Skip to content
OpenAdvisories

Archive

11 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /11 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-51747 Public exploit

    Arbitrary File Read and Delete in kanboard

    Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path…

    kanboard kanboard
  • Critical 10.0
    CVE-2024-51788 Public exploit

    WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0.

    Joshua Wolfe The Novel Design Store Directory
  • Critical 10.0
    CVE-2024-51791 Public exploit

    WordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Shell to a Web Server.This issue affects Forms: from n/a through <= 2.8.0.

    Made I.T. Forms
  • Critical 10.0
    CVE-2024-51793 Public exploit

    WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through <= 3.8115.

    Ateeq Rafeeq RepairBuddy
  • High 8.1
    CVE-2024-48322 Public exploit

    UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.

  • High 8.8
    CVE-2024-41992 Public exploit

    Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the s…

  • Medium 5.4
    CVE-2024-51026 Public exploit

    The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx end…