CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet...5.3 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability...7.5 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA denial of service vulnerability exists in the Web Application functionality of LevelOne WBR...3.7 Low
- linuxext4: turn quotas off if mount failed after enabling quotas7.8 High
- linuxx86/apic: Don't disable x2APIC if locked7.0 High
- eclipse mosquittoEclipse Mosquito: Double free vulnerability6.0 Medium
- eclipse mosquittoEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback7.2 High
- modernaweb black widgets for elementorBlack Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- w3speedsterW3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution9.1 Critical
- matt whiteman bulk change roleWordPress Bulk Change Role plugin <= 1.1 - Privilege Escalation vulnerability8.8 High
- azexo marketing automation by azexoWordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Privilege Escalation vulnerability8.8 High
- chetan khandla woocommerce product designWordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability7.5 High
- web and print design ar for woocommerceWordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerability10.0 Critical
- david donisa wp donimedia carouselWordPress WP donimedia carousel plugin <= 1.0.1 - Arbitrary File Upload vulnerability9.9 Critical
- daniel schmitzer ds.downloadlistWordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability9.8 Critical
- posti shippingWordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability5.3 Medium
- chetan khandla woocommerce product designWordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability8.6 High
- deryck user toolkitWordPress User Toolkit plugin <= 1.2.3 - Account Takeover vulnerability9.8 Critical
- htplugins wp team – wordpress team member pluginHT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode6.4 Medium
- greg winiarski wpadverts – classifieds pluginWPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode7.2 High
- codename065 download managerDownload Manager < 3.3.00 - Contributor+ Stored XSS5.4 Medium
- fatcatapps pricing table wordpress plugin – easy pricing tablesPricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.5 - Reflected Cross-Site Scripting6.1 Medium
- wp chill download monitorDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure4.3 Medium
- markjaquith subscribe to commentsSubscribe to Comments <= 2.3 - Reflected Cross-Site Scripting6.1 Medium
- fstaude widget or sidebar shortcodeWidget or Sidebar Shortcode <= 0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- josh401 ultimate tinymceUltimate TinyMCE <= 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- codezips online institute management systemCodezips Online Institute Management System login.php sql injection6.9 Medium
- codezips free exam hall seating management systemCodezips Free Exam Hall Seating Management System login.php sql injection6.9 Medium
- amu02aftab enable shortcodes inside widgets,comments and experts, aftabhusain enable shortcodes inside widgets\,comments and experts +1 moreEnable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- suifengtec wp baidu mapWP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bowo code explorerCode Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading4.9 Medium
- twinpictures t(-) countdownT(-) Countdown <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- code-projects blood bank system, fabian blood bank management system +1 morecode-projects Blood Bank System B-.php sql injection5.3 Medium
- wuzhicmswuzhicms block.php edit code injection5.3 Medium
- klokan maptiler tileserver-gl, klokantech maptiler tileserver gl +1 moreKlokan MapTiler tileserver-gl URL cross site scripting5.3 Medium
- esafenet cdgESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection5.3 Medium
kamailioOSS-FuzzHeap-buffer-overflow in extract_ice_optionNo score- esafenet cdgESAFENET CDG ExamCDGDocService.java findById sql injection5.3 Medium
- esafenet cdgESAFENET CDG HookWhiteListService.java sql injection5.3 Medium
- ethereumAn issue in Ethereum v.1.12.2 allows remote attacker to execute arbitrary code via the PepeGxng...9.8 Critical
- ethereumInsecure Permissions vulnerability in Ethereum v.1.12.2 allows a remote attacker to escalate...8.8 High
- ethereumInsecure Permissions vulnerability in Ethereum v.1.12.2 allows a remote attacker to escalate...8.8 High
- ethereumAn issue in Ethereum v.1.12.2 allows remote attacker to execute arbitrary code via the Owned...9.8 Critical
- shenzhen interconnection harbor network technology ofweek online exhibitionCross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd...6.1 Medium
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.8 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.8 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.8 High
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.8 High
- draytek vigor3900, vigor3900 firmware +1 moreIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...9.8 Critical
- draytek vigor3900 firmwareIn Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and...8.8 High
- Show moreLoading…