Skip to content
OpenAdvisories

Archive

29 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /29 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.5
    CVE-2024-7985 Public exploit

    FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload

    The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. This makes it pos…

    Softaculous FileOrganizer – WordPress File Manager Web / CMS
  • Medium 4.9
    CVE-2024-8309 Public exploit EPSS 14%

    SQL Injection in langchain-ai/langchain

    A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting al…

    langchain-ai langchain-ai/langchain langchain langchain-community PyPI
  • Critical 9.8
    CVE-2024-50475 Public exploit

    WordPress Signup Page plugin <= 1.0 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in Scott Gamon Signup Page signup-page allows Privilege Escalation.This issue affects Signup Page: from n/a through <= 1.0.

    Scott Gamon Signup Page
  • Critical 9.8
    CVE-2024-50476 Public exploit

    WordPress GRÜN spendino Spendenformular plugin <= 1.0.1 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in GRÜN Software Group GmbH GRÜN spendino Spendenformular spendino allows Privilege Escalation.This issue affects GRÜN spendino Spendenformular: from n/a through <= 1.0.1.

    GRÜN Software Group GRÜN spendino Spendenformular
  • Critical 9.8
    CVE-2024-50485 Public exploit

    WordPress Exam Matrix plugin <= 1.5 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Udit Rawat Exam Matrix exam-matrix allows Privilege Escalation.This issue affects Exam Matrix: from n/a through <= 1.5.

    Udit Rawat Exam Matrix
  • Critical 9.8
    CVE-2024-50490 Public exploit

    WordPress PegaPoll plugin <= 1.0.2 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in lowcage PegaPoll pegapoll allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PegaPoll: from n/a through <= 1.0.2.

    lowcage PegaPoll
  • Critical 9.9
    CVE-2024-50427 Public exploit

    WordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136.

    devsoftbaltic SurveyJS
  • Critical 10.0
    CVE-2024-50473 Public exploit

    WordPress Ajar in5 Embed plugin <= 3.1.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through <= 3.1.3.

    Ajar Productions Ajar in5 Embed
  • Critical 10.0
    CVE-2024-50482 Public exploit

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.

    Chetan Khandla Woocommerce Product Design Web / CMS
  • Critical 10.0
    CVE-2024-50493 Public exploit

    WordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation automatic-translation allows Upload a Web Shell to a Web Server.This issue affects Automatic Translation: from n/a through <= 1.0.4.

    masterhomepage Automatic Translation
  • High 8.1
    CVE-2024-48955 Public exploit

    Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the funct…

  • Critical 9.8
    CVE-2024-48573 Public exploit

    A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and admi…

  • Critical 10.0
    CVE-2024-51378 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers …

    KEV Dec 4, 2024
  • Critical 10.0
    CVE-2024-51567 Exploited · Ransomware Public exploit Scanner template EPSS 84%

    upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypa…

    KEV Nov 7, 2024
  • Critical 10.0
    CVE-2024-51568 Public exploit Scanner template EPSS 48%

    CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecu…