Skip to content
OpenAdvisories

Archive

10 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /10 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-11059

    Project Worlds Free Download Online Shopping System success.php sql injection

    A vulnerability was found in Project Worlds Free Download Online Shopping System up to 192.168.1.88. It has been rated as critical. This issue affects some unknown processing of the file /online-shopping-webvsite-in-php-master/success.php. The manipulation of…

    Project Worlds Free Download Online Shopping System
  • Medium 4.7
    CVE-2024-11058

    CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection

    A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to s…

    CodeAstro Real Estate Management System
  • Medium 6.1
    CVE-2024-10265

    Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter

    The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.15.…

    10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder Web / CMS
  • Medium 6.5
    CVE-2024-51576

    WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through <= 1.0.1.

    wpza AMP Img Shortcode
  • Medium 6.3
    CVE-2024-11054

    SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload

    A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. Th…

    SourceCodester Simple Music Cloud Community System
  • Medium 6.5
    CVE-2024-51577

    WordPress bpmn.io plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in neville.lugton bpmn.io bpmnio allows Stored XSS.This issue affects bpmn.io: from n/a through <= 1.0.

    neville.lugton bpmn.io
  • Medium 6.5
    CVE-2024-51578

    WordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lpagg 3D Presentation 3d-presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through <= 1.0.

    lpagg 3D Presentation
  • Medium 6.5
    CVE-2024-51580

    WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zootemplate Clever Addons for Elementor cafe-lite allows Stored XSS.This issue affects Clever Addons for Elementor: from n/a through <= 2.2.1.

    Zootemplate Clever Addons for Elementor
  • Medium 6.5
    CVE-2024-51581

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elemen…

    nicheaddons Restaurant & Cafe Addon for Elementor
  • Medium 6.5
    CVE-2024-51583

    WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Kento Ads Rotator kento-ads-rotator allows Stored XSS.This issue affects Kento Ads Rotator: from n/a through <= 1.3.

    PluginsPoint Kento Ads Rotator
  • Medium 6.5
    CVE-2024-51584

    WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anas2004 Marquee Elementor with Posts marquee-elementor allows DOM-Based XSS.This issue affects Marquee Elementor with Posts: from n/a through <= 1.2.0.

    anas2004 Marquee Elementor with Posts
  • Medium 6.3
    CVE-2024-11051

    AMTT Hotel Broadband Operation System online_status.php sql injection

    A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified as critical. Affected is an unknown function of the file /manager/frontdesk/online_status.php. The manipulation of the argument AccountID leads to sq…

    AMTT Hotel Broadband Operation System
  • Medium 6.3
    CVE-2024-11046

    D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp os command injection

    A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to lau…

    D-Link DI-8003 Network devices
  • Medium 5.5
    CVE-2020-10369

    Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inferenc…

  • Medium 5.5
    CVE-2020-10367

    Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory a…

  • Medium 5.5
    CVE-2024-46955

    An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when read…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2024-46613

    WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more th…

    weechat weechat Debian Ubuntu