Skip to content
OpenAdvisories

Archive

16 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /16 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-45216 Public exploit Scanner template EPSS 93%

    Apache Solr: Authentication bypass possible using a fake URL Path ending

    Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, w…

    Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr Ubuntu Maven
  • High 8.8
    CVE-2020-36842 Public exploit

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to u…

    wpvividplugins WPvivid — Backup, Migration & Staging Web / CMS
  • High 7.3
    CVE-2024-9061 Public exploit Scanner template EPSS 54%

    WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add

    The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the softw…

    ThemeHunk WP Popup Builder – Popup Forms and Marketing Lead Generation Web / CMS
  • Critical 9.8
    CVE-2016-15042 Public exploit Scanner template

    Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload

    The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJA…

    N-Media Frontend File Manager Plugin N-Media Post Front-end Form
  • High 7.2
    CVE-2016-15041 Public exploit Scanner template

    MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

    The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, and including, 3.1.2 due to insufficient…

    mainwp MainWP Dashboard: Self-hosted WordPress Management for Agencies Web / CMS
  • High 8.3
    CVE-2017-20192 Public exploit Scanner template

    Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

    The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This m…

    Strategy11 Team Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder Web / CMS
  • Medium 5.3
    CVE-2024-44762 Public exploit Scanner template

    A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid…