CVEs published October 19, 2024
24 CVEs were published on October 19, 2024: 0 critical, 2 high.
- Published
- 24
- Critical
- 0
- High
- 2
- Medium
- 22
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- PHPGurukul Boat Booking System
- 7
- code-projects Pharmacy Management System
- 5
- ESAFENET CDG
- 3
- code-projects Blood Bank System
- 1
- ElementInvader Addons for Elementor
- 1
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- 1
- http-proxy-middleware · org.webjars.npm:http-proxy-middlewa…
- 1
- infiniflow/ragflow
- 1
- jsbroks COCO Annotator
- 1
- maxfoundry Social Share Buttons
- 1
High 2
Medium, low and unrated 22
- CVE-2024-10159PHPGurukul Boat Booking System My Profile Page profile.php sql injectionPHPGurukul Boat Booking System
- CVE-2024-10158PHPGurukul Boat Booking System session_start session fixiationPHPGurukul Boat Booking System
- CVE-2024-10157PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injectionPHPGurukul Boat Booking System
- CVE-2024-10156PHPGurukul Boat Booking System Sign In Page index.php sql injectionPHPGurukul Boat Booking System
- CVE-2024-10155PHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scriptingPHPGurukul Boat Booking System
- CVE-2024-10154PHPGurukul Boat Booking System Check Booking Status Page status.php sql injectionPHPGurukul Boat Booking System
- CVE-2024-10153PHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injectionPHPGurukul Boat Booking System
- CVE-2024-10142code-projects Blood Bank System viewrequest.php cross site scriptingcode-projects Blood Bank System
- CVE-2024-10141jsbroks COCO Annotator Session predictable statejsbroks COCO Annotator
- CVE-2024-10140code-projects Pharmacy Management System manage_supplier.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-10139code-projects Pharmacy Management System add_new_supplier.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-10138code-projects Pharmacy Management System add_new_purchase.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-10137code-projects Pharmacy Management System manage_medicine.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-10136code-projects Pharmacy Management System manage_invoice.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-10135ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injectionESAFENET CDG
- CVE-2024-10134ESAFENET CDG MultiServerAjax.java connectLogout sql injectionESAFENET CDG
- CVE-2024-9897StreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed ShortcodeStreamWeasels Twitch Integration
- CVE-2024-10133ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injectionESAFENET CDG
- CVE-2024-9889ElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information ExposureElementInvader Addons for Elementor
- CVE-2023-6243EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_emailEventON (Pro) - WordPress Virtual Event Calendar Plugin
- CVE-2019-25218Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injectionnik00726 Photo Gallery Slideshow & Masonry Tiled Gallery
- CVE-2024-9219WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scriptingmaxfoundry Social Share Buttons