordPress Web Bricks Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- asaduzzaman abir local business addons for elementorWordPress Local Business Addons For Elementor plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- sam glover client power tools portal, samglover client power tools +1 moreWordPress Client Power Tools Portal plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gief google docs rsvpWordPress Google Docs RSVP plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- latex2htmlWordPress LaTeX2HTML plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jinwen js paperWordPress js paper theme <= 2.5.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- moveaddons move addons for elementorMove Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates4.3 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget6.4 Medium
- cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 moreSMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode6.4 Medium
- Show moreLoading…