Skip to content
OpenAdvisories

Archive

4 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /4 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-50526 Public exploit

    WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through <= 1.0.2.

    Lindeni Mahlalela Multi Purpose Mail Form
  • Medium 4.9
    CVE-2024-51665 Public exploit

    WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1.

    Noor Alam Magical Addons For Elementor
  • High 7.3
    CVE-2024-10758 Public exploit

    code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It…

    code-projects anirbandutta9 Content Management System News-Buzz
  • High 8.4
    CVE-2024-48336 Public exploit

    The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app …

  • Critical 9.8
    CVE-2024-48061 Public exploit

    Langflow vulnerable to remote code execution

    langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.

    langflow PyPI