Skip to content
OpenAdvisories

Archive

1 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /1 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-9224 Public exploit

    Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read

    The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read …

    kau-boy Hello World Web / CMS
  • Critical 9.8
    CVE-2024-9106 Public exploit

    Wechat Social login <= 1.3.0 - Authentication Bypass

    The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticate…

    xunhuweb Wechat Social login 微信QQ钉钉登录插件 Web / CMS
  • Medium 4.7
    CVE-2024-31835 Public exploit

    Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code v…

  • Medium 5.6
    CVE-2024-44610 Public exploit

    PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via s…

  • Critical 9.8
    CVE-2024-41276 Public exploit

    A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanis…