Skip to content
OpenAdvisories

Archive

1 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /1 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

58 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-9269

    Relogo <= 0.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Relogo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with …

    cconover Relogo Web / CMS
  • Medium 6.4
    CVE-2024-9119

    SVG Complete <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The SVG Complete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    automatic-rock SVG Complete Web / CMS
  • Medium 6.4
    CVE-2024-8107

    Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    Revolution Slider Slider Revolution Web / CMS
  • Medium 5.3
    CVE-2024-21531

    git-shallow-clone Argument Injection vulnerability

    All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function.

    git-shallow-clone npm
  • Medium 4.9
    CVE-2024-0116

    NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing…

    NVIDIA Triton Inference Server
  • Medium 6.5
    CVE-2024-47396

    WordPress Move Addons for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.3.

    moveaddons Move Addons for Elementor
  • Medium 5.3
    CVE-2024-9358

    ThingsBoard HTTP RPC API resource consumption

    A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remot…

  • Medium 4.7
    CVE-2024-31835 Public exploit

    Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code v…

  • Medium 5.4
    CVE-2024-46081

    Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious …

  • Medium 6.1
    CVE-2024-46079

    Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.

  • Medium 5.4
    CVE-2024-46083

    Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious …

  • Medium 5.4
    CVE-2024-46082

    Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field param…

  • Medium 6.6
    CVE-2024-45999

    A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function loc…

  • Medium 4.7
    CVE-2024-45967

    Pagekit Cross-site Scripting vulnerability

    Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

    pagekit/pagekit Packagist
  • Medium 5.6
    CVE-2024-44610 Public exploit

    PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via s…

  • Medium 5.7
    CVE-2024-44744

    An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted bin…

  • Medium 6.5
    CVE-2024-25658

    Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (…

  • Medium 6.8
    CVE-2021-37577

    Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Blueto…

    bluez Ubuntu