CVEs published November 19, 2024
388 CVEs were published on November 19, 2024: 17 critical, 114 high. 3 are now in CISA KEV.
- Published
- 388
- Critical
- 17
- High
- 114
- Medium
- 247
- Low
- 2
- Unrated
- 8
- Now in CISA KEV
- 3
- Fix available
- 44
Most affected products
- Linux
- 87
- Google Android
- 33
- needrestart
- 4
- IBM Concert Software
- 3
- Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- 3
- Apple macOS
- 2
- Apple Safari · Apple iOS and iPadOS +2
- 2
- Google Andrioid
- 2
- Kevin Stover Ninja Forms
- 2
- welaunch WordPress GDPR
- 2
Critical 17
- CVE-2018-9467In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination.Google Android
- CVE-2018-9433In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation.Google Android
- CVE-2018-9365In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check.Google Andrioid
- CVE-2018-9341In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check.Google Android
- CVE-2024-53066nfs: Fix KMSAN warning in decode_getfattr_attrs()Linux
- CVE-2024-42450The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data.Versa Director
- CVE-2024-53058net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB dataLinux
- CVE-2024-52401WordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerabilityHuangYe WuDeng Hacklog DownloadManager
- CVE-2024-52402WordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerabilitygunghoinc Exclusive Content Password Protect
- CVE-2024-50286ksmbd: fix slab-use-after-free in ksmbd_smb2_session_createLinux
- CVE-2024-50283ksmbd: fix slab-use-after-free in smb3_preauth_hash_rspLinux
- CVE-2024-50276net: vertexcom: mse102x: Fix possible double free of TX skbLinux
- CVE-2024-48069A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files…
- CVE-2024-48070An issue in Weaver E-cology v.
- CVE-2024-48072Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component…
- CVE-2024-48694File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute…
- CVE-2024-52675SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php.
High 114
- CVE-2024-44308The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2024-44307A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2024-44306A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2018-9466In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write.Google Android
- CVE-2018-9456In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2024-52595HTML Cleaner allows crafted scripts in special contexts like svg or math to pass throughfedora-python lxml_html_clean · lxml-html-clean
- CVE-2018-9432In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass.Google Android
- CVE-2018-9428In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free.Google Android
- CVE-2018-9424In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9419In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2018-9417In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking.Google Android
- CVE-2018-9411In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2024-52360IBM Concert Software SQL injectionIBM Concert Software
- CVE-2024-45419Zoom Apps - Improper Input ValidationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2018-9409In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9372In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9371In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory…Google Android
- CVE-2018-9370In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing…Google Android
- CVE-2018-9369In bootloader there is fastboot command allowing user specified kernel command line arguments.Google Android
- CVE-2018-9367In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2018-9366In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer…Google Android
- CVE-2024-11395Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2018-9364In the LG LAF component, there is a special command that allowed modification of certain partitions.Google Android
- CVE-2018-9348In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow.Google Android
- CVE-2024-51503A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate…Trend Micro Deep Security
Show all 114 entriesShow fewer entries
- CVE-2024-21697This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for…Atlassian Sourcetree for Mac · Atlassian Sourcetree for Win…
- CVE-2018-9344In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking.Google Android
- CVE-2018-9340In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds…Google Android
- CVE-2018-9339In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion.Google Android
- CVE-2018-9338In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-21270In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be…Google Andrioid
- CVE-2017-13315In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.Google Android
- CVE-2024-53088i40e: fix race condition by adding filter's intermediate sync stateLinux
- CVE-2024-53082virtio_net: Add hash_key_length checkLinux
- CVE-2024-53080drm/panthor: Lock XArray when getting entries for the VMLinux
- CVE-2024-53079mm/thp: fix deferred split unqueue naming and lockingLinux
- CVE-2024-48992Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart…needrestart
- CVE-2024-48991Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race…needrestart
- CVE-2024-48990Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart…needrestart
- CVE-2024-11003Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input.needrestart
- CVE-2024-53076iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()Linux
- CVE-2024-53073NFSD: Never decrement pending_async_copies on errorLinux
- CVE-2024-53068firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()Linux
- CVE-2024-53063media: dvbdev: prevent the risk of out of memory accessLinux
- CVE-2024-53062media: mgb4: protect driver against spectreLinux
- CVE-2024-53061media: s5p-jpeg: prevent buffer overflowsLinux
- CVE-2024-53059wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()Linux
- CVE-2024-53057net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOTLinux
- CVE-2024-53044net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()Linux
- CVE-2024-52388WordPress Hebrew Date plugin <= 2.1.0 - CSRF to Stored XSS vulnerabilitymikeage Hebrew Date
- CVE-2024-50532WordPress Events Manager Pro – extended plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityJerin K Alexander Events Manager Pro – extended
- CVE-2024-50533WordPress Domain Sharding plugin <= 1.2.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityDavid Garcia Domain Sharding
- CVE-2024-50534WordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilitytechdabang World Prayer Time
- CVE-2024-51631WordPress Sticky Social Bar plugin <= 2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityMd Eftakhairul Islam Sticky Social Bar
- CVE-2024-51632WordPress SH Slideshow plugin <= 4.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitySam Hoe SH Slideshow
- CVE-2024-51633WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityivycat Simple Page Specific Sidebars
- CVE-2024-51634WordPress Webriti Custom Login plugin <= 0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilitya.ankit Webriti Custom Login
- CVE-2024-51635WordPress While Loading plugin <= 3.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityGarmur While Loading
- CVE-2024-51636WordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityZ.com byGMO GMO Social Connection
- CVE-2024-51637WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitysroyalty Admin SMS Alert
- CVE-2024-51638WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerabilitySanjeev Mohindra Awesome Shortcodes For Genesis
- CVE-2024-51639WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerabilityHints Naver Blog
- CVE-2024-51640WordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerabilityMatt Rude MDR Webmaster Tools
- CVE-2024-51641WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerabilityJuan Camilo Advanced PDF Generator
- CVE-2024-51642WordPress Seo Free plugin <= 1.4 - CSRF to Stored XSS vulnerabilityivan9146 Seo Free
- CVE-2024-51643WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerabilityragaskar Amazon Associate Filter
- CVE-2024-51644WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitysamwilson Addressbook
- CVE-2024-51645WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitythemefusecom ThemeFuse Maintenance Mode
- CVE-2024-51648WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityhands01 e-shops
- CVE-2024-51649WordPress Mobilize plugin <= 3.0.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityPatrick Lumumba Mobilize
- CVE-2024-51650WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityscottmydollarplancom Random Featured Post
- CVE-2024-51652WordPress Skip To plugin <= 2.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitymarckocher Skip To
- CVE-2024-51653WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityakira1891 UPDATE NOTIFICATIONS
- CVE-2024-51654WordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEric Allen APK Downloader
- CVE-2024-51655WordPress Custom Author URL plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitymicrokid Custom Author URL
- CVE-2024-51656WordPress Flash Show And Hide Box plugin <= 1.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitylitefeel Flash Show And Hide Box
- CVE-2024-51657WordPress SmartLink Dynamic URLs plugin <= 1.1.0 - CSRF to Stored XSS vulnerabilityWoopy Plugins SmartLink Dynamic URLs
- CVE-2024-52421WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerabilitywp-buy WP Popup Window Maker
- CVE-2024-50519WordPress Jigoshop – Store Exporter plugin <= 1.5.8 - Reflected Cross Site Scripting (XSS) vulnerabilityJosh Kohlbach Jigoshop – Store Exporter
- CVE-2024-50522WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerabilityredyyu WeChat Subscribers Lite
- CVE-2024-10204Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release…Dassault Systèmes eDrawings
- CVE-2024-11075SICK Incoming Goods Suite privilege escalation vulnerabilitySICK AG SICK Incoming Goods Suite
- CVE-2024-11194Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Updatetechlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2024-11036GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary…rubengc GamiPress – Gamification plugin to reward points, a…
- CVE-2024-11038WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode…wpbean WPB Popup for Contact Form 7 – Showing Contact Form…
- CVE-2024-10388WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scriptingwelaunch WordPress GDPR
- CVE-2024-8403Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP ModuleMitsubishi Electric MELSEC iQ-F Series FX5-ENET · Mitsubish…
- CVE-2024-21539Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper…@eslint/plugin-kit
- CVE-2024-50301security/keys: fix slab-out-of-bounds in key_task_permissionLinux
- CVE-2024-50300regulator: rtq2208: Fix uninitialized use of regulator_configLinux
- CVE-2024-50299sctp: properly validate chunk size in sctp_sf_ootb()Linux
- CVE-2024-50297net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine startsLinux
- CVE-2024-50294rxrpc: Fix missing locking causing hanging callsLinux
- CVE-2024-50293net/smc: do not leave a dangling sk pointer in __smc_create()Linux
- CVE-2024-50291media: dvb-core: add missing buffer index checkLinux
- CVE-2024-50288media: vivid: fix buffer overwrite when using > 32 buffersLinux
- CVE-2024-50285ksmbd: check outstanding simultaneous SMB operationsLinux
- CVE-2024-50284ksmbd: Fix the missing xa_store error checkLinux
- CVE-2024-50282drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()Linux
- CVE-2024-50281KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operationLinux
- CVE-2024-50280dm cache: fix flushing uninitialized delayed_work on cache_ctr errorLinux
- CVE-2024-50279dm cache: fix out-of-bounds access to the dirty bitset when resizingLinux
- CVE-2024-50278dm cache: fix potential out-of-bounds access on the first resumeLinux
- CVE-2024-50275arm64/sve: Discard stale CPU state when handling SVE trapsLinux
- CVE-2024-50274idpf: avoid vport access in idpf_get_link_ksettingsLinux
- CVE-2024-50273btrfs: reinitialize delayed ref list after deleting it from the listLinux
- CVE-2024-50269usb: musb: sunxi: Fix accessing an released usb phyLinux
- CVE-2024-50268usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()Linux
- CVE-2024-50267USB: serial: io_edgeport: fix use after free in debug printkLinux
- CVE-2024-50264vsock/virtio: Initialization of the dangling pointer occurring in vsk->transLinux
- CVE-2023-52921drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()Linux
- CVE-2024-52714Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
- CVE-2024-52788Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in…
- CVE-2024-52789Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log…
Medium, low and unrated 257
- CVE-2024-44309A cookie management issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2018-9440In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation.Google Android
- CVE-2024-51669WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityKalmang Dynamic Widgets
- CVE-2024-52392WordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerabilityW3SPEEDSTER
- CVE-2024-30424WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityBeaver Builder Addons by WPZOOM
- CVE-2023-27609WordPress WP Roles at Registration plugin <= 0.23 - Cross Site Scripting (XSS) vulnerabilityNetTantra WP Roles at Registration
- CVE-2024-11400HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameterrealmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2018-9421In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data.Google Android
- CVE-2018-9420In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2018-9412In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation.Google Android
- CVE-2018-9410In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-45422Zoom Apps - Improper Input ValidationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-52359IBM Concert Software improper access controlsIBM Concert Software
- CVE-2024-45420Zoom Apps - Uncontrolled Resource ConsumptionZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-37070IBM Concert Software information disclosureIBM Concert Software
- CVE-2018-9368In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies.Google Android
- CVE-2018-9346In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2018-9345In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2024-50430WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerabilityBeaver Builder
- CVE-2024-53087drm/xe: Fix possible exec queue leak in exec IOCTLLinux
- CVE-2024-53086drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTLLinux
- CVE-2024-53085tpm: Lock TPM chip in tpm_pm_suspend() firstLinux
- CVE-2024-53084drm/imagination: Break an object reference loopLinux
- CVE-2024-53083usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlierLinux
- CVE-2024-53081media: ar0521: don't overflow when checking PLL valuesLinux
Show all 257 entriesShow fewer entries
- CVE-2024-10224Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could…Module::ScanDeps
- CVE-2024-53078drm/tegra: Fix NULL vs IS_ERR() check in probe()Linux
- CVE-2024-53077rpcrdma: Always release the rpcrdma_device's xa_arrayLinux
- CVE-2024-53075riscv: Prevent a bad reference count on CPU nodesLinux
- CVE-2024-53074wifi: iwlwifi: mvm: don't leak a link on AP removalLinux
- CVE-2024-53072platform/x86/amd/pmc: Detect when STB is not availableLinux
- CVE-2024-53071drm/panthor: Be stricter about IO mapping flagsLinux
- CVE-2024-53070usb: dwc3: fix fault at system suspend if device was already runtime suspendedLinux
- CVE-2024-53069firmware: qcom: scm: fix a NULL-pointer dereferenceLinux
- CVE-2024-53067scsi: ufs: core: Start the RTC update work laterLinux
- CVE-2024-53065mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_createLinux
- CVE-2024-53064idpf: fix idpf_vc_core_init error pathLinux
- CVE-2024-53060drm/amdgpu: prevent NULL pointer dereference if ATIF is not supportedLinux
- CVE-2022-47424WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Repute InfoSystems ARMember
- CVE-2024-53056drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()Linux
- CVE-2024-53055wifi: iwlwifi: mvm: fix 6 GHz scan constructionLinux
- CVE-2024-53053scsi: ufs: core: Fix another deadlock during RTC updateLinux
- CVE-2024-53052io_uring/rw: fix missing NOWAIT check for O_DIRECT start writeLinux
- CVE-2024-53051drm/i915/hdcp: Add encoder check in intel_hdcp_get_capabilityLinux
- CVE-2024-53050drm/i915/hdcp: Add encoder check in hdcp2_get_capabilityLinux
- CVE-2024-53049slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprofLinux
- CVE-2024-53048ice: fix crash on probe for DPLL enabled E810 LOMLinux
- CVE-2024-53047mptcp: init: protect sched with rcu_read_lockLinux
- CVE-2024-53046arm64: dts: imx8ulp: correct the flexspi compatible stringLinux
- CVE-2024-53045ASoC: dapm: fix bounds checker error in dapm_widget_list_createLinux
- CVE-2024-53043mctp i2c: handle NULL header addressLinux
- CVE-2024-53042ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()Linux
- CVE-2024-50304ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()Linux
- CVE-2024-50303resource,kexec: walk_system_ram_res_rev must retain resource flagsLinux
- CVE-2024-43338WordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityAutomattic Crowdsignal Dashboard – Polls, Surveys & more
- CVE-2024-51686WordPress Manage User Columns plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerabilityDeepak Khokhar Manage User Columns
- CVE-2024-52420WordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityThemeisle Disable Admin Notices individually
- CVE-2024-50513WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerabilityWPXPO PostX
- CVE-2024-50514WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2024-50515WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2024-50516WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerabilityadamskaat Countdown & Clock
- CVE-2024-50517WordPress ID-SK Toolkit plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerabilityIDSK team ID-SK Toolkit
- CVE-2024-50518WordPress Pricer Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityCommon Ninja Pricer Ninja
- CVE-2024-50520WordPress Ancient World Linked Data plugin <= 0.2.1 - Cross Site Scripting (XSS) vulnerabilityPeter J. Herrel Ancient World Linked Data
- CVE-2024-50521WordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityalleythemes Alley Elementor Widget
- CVE-2024-50535WordPress Step by Step plugin <= 0.4.5 - Stored Cross Site Scripting (XSS) vulnerabilityKyle M Brown Step by Step
- CVE-2024-50536WordPress GDReseller plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityTamer Ziady GDReseller
- CVE-2024-50537WordPress Smart Mockups plugin <= 1.2.0 - Stored Cross Site Scripting (XSS) vulnerabilityStefano Marra Smart Mockups
- CVE-2024-50538WordPress Show Visitor IP Address plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerabilityirfantea Show Visitor IP Address
- CVE-2024-50540WordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitydemixpress (dp) AddThis
- CVE-2024-50541WordPress Advanced Control Manager plugin <= 2.16.0 - Stored Cross Site Scripting (XSS) vulnerabilityoverclokk Advanced Control Manager for WordPress by ItalySt…
- CVE-2024-50542WordPress RLM Elementor Widgets Pack plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityzachsilberstein RLM Elementor Widgets Pack
- CVE-2024-50543WordPress amazing neo icon font for elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilitymudssar amazing neo icon font for elementor
- CVE-2024-50545WordPress DataMentor plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityAuburnForest DataMentor
- CVE-2024-50546WordPress MyOrderDesk plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerabilityRiley Magnuson MyOrderDesk
- CVE-2024-50547WordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerabilityMark Hodder Themedy Toolbox
- CVE-2024-50548WordPress Awesome Progress Bar plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerabilityAbdullah Nahian Awesome Progress Bar
- CVE-2024-50549WordPress Bonway Static Block Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilitySteven Nolles Bonway Static Block Editor
- CVE-2024-50551WordPress EndomondoWP plugin <= 0.1.1 - Stored Cross Site Scripting (XSS) vulnerabilityOdyno EndomondoWP
- CVE-2024-50552WordPress Hover Video Preview plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilityjasonpancake Hover Video Preview
- CVE-2024-50553WordPress Classy Addons for Elementor plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityClassy Addons for Elementor
- CVE-2024-50554WordPress Sided plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerabilitySided
- CVE-2024-50556WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityWorldMarkerter WM Zoom
- CVE-2024-51617WordPress Clyp plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityClyp
- CVE-2024-51794WordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerabilitysellerthemes Storely
- CVE-2024-51795WordPress Pdf Embedder Fay plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerabilityfayjur Pdf Embedder Fay
- CVE-2024-51796WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityShahjahan Jewel Trendy Restaurant Menu
- CVE-2024-51797WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityMd. Shiddikur Rahman Ultimate Accordion
- CVE-2024-51798WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerabilitySurbma | Font Awesome
- CVE-2024-51799WordPress Bg Patriarchia BU plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerabilityVadim Bogaiskov Bg Patriarchia BU
- CVE-2024-51801WordPress Brand my Footer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityjakeatthrive Brand my Footer
- CVE-2024-51802WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerabilityBread & Butter
- CVE-2024-51803WordPress Inline Click To Tweet plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityMagnetic Creative Inline Click To Tweet
- CVE-2024-51804WordPress Moka Get Posts Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitybobmatnyc Moka Get Posts Shortcode
- CVE-2024-51805WordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerabilityyonisink yPHPlista
- CVE-2024-51806WordPress Awesome Fitness Testimonials plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityShingo Awesome Fitness Testimonials
- CVE-2024-51807WordPress AgendaPress plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerabilityBlack and White AgendaPress – Easily Publish Meeting Agenda…
- CVE-2024-51808WordPress codeSnips plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerabilityPat O’Brien codeSnips
- CVE-2024-51809WordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilityintelligentDesign Keymaster Chord Notation Free
- CVE-2024-51810WordPress Lewe Bootstrap Visuals plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabilityGeorge Lewe Lewe Bootstrap Visuals
- CVE-2024-51811WordPress Popup Image plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerabilityHussam Hussien Popup Image
- CVE-2024-51812WordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityWasim Pro Addons For Elementor
- CVE-2024-51813WordPress Anant Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityanantaddons Anant Addons for Elementor
- CVE-2024-51814WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability野人 活动链接推广插件
- CVE-2024-51816WordPress Banner System plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilitySaul Morales Pacheco Banner System
- CVE-2024-51819WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitytigrisflexplatform Tigris Flexplatform
- CVE-2024-51821WordPress WE – Client Logo Carousel plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilitywordpresteem WE – Client Logo Carousel
- CVE-2024-51822WordPress Creative Blocks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitykeonthemes Creative Blocks
- CVE-2024-51823WordPress Add Ribbon Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitySherkSpear Add Ribbon Shortcode
- CVE-2024-51824WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerabilityKaram Singh Advanced Video Player with Analytics
- CVE-2024-51825WordPress Alert Me! plugin <= 0.4.0 - Cross Site Scripting (XSS) vulnerabilitycrissoca Alert Me!
- CVE-2024-51826WordPress Bitcoin Payments plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityJandal Bitcoin Payments
- CVE-2024-51827WordPress Boombox Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityMovement Ventures Boombox Shortcode
- CVE-2024-51828WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityDan Griffiths Beacon For Help Scout
- CVE-2024-51829WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityfigoliquinn Mobile Kiosk
- CVE-2024-51830WordPress News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityFazilatunnesa News Ticker
- CVE-2024-51831WordPress Persian Nested Show/Hide Text plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityAboutorab Pourhaghani Persian Nested Show/Hide Text
- CVE-2024-51832WordPress Plenigo plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerabilityPlenigo
- CVE-2024-51833WordPress Easy Social Sharebar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilitynomaniplex Easy Social Sharebar
- CVE-2024-51834WordPress Luzuk Slider plugin <= 0.1.5 - Stored Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Slider
- CVE-2024-51835WordPress OpenCart Product Display plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityajinkyanahar OpenCart Product Display
- CVE-2024-51836WordPress Wezido plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityteconce Wezido
- CVE-2024-51838WordPress Pull This plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitysmajda Pull This
- CVE-2024-51839WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityMeini Utech Spinning Earth
- CVE-2024-51840WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityrezaul Wd-image-magnifier-xoss
- CVE-2024-51841WordPress File Select Control For Elementor plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityAbdul Awal Uzzal File Select Control For Elementor
- CVE-2024-51842WordPress Image Carousel Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilitySazzad Image Carousel Shortcode
- CVE-2024-51844WordPress Location Click Map plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityKiran Patil Location Click Map
- CVE-2024-51846WordPress Community Yard Sale plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerabilityMichael Simpson Community Yard Sale
- CVE-2024-51847WordPress WP PagSeguro Payments plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitygiovanebribeiro WP PagSeguro Payments
- CVE-2024-51848WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerabilitydigitalzoomstudio Parallaxer
- CVE-2024-51849WordPress My Restaurant Menu plugin <= 0.2.0 - Cross Site Scripting (XSS) vulnerabilityMarco Piarulli My Restaurant Menu
- CVE-2024-51850WordPress WoW Guild Armory Roster plugin <= 0.5.5 - Cross Site Scripting (XSS) vulnerabilitybchristopeit WoW Guild Armory Roster
- CVE-2024-51851WordPress best bootstrap widgets for elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitysalehattari best bootstrap widgets for elementor
- CVE-2024-51852WordPress Dynamic Post Grid Elementor Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerabilityMaidul Dynamic Post Grid Elementor Addon
- CVE-2024-51853WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityAlberuni Azad. Faltu Testimonial Rotator
- CVE-2024-51854WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerabilityholanetworks Hola Free Video Player
- CVE-2024-51855WordPress Redirecter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityProductineer Redirecter
- CVE-2024-51856WordPress Moose Elementor Kit plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityibllex Moose Elementor Kit
- CVE-2024-51857WordPress Olympus Shortcodes plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityDannyCooper Olympus Shortcodes
- CVE-2024-51858WordPress Social Locker plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityPluginOps Social Locker
- CVE-2024-51859WordPress Bamboo Enquiries plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerabilityBamboo Manchester Bamboo Enquiries
- CVE-2024-51860WordPress Custom Dashboard Widget plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityDuoGeek Custom Dashboard Widget
- CVE-2024-51861WordPress EventPress plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityDuoGeek EventPress
- CVE-2024-51862WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerabilityBaptiste Wicht Google Visualization Charts
- CVE-2024-51863WordPress PF Timer plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityProfit Funnels PF Timer
- CVE-2024-51864WordPress Shortcode Collection plugin <= 1.4 - Stored Cross Site Scripting (XSS) vulnerabilityAgnel Waghela Shortcode Collection
- CVE-2024-51865WordPress Simple Social Share Block plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityleroysabrina Simple Social Share Block
- CVE-2024-51866WordPress Social button plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilityriponshah Social button
- CVE-2024-51867WordPress Simpul Events by Esotech plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerabilitygeilt Simpul Events by Esotech
- CVE-2024-51868WordPress DuoGeek Blocks plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerabilityTapan Kumer Das DuoGeek Blocks
- CVE-2024-51869WordPress Gutenium Blocks plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerabilityBest WP Developer Gutenium Blocks
- CVE-2024-51870WordPress Ultimate Flipbox Addon for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilitydragwyb Ultimate Flipbox Addon for Elementor
- CVE-2024-51871WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Team
- CVE-2024-51872WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Testimonials
- CVE-2024-51873WordPress Multi-day Booking Calendar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityMasashi Takizawa Multi-day Booking Calendar
- CVE-2024-51874WordPress ParOne Feeds plugin <= 1.17.1 - Cross Site Scripting (XSS) vulnerabilityParOne Feeds
- CVE-2024-51875WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerabilityNazmul Ahsan MDC YouTube Downloader
- CVE-2024-51876WordPress wp_automatic_widget plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCodstack wp_automatic_widget
- CVE-2024-51877WordPress SV Forms plugin <= 2.0.05 - Cross Site Scripting (XSS) vulnerabilitystraightvisions SV Forms
- CVE-2024-51878WordPress AchillesTheme-shortcodes plugin <= 0.1 - Cross Site Scripting (XSS) vulnerabilitystrailejoey AchillesTheme-shortcodes
- CVE-2024-51879WordPress Text Advertisements plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilityArash Heidari Text Advertisements
- CVE-2024-51880WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerabilitysistemasBebetter BeBetter Social Icons
- CVE-2024-51881WordPress Be Shortcodes plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityBeautimour Be Shortcodes
- CVE-2024-51883WordPress I Plant A Tree plugin <= 1.7.4 - Stored Cross Site Scripting (XSS) vulnerabilityMicha I Plant A Tree
- CVE-2024-51884WordPress Posts Search plugin <= 1.2.2 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Posts Search
- CVE-2024-51885WordPress Browsing History plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Browsing History
- CVE-2024-51886WordPress Posts Filter plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Posts Filter
- CVE-2024-51887WordPress NV Slider plugin <= 1.6 - Stored Cross Site Scripting (XSS) vulnerabilityryscript NV Slider
- CVE-2024-51889WordPress Fancy User List plugin <= 3.1 - Stored Cross Site Scripting (XSS) vulnerabilityGeroNikolov Fancy User List
- CVE-2024-51890WordPress Geoportail Shortcode plugin <= 2.4.4 - Stored Cross Site Scripting (XSS) vulnerabilitygeoWP Geoportail Shortcode
- CVE-2024-51891WordPress Official SalesWizard CRM Plugin plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerabilitySalesWizard.pl Official SalesWizard CRM Plugin
- CVE-2024-51892WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerabilityNoor Alam Sell Media File with Stripe
- CVE-2024-51893WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityFixoLab Postify: Post Layout For Elementor
- CVE-2024-51894WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityreyzua Topbar ID for Elementor
- CVE-2024-51895WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitypankaj9296 Minical Hotel Booking Plugin
- CVE-2024-51896WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilitywebvitaly Magic Slider
- CVE-2024-51897WordPress News Articles plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityErik Saulnier News Articles
- CVE-2024-51898WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitysachin8600 Semantic Shortcode
- CVE-2024-51899WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityseothemes Simple Pricing Table
- CVE-2024-51901WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitywojciechborowicz Smooth Maps
- CVE-2024-51902WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilitycybio TinyCode
- CVE-2024-51903WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerabilityBrandon Hubbard WP Listings Pro
- CVE-2024-51904WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerabilityJoan Boluda Embed documents shortcode
- CVE-2024-51905WordPress RSV PDF Preview plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityRavi Kumar Vanukuru RSV PDF Preview
- CVE-2024-51906WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityRavi Kumar Vanukuru RSV 360 View
- CVE-2024-51907WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityCodemenschen WP Virtual Room Configurator
- CVE-2024-51908WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitykevinabl Adventure Bucket List
- CVE-2024-51909WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityMonarkie DCS audioCase
- CVE-2024-51910WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerabilityezlab Assist24 Help Desk
- CVE-2024-51911WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityKetan Patel Featured product by category name
- CVE-2024-51912WordPress IntelliWidget Elements plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilitylilaeamedia IntelliWidget Elements
- CVE-2024-51913WordPress Mapme plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityMapme
- CVE-2024-51914WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerabilitygopiplus drop in image slideshow gallery
- CVE-2024-51916WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerabilityCreative Brahma Multifox Plus
- CVE-2024-51917WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilitylequanghuylc Multiple Votes in one page
- CVE-2024-51918WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityFreshlight Lab Pay With Stripe
- CVE-2024-51920WordPress Map Store Locator plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityPierre Jégo Map Store Locator
- CVE-2024-51921WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitymidori scrollup
- CVE-2024-51922WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityMaruf Arafat VP Sitemap
- CVE-2024-51923WordPress Websand Subscription Form plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityWebsand Subscription Form
- CVE-2024-51924WordPress WP Agenda plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityalexandremagno WP Agenda
- CVE-2024-51925WordPress Testimonial Slider Shortcode plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilitySazzad Testimonial Slider Shortcode
- CVE-2024-51926WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitywpsoul GreenCon
- CVE-2024-51927WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityAsaduzzaman Abir Rig Elements For Elementor
- CVE-2024-51928WordPress Blocks Post Grid plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityJakir Hasan Blocks Post Grid
- CVE-2024-51929WordPress Icon Widget plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityphilspectrum Icon Widget
- CVE-2024-51930WordPress Custom URL Shortener plugin <= 0.3.6 - Cross Site Scripting (XSS) vulnerabilityIronFeet Custom URL Shortener
- CVE-2024-51931WordPress AzonBox plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityShazahanul Islam Shohag AzonBox
- CVE-2024-51932WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitySaif Kings Tab Slider
- CVE-2024-51933WordPress Cookie Nonsense for YT plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilitydozyde Cookie Nonsense for YT
- CVE-2024-51934WordPress Ekiline Block Collection plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityUri Lazcano Ekiline Block Collection
- CVE-2024-51935WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerabilitySam Perrow Fast Video and Image Display
- CVE-2024-51936WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityeSparkBiz ESB Testimonials
- CVE-2024-51937WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerabilitybnisia IA Map Analytics Basic
- CVE-2024-51938WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Charity Addon for Elementor
- CVE-2024-49680WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityRexTheme WP VR
- CVE-2024-49689WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerabilityHarmonic Design HD Quiz – Save Results Light
- CVE-2024-49697WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-50417WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerabilityboldthemes Bold Page Builder
- CVE-2024-51660WordPress Easy Accordion Gutenberg Block plugin <= 1.2.3 - Broken Access Control vulnerabilityBinsaifullah Easy Accordion Gutenberg Block
- CVE-2024-51671WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerabilityThemeisle Otter - Gutenberg Block
- CVE-2024-51817WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerabilityCodeZel Combo WP Rewrite Slugs
- CVE-2024-52395WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerabilityQuantumCloud Floating Buttons for WooCommerce
- CVE-2024-52600Statamic CMS has Path Traversal in Asset Uploadstatamic cms · statamic/cms
- CVE-2024-52582cachi2 allows traceback prints localscontainerbuildsystem cachi2
- CVE-2024-10524GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLsgnu wget
- CVE-2024-9777Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameterwproyal Ashe
- CVE-2024-9830Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameterwproyal Bard
- CVE-2024-11198GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parametergdragon GD Rating System
- CVE-2024-11224Parallax Image <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameterthehowarde Parallax Image
- CVE-2024-11195Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcodenik00726 Email Subscription Popup
- CVE-2024-31141Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProviderApache Software Foundation org.apache.kafka:kafka-clients ·…
- CVE-2024-11069WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletionwelaunch WordPress GDPR
- CVE-2024-10268MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via…MP3 Audio Player – Music Player, Podcast Player & Radio by…
- CVE-2024-11098SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Uploadmr2p SVG Block
- CVE-2024-10103MailPoet < 5.3.2 - Admin+ Stored XSSMailPoet
- CVE-2024-50302HID: core: zero-initialize the report bufferLinux · :linux_kernel:
- CVE-2024-50298net: enetc: allocate vf_state during PF probesLinux
- CVE-2024-50296net: hns3: fix kernel crash when uninstalling driverLinux
- CVE-2024-50295net: arc: fix the device for dma_map_single/dma_unmap_singleLinux
- CVE-2024-50292ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_removeLinux
- CVE-2024-50290media: cx24116: prevent overflows on SNR calculusLinux
- CVE-2024-50289media: av7110: fix a spectre vulnerabilityLinux
- CVE-2024-50287media: v4l2-tpg: prevent the risk of a division by zeroLinux
- CVE-2024-50277dm: fix a crash if blk_alloc_disk failsLinux
- CVE-2024-50272filemap: Fix bounds checking in filemap_read()Linux
- CVE-2024-50271signal: restore the override_rlimit logicLinux
- CVE-2024-50270mm/damon/core: avoid overflow in damon_feed_loop_next_input()Linux
- CVE-2024-50266clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCsLinux
- CVE-2024-50265ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()Linux
- CVE-2024-48071E-cology has a directory traversal vulnerability.
- CVE-2024-50803The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote…redaxo/source
- CVE-2024-52711DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.
- CVE-2024-52759D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.
- CVE-2024-52762A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute…
- CVE-2024-52763A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to…