Skip to content
OpenAdvisories

Archive

1 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /1 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-43919 Public exploit Scanner template EPSS 45%

    WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability

    Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10.

    YARPP YARPP
  • Medium 6.5
    CVE-2024-43998 Public exploit

    WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n/a through 1.0.3.

    WebsiteinWP Blogpoet
  • Critical 9.8
    CVE-2024-7456 Public exploit

    SQL Injection in lunary-ai/lunary

    A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, allowing for SQL injection. The `orderByClause` variable is con…

    lunary-ai lunary-ai/lunary
  • Medium 5.3
    CVE-2024-10654 Public exploit

    TOTOLINK LR350 formLoginAuth.htm authorization

    A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to autho…

    Toto Link LR350
  • High 8.8
    CVE-2024-48217 Public exploit

    An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-…