Skip to content
OpenAdvisories

Archive

14 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /14 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-52375 Public exploit

    WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through <= 1.5.

    Arttia Creative Datasets Manager by Arttia Creative
  • Critical 10.0
    CVE-2024-52380 Public exploit

    WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through <= 1.0.0.

    softpulseinfotech Picsmize
  • Critical 9.8
    CVE-2024-52382 Public exploit

    WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through <= 1.0.0.

    medmatech Matix Popup Builder
  • High 8.7
    CVE-2024-52302 Public exploit

    common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)

    common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint a…

    OsamaTaher Java-springboot-codebase
  • Medium 5.3
    CVE-2024-7124 Public exploit

    Reflected XSS in DInGO dLibra

    Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL…

    Poznan Supercomputing and Networking Center DInGO dLIbra
  • Critical 9.8
    CVE-2024-10571 Public exploit Scanner template

    Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

    The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary file…

    Ays Pro Chartify – WordPress Chart Plugin Web / CMS
  • High 7.1
    CVE-2024-5082 Public exploit Scanner template

    Nexus Repository 2 - Remote Code Execution

    A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.  This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

    Sonatype Nexus Repository
  • Medium 5.1
    CVE-2024-5083 Public exploit

    Nexus Repository 2 - Stored XSS

    A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

    Sonatype Nexus Repository
  • High 7.5
    CVE-2024-50968 Public exploit

    A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1…