Skip to content
OpenAdvisories

Archive

30 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /30 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2024-10005 Public exploit

    Consul L7 Intentions Vulnerable To URL Path Bypass

    A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

    HashiCorp Consul Enterprise Consul consul Debian Ubuntu Go
  • High 7.5
    CVE-2024-50508 Public exploit

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.

    Chetan Khandla Woocommerce Product Design Web / CMS
  • Critical 10.0
    CVE-2024-50510 Public exploit

    WordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects AR For Woocommerce: from n/a through <= 6.3.

    webandprint AR for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2024-50507 Public exploit

    WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through <= 1.3.

    daschmi DS.DownloadList
  • High 8.6
    CVE-2024-50509 Public exploit

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.

    Chetan Khandla Woocommerce Product Design Web / CMS