CVEs published October 11, 2024
132 CVEs were published on October 11, 2024: 20 critical, 52 high.
- Published
- 132
- Critical
- 20
- High
- 52
- Medium
- 56
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 54
Most affected products
- Juniper Networks Junos OS
- 14
- Juniper Networks Junos OS Evolved
- 10
- GitLab
- 3
- h2o
- 3
- 07FLYCMS · 07FLY-CMS +1
- 2
- parisneo/lollms · lollms
- 2
- Schneider Electric Data Center Expert
- 2
- SonicWall Connect Tunnel
- 2
- Tainacan
- 2
- vittor1o Linkz.ai – Automatic link previews on hover
- 2
Critical 20
- CVE-2024-48033WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerabilitybaptiste.gourdin Talkback
- CVE-2024-47331WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerabilityNinja Team Multi Step for Contact Form
- CVE-2024-47875DOMPurify nesting-based mXSScure53 DOMPurify · dompurify
- CVE-2024-47830Plane allows server side request forgery via /_next/image endpointmakeplane plane
- CVE-2024-47074Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerabilitydataease
- CVE-2024-9164Missing Authentication for Critical Function in GitLabGitLab
- CVE-2024-9234GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Uploadataurr GutenKit – Page Builder Blocks, Patterns, and Templa…
- CVE-2024-9707Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activationthemehunk Hunk Companion
- CVE-2024-21534All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization.jsonpath-plus · org.webjars.npm:jsonpath-plus
- CVE-2024-9822Pedalo Connector <= 2.0.5 - Authentication Bypass to Administratorpedaloagency Pedalo Connector
- CVE-2024-42640angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php.angular-base64-upload
- CVE-2024-44730Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat
- CVE-2024-46088An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management
- CVE-2024-46532SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class
- CVE-2024-48769An issue in BURG-WCHTER KG de.burgwachter.keyapp.app 4.5.0 allows a remote attacker to obtain sensitve information via the firmware update p
- CVE-2024-48772An issue in C-CHIP (com.cchip.cchipamaota) v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process.
- CVE-2024-48778An issue in GIANT MANUFACTURING CO., LTD RideLink (tw.giant.ridelink) 2.0.7 allows a remote attacker to obtain sensitive information via the
- CVE-2024-48784An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the fi
- CVE-2024-48786An issue in SWITCHBOT INC SwitchBot (com.theswitchbot.switchbot) 5.0.4 allows a remote attacker to obtain sensitive information via the firm
- CVE-2024-48787An issue in Revic Optics Revic Ops (us.revic.revicops) 1.12.5 allows a remote attacker to obtain sensitive information via the firmware upda
High 52
- CVE-2024-38365btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionalitybtcsuite btcd · github.com/btcsuite/btcd
- CVE-2024-48040WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerabilityTainacan
- CVE-2024-8912HTTP Request Smuggling in LookerGoogle Looker
- CVE-2024-48020WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerabilityrevmakx Backup and Staging by WP Time Capsule
- CVE-2024-9859Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTMGoogle Chrome
- CVE-2024-47504Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crashJuniper Networks Junos OS
- CVE-2024-47502Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoSJuniper Networks Junos OS Evolved
- CVE-2024-47499Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crashJuniper Networks Junos OS
- CVE-2024-47497Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustionJuniper Networks Junos OS
- CVE-2024-47490Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhaustedJuniper Networks Junos OS Evolved
- CVE-2024-39563Junos Space: Remote Command Execution (RCE) vulnerability in web applicationJuniper Networks Junos Space
- CVE-2024-39547Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilizationJuniper Networks Junos OS
- CVE-2024-8376Memory leakEclipse Foundation Mosquitto
- CVE-2024-33582A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privilegLenovo Service Framework
- CVE-2024-33581A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with Lenovo PC Manager AI intelligent scenario
- CVE-2024-33580A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges.Lenovo Personal Cloud
- CVE-2024-33579A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevated privileges.Lenovo Baiying
- CVE-2024-33578A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges.Lenovo Leyun
- CVE-2024-9046A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges.Lenovo stARstudio
- CVE-2024-4132A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges.Lenovo Lock Screen
- CVE-2024-4131A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges.Lenovo Emulator
- CVE-2024-4130A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.Lenovo App Store
- CVE-2024-4089A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges.Lenovo SuperFile
- CVE-2024-45402Picotls double freeh2o picotls
- CVE-2024-45396Quicly assertion failuresh2o quicly
- CVE-2024-8755Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress LoadMaster
- CVE-2024-8531CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when anSchneider Electric Data Center Expert
- CVE-2024-9002CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and avSchneider Electric Easergy Studio
- CVE-2024-8970Incorrect Authorization in GitLabGitLab
- CVE-2024-45317A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenSonicWall SMA1000
- CVE-2024-45316The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlierSonicWall Connect Tunnel
- CVE-2024-35517Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.
- CVE-2024-35522Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.
- CVE-2024-42018An issue was discovered in Atos Eviden SMC xScale before 1.6.6.
- CVE-2024-44413A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical.
- CVE-2024-44414A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical.
- CVE-2024-44729Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presen
- CVE-2024-44734Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction
- CVE-2024-45754An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x be
- CVE-2024-46468A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress <= v5.1.1, which can be exploited by an attacker to obtain sensitive
- CVE-2024-48768An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmwa
- CVE-2024-48770An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update p
- CVE-2024-48771An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware
- CVE-2024-48773An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process
- CVE-2024-48774An issue in Fermax Asia Pacific Pte Ltd com.fermax.vida 2.4.6 allows a remote attacker to obtain sensitve information via the firmware updat
- CVE-2024-48775An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update proc
- CVE-2024-48776An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process
- CVE-2024-48777LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process.
- CVE-2024-48788An issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive information via the firmware update process.
- CVE-2024-48813SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute
- CVE-2024-48827An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password fun
- CVE-2024-48938Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.
Medium, low and unrated 60
- CVE-2024-47884Insecure Temporary File in `foxmarks`zefr0x foxmarks
- CVE-2024-48041WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerabilityCreativeMindsSolutions CM Tooltip Glossary
- CVE-2024-47353WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerabilityquomodosoft ElementsReady Addons for Elementor
- CVE-2024-9539An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to GitHub Enterprise Server
- CVE-2024-44157A stack buffer overflow was addressed through improved input validation.Apple TV · Apple iTunes for Windows
- CVE-2024-47877Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory.codeclysm extract · github.com/codeclysm/extract +2
- CVE-2024-47507Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is acceptedJuniper Networks Junos OS
- CVE-2024-6985Path Traversal in api open_personality_folder in parisneo/lollms-webuiparisneo/lollms · lollms
- CVE-2024-47506Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crashJuniper Networks Junos OS
- CVE-2024-47509Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3Juniper Networks Junos OS Evolved
- CVE-2024-47508Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2Juniper Networks Junos OS Evolved
- CVE-2024-47505Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1Juniper Networks Junos OS Evolved
- CVE-2024-47503Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crashJuniper Networks Junos OS
- CVE-2024-47501Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crashJuniper Networks Junos OS
- CVE-2024-47498Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effectJuniper Networks Junos OS Evolved
- CVE-2024-47496Junos OS: MX Series: The PFE will crash on running specific commandJuniper Networks Junos OS
- CVE-2024-47495Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.Juniper Networks Junos OS Evolved
- CVE-2024-47494Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC resetJuniper Networks Junos OS
- CVE-2024-47493Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crashJuniper Networks Junos OS
- CVE-2024-47491Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crashJuniper Networks Junos OS
- CVE-2024-47489Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the REJuniper Networks Junos OS Evolved
- CVE-2024-39544Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions filesJuniper Networks Junos OS Evolved
- CVE-2024-39534Junos OS Evolved: Connections to the network and broadcast address acceptedJuniper Networks Junos OS Evolved
- CVE-2024-39527Junos OS: SRX Series: Low privileged user able to access sensitive information on file systemJuniper Networks Junos OS
- CVE-2024-39526Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packetsJuniper Networks Junos OS
- CVE-2024-5474A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2Lenovo Dolby Vision Provisioning software
- CVE-2024-45403H2O assertion failure when HTTP/3 requests are cancelledh2o
- CVE-2024-45397H2O alllows bypassing address-based access control with 0-RTTh2o
- CVE-2024-25622H2O ignores headers configuration directivesh2o
- CVE-2024-8530CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generatSchneider Electric Data Center Expert
- CVE-2024-6657BLE peripheral DoS after few cycles of connect/disconnectssilabs.com EFR32 BLE SDK
- CVE-2024-985607FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting07FLYCMS · 07FLY-CMS +1
- CVE-2024-985507FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload07FLYCMS · 07FLY-CMS +1
- CVE-2024-6971Path Traversal in parisneo/lollms-webuiparisneo/lollms · lollms
- CVE-2023-42133PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.PAX POS terminals
- CVE-2024-5005Incorrect Provision of Specified Functionality in GitLabGitLab
- CVE-2024-9538ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Templatedevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-8913The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_templateposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-7514WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversalwebtoffee Comments Import & Export
- CVE-2024-45315The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlierSonicWall Connect Tunnel
- CVE-2024-9051WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcodebrechtvds WP Ultimate Post Grid
- CVE-2024-9507Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Readbitpressadmin Bit Form – Custom Contact Form, Multi Step, C…
- CVE-2024-9211FULL – Cliente <= 3.1.22 - Reflected Cross-Site Scriptingfullservices FULL – Cliente
- CVE-2024-9610Language Switcher <= 3.7.13 - Reflected Cross-Site Scriptingrafasashi Language Switcher
- CVE-2024-9232Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scriptingwpcodefactory Download Plugins and Themes in ZIP from Dashb…
- CVE-2024-9436PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site ScriptingPublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2024-9221Tainacan <= 0.21.10 - Reflected Cross-Site ScriptingTainacan
- CVE-2024-9616BlockMeister – Block Pattern Builder <= 3.1.10 - Reflected Cross-Site ScriptingBlockMeister – Block Pattern Builder
- CVE-2024-9346Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scriptingmichaelzangl Embed videos and respect privacy
- CVE-2024-9611Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scriptingttodua Increase upload file size & Maximum Execution Time l…
- CVE-2024-9586Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Updatevittor1o Linkz.ai – Automatic link previews on hover
- CVE-2024-9587Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAXvittor1o Linkz.ai – Automatic link previews on hover
- CVE-2024-9543Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto ShortcodePowerPress Podcasting plugin by Blubrry
- CVE-2024-44415A vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp function; The strcpy function is executed
- CVE-2024-44731Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to execu
- CVE-2024-44807A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD.
- CVE-2024-45184An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 210
- CVE-2024-46215A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead progr
- CVE-2024-48937Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS.
- CVE-2024-48987Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the APP_KEY.snipe/snipe-it