Skip to content
OpenAdvisories

Archive

13 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /13 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-55890 Public exploit Scanner template

    D-Tale allows Remote Code Execution through the Custom Filter Input

    D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the `upda…

    man-group dtale dtale PyPI
  • High 8.7
    CVE-2024-55661 Public exploit EPSS 31%

    Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

    Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public `remember()` met…

    laravel pulse laravel/pulse Packagist
  • High 7.2
    CVE-2024-54330 Public exploit Scanner template

    WordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in hurraki Hurrakify hurrakify allows Server Side Request Forgery.This issue affects Hurrakify: from n/a through <= 2.4.

    hurraki Hurrakify
  • Critical 9.3
    CVE-2024-54292 Public exploit

    WordPress Appsplate plugin <= 2.1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsplate Appsplate appsplate allows SQL Injection.This issue affects Appsplate: from n/a through <= 2.1.3.

    appsplate Appsplate
  • Critical 9.9
    CVE-2024-54262 Public exploit

    WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a through <= 1.6.2.

    sidngr Import Export For WooCommerce Web / CMS
  • Critical 9.8
    CVE-2024-54239 Public exploit

    WordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in dugudlabs Eyewear prescription form eyewear-prescription-form allows Privilege Escalation.This issue affects Eyewear prescription form: from n/a through <= 4.0.18.

    dugudlabs Eyewear prescription form
  • Medium 4.3
    CVE-2023-36531 Public exploit

    WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability

    Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls for Creators and Brands: from n/a thro…

    liquidpoll LiquidPoll – Advanced Polls for Creators and Brands
  • Medium 4.9
    CVE-2024-55889 Public exploit

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wi…

    thorsten phpMyFAQ thorsten/phpmyfaq Packagist
  • Critical 9.8
    CVE-2024-9290 Public exploit

    Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

    The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, …

    azzaroco Super Backup & Clone - Migrate for WordPress Web / CMS
  • Critical 9.8
    CVE-2024-12603 Public exploit

    A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application passw…

    TECNO com.transsion.applock
  • Critical 9.8
    CVE-2024-55956 Exploited · Ransomware Public exploit Scanner template EPSS 94%

    In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can imp…

    KEV Dec 17, 2024