Skip to content
OpenAdvisories

Archive

30 October 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.1
    CVE-2024-10005 Public exploit

    Consul L7 Intentions Vulnerable To URL Path Bypass

    A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

  • High 7.5
    CVE-2024-50508 Public exploit

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.

  • High 8.6
    CVE-2024-50509 Public exploit

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.