CVEs published October 25, 2024
134 CVEs were published on October 25, 2024: 22 critical, 41 high.
- Published
- 134
- Critical
- 22
- High
- 41
- Medium
- 69
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Google Android
- 28
- funadmin/funadmin
- 10
- Sharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- 8
- ESAFENET CDG
- 4
- Codezips Sales Management System
- 3
- SourceCodester Petrol Pump Management Software
- 3
- Dell Data Lakehouse
- 2
- imagemappro Image Map Pro – Drag-and-drop Builder for Inter…
- 2
- plentico plenti · github.com/plentico/plenti
- 2
- Rockwell Automation FactoryTalk ThinManager
- 2
Critical 22
- CVE-2024-47821pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot APIpyload · pyload-ng
- CVE-2024-10386Rockwell Automation FactoryTalk ThinManager Authentication VulnerabilityRockwell Automation FactoryTalk ThinManager
- CVE-2024-10381Authentication Bypass Vulnerability in Matrix Door ControllerMatrix Comsec Matrix Door Controller Cosec Vega FAXQ
- CVE-2024-47406Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.Sharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-9488Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provideradvancedcoding Comments – wpDiscuz
- CVE-2022-30355OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId an
- CVE-2022-30357OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId an
- CVE-2024-37846MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page.
- CVE-2024-37847An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a c
- CVE-2024-48204SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted
- CVE-2024-48218Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.funadmin/funadmin
- CVE-2024-48222Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.funadmin/funadmin
- CVE-2024-48223Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.funadmin/funadmin
- CVE-2024-48225Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.funadmin/funadmin
- CVE-2024-48226Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.funadmin/funadmin
- CVE-2024-48229funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.funadmin/funadmin
- CVE-2024-48230funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.funadmin/funadmin
- CVE-2024-48237WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php.
- CVE-2024-48428An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function.
- CVE-2024-48579SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code v
- CVE-2024-48580SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email
- CVE-2024-48581File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_cl
High 41
- CVE-2024-10387Rockwell Automation FactoryTalk ThinManager Denial-of-Service VulnerabilityRockwell Automation FactoryTalk ThinManager
- CVE-2024-49757Zitadel User Registration Bypass Vulnerabilityzitadel · github.com/zitadel/zitadel
- CVE-2024-49381Plenti arbitrary file deletion vulnerabilityplentico plenti · github.com/plentico/plenti
- CVE-2024-49380Plenti arbitrary file write vulnerabilityplentico plenti · github.com/plentico/plenti
- CVE-2024-49376Autolab Has Misconfigured Reset Password PermissionsAutolab
- CVE-2024-9991Cleartext Storage of Sensitive Information Vulnerability in Philips Lighting DevicesPhilips Lighting (Signify Innovations India) Philips Sma… +2
- CVE-2024-47041In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2024-47035In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code.Google Android
- CVE-2024-47033In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2024-47031Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.Google Android
- CVE-2024-47027In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation.Google Android
- CVE-2024-47024In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2024-47023there is a possible man-in-the-middle attack due to a logic error in the code.Google Android
- CVE-2024-47017In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free.Google Android
- CVE-2024-47016there is a possible privilege escalation due to an insecure default value.Google Android
- CVE-2024-47014Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.Google Android
- CVE-2024-47013In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data.Google Android
- CVE-2024-47012In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2024-44101there is a possible Null Pointer Dereference (modem crash) due to improper input validation.Google Android
- CVE-2024-44100Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.Google Android
- CVE-2024-44098In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free.Google Android
- CVE-2024-47158N-LINE 2.0.6 and prior versions contain a code injection vulnerability.NEUMANN CO.LTD. N-LINE
- CVE-2024-45785MUSASI version 3 contains an issue with use of client-side authentication.NEUMANN CO.LTD. MUSASI
- CVE-2024-9598AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalationmohammed_kaludi AMP for WP – Accelerated Mobile Pages
- CVE-2024-9235Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options UpdateMapster WP Maps
- CVE-2024-10011BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory TraversalBuddyPress
- CVE-2024-9302App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTPappcheap App Builder – Create Native Android & iOS Apps On…
- CVE-2024-47801Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerabilitySharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-47549Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP reSharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-47005Sharp and Toshiba Tec MFPs provide configuration related APIs.Sharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-43424Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability.Sharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-42420Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improSharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2022-30354OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam.
- CVE-2022-30356OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid a
- CVE-2022-30358OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and
- CVE-2024-37845MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command fea
- CVE-2024-48224Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.funadmin/funadmin
- CVE-2024-48227Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).funadmin/funadmin
- CVE-2024-48459A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd.
- CVE-2024-48655An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.
- CVE-2024-48700Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_
Medium, low and unrated 71
- CVE-2024-49767Werkzeug possible resource exhaustion when parsing file data in formspallets werkzeug · pallets Quart +2
- CVE-2024-49766Werkzeug safe_join not safe on Windowspallets werkzeug · werkzeug
- CVE-2024-9584Image Map Pro <= 6.0.20 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Deleteimagemappro Image Map Pro – Drag-and-drop Builder for Inter…
- CVE-2024-9585Image Map Pro <= 6.0.20 - Authenticated (Contributor+) Stored Cross-Site Scriptingimagemappro Image Map Pro – Drag-and-drop Builder for Inter…
- CVE-2024-8036Unauthorized Modifications of Firmware and ConfigurationABB Relion Protection Relays RE_611 IEC · ABB Relion Pr… +29
- CVE-2024-49753Denied Host Validation Bypass in Zitadel Actionszitadel · github.com/zitadel/zitadel
- CVE-2024-10380SourceCodester Petrol Pump Management Software ajax_product.php sql injectionSourceCodester Petrol Pump Management Software
- CVE-2024-49378smartUp Cross-site Scripting vulnerabilityzimocode smartup
- CVE-2024-10379ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversalESAFENET CDG
- CVE-2024-10378ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injectionESAFENET CDG
- CVE-2024-10374WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcodecbutlerjr WP-Members Membership Plugin
- CVE-2024-10377ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injectionESAFENET CDG
- CVE-2024-10376ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injectionESAFENET CDG
- CVE-2024-47483Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Dell Data Lakehouse
- CVE-2024-47481Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability.Dell Data Lakehouse
- CVE-2024-47034there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-47030Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.Google Android
- CVE-2024-47029In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read dueGoogle Android
- CVE-2024-47028In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow.Google Android
- CVE-2024-47026In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2024-47025In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2024-47022Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.Google Android
- CVE-2024-47021In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-47020Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.Google Android
- CVE-2024-47019In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-47018In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow.Google Android
- CVE-2024-47015In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds cGoogle Android
- CVE-2024-44099There is a possible Local bypass of user interaction due to an insecure default value.Google Android
- CVE-2024-8666Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingsvnlabs Shoutcast Icecast HTML5 Radio Player
- CVE-2024-10112Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcodemortenpeterandersen Simple News
- CVE-2024-10343Beek Widget Extention <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodebeekyoshida Beek Widget Extention
- CVE-2024-10016File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadjaredatch File Upload Types by WPForms
- CVE-2024-9628WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot APIwpsolution WPS Telegram Chat
- CVE-2024-9630WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposurewpsolution WPS Telegram Chat
- CVE-2024-10150Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs ShortcodeBamazoo – Button Generator
- CVE-2024-10342League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodetezzeract League of Legends Shortcodes
- CVE-2024-10341League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcodetezzeract League of Legends Shortcodes
- CVE-2024-50583Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settNaver Whale browser Installer
- CVE-2024-960710Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting10Web Social Post Feed
- CVE-2024-10148Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcodesohelwpexpert Awesome buttons
- CVE-2024-48870Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerabilityToshiba Tec e-STUDIO · Sharp Digital Full-color MFPs and Mo…
- CVE-2024-45842Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.Sharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-45829Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulSharp Digital Full-color MFPs and Monochrome MFPs · Toshiba…
- CVE-2024-9109UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key resetoctolize Shipping Live Rates and Access Points for UPS for…
- CVE-2024-9686Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Messagechoplugins Order Notification for Telegram
- CVE-2024-10372chidiwilliams buzz model_loader.py download_model temp filechidiwilliams buzz
- CVE-2024-10371SourceCodester Payroll Management System main login buffer overflowSourceCodester Payroll Management System
- CVE-2024-10370Codezips Sales Management System addcustind.php sql injectionCodezips Sales Management System
- CVE-2024-10369Codezips Sales Management System addcustcom.php sql injectionCodezips Sales Management System
- CVE-2024-10368Codezips Sales Management System addstock.php sql injectionCodezips Sales Management System
- CVE-2024-10355SourceCodester Petrol Pump Management Software invoice.php sql injectionSourceCodester Petrol Pump Management Software
- CVE-2024-10354SourceCodester Petrol Pump Management Software print.php sql injectionSourceCodester Petrol Pump Management Software
- CVE-2022-30359OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList.
- CVE-2022-30360OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/u
- CVE-2022-30361OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType.
- CVE-2023-26248The Kademlia DHT (go-libp2p-kad-dht 0.20.0 and earlier) used in IPFS (0.18.1 and earlier) assigns routing information for content (i.e., infgithub.com/libp2p/go-libp2p-kad-dht
- CVE-2024-37844A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a cr
- CVE-2024-48228An issue was found in funadmin 5.0.2.funadmin/funadmin
- CVE-2024-48232An issue was found in mipjz 5.0.5.
- CVE-2024-48233mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP parameter.
- CVE-2024-48234An issue was discovered in mipjz 5.0.5.
- CVE-2024-48235An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file.
- CVE-2024-48236An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of t
- CVE-2024-48238WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
- CVE-2024-48239An issue was discovered in WTCMS 1.0.
- CVE-2024-48343A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSea
- CVE-2024-48396AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS).
- CVE-2024-48448An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML fil
- CVE-2024-48450An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML fil
- CVE-2024-48654Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.ph
- CVE-2024-48743Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter.