CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD ACTranslators STEP File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Code Execution Vulnerability7.8 High
- mondula multi step formWordPress Multi Step Form plugin <= 1.7.21 - Broken Access Control vulnerability4.3 Medium
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD MODEL File Parsing Use-After-Free Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- benjamin denis seopressWordPress SEOPress plugin <= 8.1.1 - Unauthenticated Broken Access Control vulnerability5.3 Medium
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD 3DM File Parsing Use-After-Free Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreAutodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Code Execution Vulnerability7.8 High
- benjamin denis seopressWordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability4.3 Medium
- benjamin denis seopressWordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability5.4 Medium
- hmplugin aidwp, accept stripe donation - aidwp +1 moreWordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability5.3 Medium
- darkmysite, darkmysite – advanced dark mode plugin for wordpress +1 moreWordPress DarkMySite – Advanced Dark Mode Plugin for WordPress plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- odude crypto, crypto tool +1 moreCrypto <= 2.15 - Cross-Site Request Forgery to Authentication Bypass8.8 High
- odude crypto, crypto tool +1 moreCrypto <= 2.18 - Authentication Bypass via log_in9.8 Critical
- odude crypto, crypto tool +1 moreCrypto <= 2.19 - Authentication Bypass via register9.8 Critical
- @clerk expressPreload arbitrary resources by injecting additional `Link` headers4.0 Medium
- servicenow now platform, servicenow +1 moreUnauthenticated Blind SQL Injection in Core Platform8.7 High
- servicenow now platform, servicenow +1 moreSandbox Escape in Now Platform9.3 Critical
sp1-recursion-gnark-fficrates.iosp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic6.9 Medium- ping identity pingam, forgerock access management +1 moreOpen Redirect in PingAM5.1 Medium
- grafanaGrafana org admin can delete pending invites in different org2.2 Low
- erudika scooldSemicolon Path Injection on API /api;/config8.7 High
- agendaless waitressWaitress has request processing race condition in HTTP pipelining with invalid first request9.1 Critical
- agendaless waitressWaitress has a denial of service leading to high CPU usage/resource exhaustion7.5 High
- kyvernoKyverno's PolicyException objects can be created in any namespace by default8.7 High
- tyche softwares arconix shortcodesArconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode6.4 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget6.4 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- coral web design cwd 3d image galleryWordPress CWD 3D Image Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rimon habib bp member type managerWordPress BP Member Type Manager plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- manjurul.cis banner sliderWordPress Banner Slider plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF Vulnerability in parisneo/lollms-webui4.4 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreSQL Injection in langchain-ai/langchain4.9 Medium
- langchain, langchain-ai langchain-ai/langchainjs, langchainjs +2 morePrompt Injection in langchain-ai/langchainjs Leading to SQL Injection4.9 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreEmail Injection Vulnerability in lunary-ai/lunary5.3 Medium
- prashant mavinkurve agile video player liteWordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mintplex-labs mintplex-labs/anything-llm, miniplex labs labs\/anything lim, mintplexlabs anythingllm +2 moreImproper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm5.9 Medium
- langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 morePath Traversal in langchain-ai/langchainjs6.5 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreUnauthorized Access to User Chat History in gaizhenbiao/chuanhuchatgpt6.5 Medium
- parisneo lollms, parisneo/lollms, lollms lord of large language models +2 moreRemote Code Execution due to Stored XSS in parisneo/lollms6.5 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreFile Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary7.5 High
- mudler localai, mudler/localai +1 moreTiming Attack in mudler/localai7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt, gaizhenbiao\/chuanhuchatgpt +2 moreDenial of Service (DOS) in gaizhenbiao/chuanhuchatgpt7.5 High
- foxskav bet wc 2018 russiaWordPress Bet WC 2018 Russia plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…