Skip to content
OpenAdvisories

Archive

6 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /6 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

38 results · Clear filters · Feed

  • High 8.8
    CVE-2024-9563

    D-Link DIR-605L formWlanSetup_Wizard buffer overflow

    A vulnerability, which was classified as critical, has been found in D-Link DIR-605L 2.13B01 BETA. This issue affects the function formWlanSetup_Wizard of the file /goform/formWlanSetup_Wizard. The manipulation of the argument webpage leads to buffer overflow…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9562

    D-Link DIR-605L formSetWizard2 buffer overflow

    A vulnerability classified as critical was found in D-Link DIR-605L 2.13B01 BETA. This vulnerability affects the function formSetWizard1/formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. T…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9561

    D-Link DIR-605L formSetWAN_Wizard52 buffer overflow

    A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01 BETA. This affects the function formSetWAN_Wizard51/formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack …

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9559

    D-Link DIR-605L formWlanSetup buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launc…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9558

    D-Link DIR-605L formSetWanPPTP buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formSetWanPPTP of the file /goform/formSetWanPPTP. The manipulation of the argument webpage leads to buffer overflow. The attack may be initi…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9557

    D-Link DIR-605L formSetWanPPPoE buffer overflow

    A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This vulnerability affects the function formSetWanPPPoE of the file /goform/formSetWanPPPoE. The manipulation of the argument webpage leads to buffer overflow. The atta…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9556

    D-Link DIR-605L formSetEnableWizard buffer overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. This affects the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to buffer overflow. It is possi…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9555

    D-Link DIR-605L formSetEasy_Wizard buffer overflow

    A vulnerability, which was classified as critical, has been found in D-Link DIR-605L 2.13B01 BETA. Affected by this issue is the function formSetEasy_Wizard of the file /goform/formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overf…

    D-Link DIR-605L Network devices
  • High 8.5
    CVE-2024-47338

    WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through <= 1.3.

    Saad Iqbal WPExperts Square For GiveWP
  • High 7.1
    CVE-2024-44028

    WordPress NiceJob plugin < 3.6.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through < 3.6.5.

    nicejob NiceJob
  • High 7.1
    CVE-2024-44029

    WordPress Viala theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in David Garlitz viala allows Reflected XSS.This issue affects viala: from n/a through 1.3.1.

    David Garlitz viala
  • High 7.5
    CVE-2024-45248

    Multi-DNC – CWE-35: Path Traversal: '.../...//'

    Multi-DNC – CWE-35: Path Traversal: '.../...//'

    Multi-DNC Multi-DNC
  • High 7.3
    CVE-2024-45246

    Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

    Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

    Diebold Nixdorf Vynamic View prior to v5.9.5
  • High 7.1
    CVE-2024-45454

    WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affect…

    Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
  • High 7.1
    CVE-2024-47297

    WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through <= 1.0.74.

    codepeople CP Polls
  • High 7.1
    CVE-2024-47300

    WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Stored XSS.This issue affects CubeWP Forms: from n/a through <= 1.1.1.

    Imran Tauqeer CubeWP Forms
  • High 7.1
    CVE-2024-47301

    WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.

    Bit Apps Bit Form
  • High 7.1
    CVE-2024-47306

    WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy …

    Ays Pro Secure Copy Content Protection and Content Locking
  • High 7.1
    CVE-2024-47320

    WordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Westguard WS Form LITE ws-form allows Stored XSS.This issue affects WS Form LITE: from n/a through <= 1.9.238.

    Mark Westguard WS Form LITE
  • High 7.1
    CVE-2024-47322

    WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines allows Reflected XSS.This issue affects WP Timeline – Vertical and Horizontal ti…

    Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin
  • High 7.1
    CVE-2024-47326

    WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through <= 2.01.

    ILLID Share This Image
  • High 7.1
    CVE-2024-47327

    WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through <= 4.5.0.3.

    Eyal Fitoussi GEO my WordPress Web / CMS
  • High 7.1
    CVE-2024-47333

    WordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Reflected XSS.This issue affects Loops & Logic: from n/a through <= 4.1.4.

    Tangible Loops & Logic
  • High 7.1
    CVE-2024-47339

    WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through <= 2.1.9.

    JWardee WP Mail Catcher
  • High 7.1
    CVE-2024-47341

    WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lester Chan WP-DownloadManager wp-downloadmanager allows Reflected XSS.This issue affects WP-DownloadManager: from n/a through <= 1.68.8.

    Lester Chan WP-DownloadManager
  • High 8.8
    CVE-2024-9553

    D-Link DIR-605L formdumpeasysetup buffer overflow

    A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01 BETA. This affects the function formdumpeasysetup of the file /goform/formdumpeasysetup. The manipulation of the argument curTime leads to buffer overflow. It is possible to init…

    D-Link DIR-605L Network devices
  • High 7.1
    CVE-2024-47346

    WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.9.9.1.

    Tribulant Software Newsletters
  • High 7.1
    CVE-2024-47347

    WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through <= 2.7.6.

    Ays Pro Chartify
  • High 7.1
    CVE-2024-47348

    WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style…

    YellowPencil YellowPencil Visual CSS Style Editor
  • High 7.1
    CVE-2024-47349

    WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through <= 11.50.

    Amauri WPMobile.App
  • High 7.1
    CVE-2024-47352

    WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored XSS.This issue affects WP Bulk Delete: from n/a through <= 1.3.1.

    Xylus Themes WP Bulk Delete
  • High 8.8
    CVE-2024-9552

    D-Link DIR-605L formSetWanNonLogin buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been rated as critical. Affected by this issue is the function formSetWanNonLogin of the file /goform/formSetWanNonLogin. The manipulation of the argument webpage leads to buffer overflow. The …

    D-Link DIR-605L Network devices
  • High 7.1
    CVE-2024-47360

    WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through <= 1.6.20.

    Booking Algorithms BA Book Everything
  • High 7.1
    CVE-2024-47367

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a…

    YITHEMES YITH WooCommerce Product Add-Ons Web / CMS
  • High 8.8
    CVE-2024-9551

    D-Link DIR-605L formSetWanL2TP buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been declared as critical. Affected by this vulnerability is the function formSetWanL2TP of the file /goform/formSetWanL2TP. The manipulation of the argument webpage leads to buffer overflow. T…

    D-Link DIR-605L Network devices
  • High 8.8
    CVE-2024-9550

    D-Link DIR-605L formLogDnsquery buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the argument curTime leads to buffer overflow. It is possible to l…

    D-Link DIR-605L Network devices
  • High 7.8
    CVE-2024-45245

    Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Diebold Nixdorf Vynamic View prior
  • High 8.8
    CVE-2024-9549

    D-Link DIR-605L formEasySetupWizard formEasySetupWizard2 buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formEasySetupWizard/formEasySetupWizard2 of the file /goform/formEasySetupWizard. The manipulation of the argument curTime leads to buffer ov…

    D-Link DIR-605L Network devices