Skip to content
OpenAdvisories

Archive

1 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /1 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9401

    Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these …

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2024-9402

    Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2024-9392

    A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability af…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2024-9289

    WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation

    The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callback() function not properly validating a user's identity prior…

    RedefiningTheWeb WordPress & WooCommerce Affiliate Program Web / CMS
  • Critical 9.8
    CVE-2024-9265

    Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

    The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_…

    CodeRevolution Echo RSS Feed Post Generator Web / CMS
  • Critical 9.8
    CVE-2024-9106 Public exploit

    Wechat Social login <= 1.3.0 - Authentication Bypass

    The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticate…

    xunhuweb Wechat Social login 微信QQ钉钉登录插件 Web / CMS
  • Critical 9.8
    CVE-2024-9108

    Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

    The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated at…

    xunhuweb Wechat Social login 微信QQ钉钉登录插件 Web / CMS
  • Critical 9.0
    CVE-2024-25660

    The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attack…

  • Critical 9.8
    CVE-2024-41276 Public exploit

    A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanis…