# CVEs published 2024-10-30

96 CVEs were published on October 30, 2024: 13 critical, 37 high. Days are UTC.

- [CVE-2024-10086](https://cve.now/CVE-2024-10086.md): Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation (CVSS 6.1, HashiCorp Consul · github.com/hashicorp/consul)
- [CVE-2024-10006](https://cve.now/CVE-2024-10006.md): Consul L7 Intentions Vulnerable To Headers Bypass (CVSS 8.3, HashiCorp Consul · github.com/hashicorp/consul)
- [CVE-2024-10005](https://cve.now/CVE-2024-10005.md): Consul L7 Intentions Vulnerable To URL Path Bypass (CVSS 8.1, HashiCorp Consul · github.com/hashicorp/consul)
- [CVE-2024-10546](https://cve.now/CVE-2024-10546.md): open-scratch Teaching 在线教学平台 URL getDictItemsByTable sql injection (CVSS 5.3, open-scratch Teaching 在线教学平台)
- [CVE-2024-10456](https://cve.now/CVE-2024-10456.md): Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data (CVSS 9.3, Delta Electronics InfraSuite Device Master)
- [CVE-2024-9419](https://cve.now/CVE-2024-9419.md): Certain HP Print Products–Potential Remote Code Execution and/or Elevation of Privilege with the HP Smart Universal Printing Driver (CVSS 7.8, HP Smart Universal Printing Driver)
- [CVE-2024-9110](https://cve.now/CVE-2024-9110.md): Cross-Site Scripting In Privileged Identity (CVSS 6.4, BeyondTrust Privileged Identity)
- [CVE-2024-50344](https://cve.now/CVE-2024-50344.md): I, Librarian has a Stored XSS vulnerability in Supplemental Files (CVSS 4.6, mkucej i-librarian-free)
- [CVE-2024-50419](https://cve.now/CVE-2024-50419.md): WordPress Greenshift plugin \<=9.7 - Broken Access Control vulnerability (CVSS 5.4, wpsoul Greenshift)
- [CVE-2024-50353](https://cve.now/CVE-2024-50353.md): ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected (CVSS 5.3, IowaComputerGurus aspnetcore.utilities.cloudstorage · ICG.A…)
- [CVE-2024-31151](https://cve.now/CVE-2024-31151.md): A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the (CVSS 8.1, LevelOne WBR-6012)
- [CVE-2024-28875](https://cve.now/CVE-2024-28875.md): A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the (CVSS 8.1, LevelOne WBR-6012)
- [CVE-2024-24777](https://cve.now/CVE-2024-24777.md): A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. (CVSS 8.8, LevelOne WBR-6012)
- [CVE-2024-31152](https://cve.now/CVE-2024-31152.md): The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series (CVSS 5.3, LevelOne WBR-6012)
- [CVE-2024-32946](https://cve.now/CVE-2024-32946.md): A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via W (CVSS 5.9, LevelOne WBR-6012)
- [CVE-2024-33699](https://cve.now/CVE-2024-33699.md): The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the adminis (CVSS 9.9, LevelOne WBR-6012)
- [CVE-2024-33603](https://cve.now/CVE-2024-33603.md): The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to acces (CVSS 5.3, LevelOne WBR-6012)
- [CVE-2024-33626](https://cve.now/CVE-2024-33626.md): The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive informa (CVSS 5.3, LevelOne WBR-6012)
- [CVE-2024-23309](https://cve.now/CVE-2024-23309.md): The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on clie (CVSS 9.0, LevelOne WBR-6012)
- [CVE-2024-28052](https://cve.now/CVE-2024-28052.md): The WBR-6012 is a wireless SOHO router. (CVSS 5.3, LevelOne WBR-6012)
- [CVE-2024-33700](https://cve.now/CVE-2024-33700.md): The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attacker (CVSS 7.5, LevelOne WBR-6012)
- [CVE-2024-33623](https://cve.now/CVE-2024-33623.md): A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. (CVSS 3.7, LevelOne WBR-6012)
- [CVE-2024-3935](https://cve.now/CVE-2024-3935.md): Eclipse Mosquito: Double free vulnerability (CVSS 6.0, Eclipse Foundation mosquitto)
- [CVE-2024-10525](https://cve.now/CVE-2024-10525.md): Eclipse Mosquito: Heap Buffer Overflow in my\_subscribe\_callback (CVSS 7.2, Eclipse Foundation mosquitto)
- [CVE-2024-9388](https://cve.now/CVE-2024-9388.md): Black Widgets For Elementor \<= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, modernaweb Black Widgets For Elementor)
- [CVE-2024-8512](https://cve.now/CVE-2024-8512.md): W3SPEEDSTER \<= 7.26 - Authenticated (Administrator+) Remote Code Execution (CVSS 9.1, W3SPEEDSTER)
- [CVE-2024-50504](https://cve.now/CVE-2024-50504.md): WordPress Bulk Change Role plugin \<= 1.1 - Privilege Escalation vulnerability (CVSS 8.8, webxmedia Bulk Change Role)
- [CVE-2024-50506](https://cve.now/CVE-2024-50506.md): WordPress Marketing Automation by AZEXO plugin \<= 1.27.80 - Privilege Escalation vulnerability (CVSS 8.8, Marketing Automation by AZEXO)
- [CVE-2024-50508](https://cve.now/CVE-2024-50508.md): WordPress Woocommerce Product Design plugin \<= 1.0.0 - Arbitrary File Download vulnerability (CVSS 7.5, Chetan Khandla Woocommerce Product Design)
- [CVE-2024-50510](https://cve.now/CVE-2024-50510.md): WordPress AR For Woocommerce plugin \<= 6.3 - Arbitrary File Upload vulnerability (CVSS 10.0, webandprint AR For Woocommerce)
- [CVE-2024-50511](https://cve.now/CVE-2024-50511.md): WordPress WP donimedia carousel plugin \<= 1.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9, WP donimedia carousel)
- [CVE-2024-50507](https://cve.now/CVE-2024-50507.md): WordPress DS.DownloadList plugin \<= 1.3 - PHP Object Injection vulnerability (CVSS 9.8, Daschmi DS.DownloadList)
- [CVE-2024-9632](https://cve.now/CVE-2024-9632.md): Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVSS 7.8, xorg-server · Red Hat Enterprise Linux)
- [CVE-2024-50512](https://cve.now/CVE-2024-50512.md): WordPress Posti Shipping plugin \<= 3.10.2 - Full Path Disclosure (FPD) vulnerability (CVSS 5.3, Posti Shipping)
- [CVE-2024-50509](https://cve.now/CVE-2024-50509.md): WordPress Woocommerce Product Design plugin \<= 1.0.0 - Arbitrary File Deletion vulnerability (CVSS 8.6, Chetan Khandla Woocommerce Product Design)
- [CVE-2024-50503](https://cve.now/CVE-2024-50503.md): WordPress User Toolkit plugin \<= 1.2.3 - Account Takeover vulnerability (CVSS 9.8, Deryck User Toolkit)
- [CVE-2024-10108](https://cve.now/CVE-2024-10108.md): WPAdverts – Classifieds Plugin \<= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts\_add Shortcode (CVSS 7.2, gwin WPAdverts – Classifieds Plugin)
- [CVE-2024-10223](https://cve.now/CVE-2024-10223.md): HT Team Member \<= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode (CVSS 6.4, htplugins WP Team – WordPress Team Member Plugin)
- [CVE-2024-8444](https://cve.now/CVE-2024-8444.md): Download Manager \< 3.3.00 - Contributor+ Stored XSS (CVSS 5.4, Download Manager)
- [CVE-2024-8871](https://cve.now/CVE-2024-8871.md): Pricing Tables WordPress Plugin – Easy Pricing Tables \<= 3.2.5 - Reflected Cross-Site Scripting (CVSS 6.1, fatcatapps Pricing Table WordPress Plugin – Easy Pricing Ta…)
- [CVE-2024-10399](https://cve.now/CVE-2024-10399.md): Download Monitor \<= 5.0.13 - Missing Authorization to Sensitive Information Exposure (CVSS 4.3, wpchill Download Monitor)
- [CVE-2024-8792](https://cve.now/CVE-2024-8792.md): Subscribe to Comments \<= 2.3 - Reflected Cross-Site Scripting (CVSS 6.1, markjaquith Subscribe to Comments)
- [CVE-2024-8627](https://cve.now/CVE-2024-8627.md): Ultimate TinyMCE \<= 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, josh401 Ultimate TinyMCE)
- [CVE-2024-9885](https://cve.now/CVE-2024-9885.md): Widget or Sidebar Shortcode \<= 0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, fstaude Widget or Sidebar Shortcode)
- [CVE-2024-10509](https://cve.now/CVE-2024-10509.md): Codezips Online Institute Management System login.php sql injection (CVSS 6.9, Codezips Online Institute Management System)
- [CVE-2024-10507](https://cve.now/CVE-2024-10507.md): Codezips Free Exam Hall Seating Management System login.php sql injection (CVSS 6.9, Codezips Free Exam Hall Seating Management System)
- [CVE-2024-9846](https://cve.now/CVE-2024-9846.md): Enable Shortcodes inside Widgets,Comments and Experts \<= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3, amu02aftab Enable Shortcodes inside Widgets,Comments and Ex…)
- [CVE-2024-9886](https://cve.now/CVE-2024-9886.md): WP Baidu Map \<= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, suifengtec WP Baidu Map)
- [CVE-2023-5816](https://cve.now/CVE-2023-5816.md): Code Explorer \<= 1.4.5 - Authenticated (Admin+) External File Reading (CVSS 4.9, qriouslad Code Explorer)
- [CVE-2024-9884](https://cve.now/CVE-2024-9884.md): T(-) Countdown \<= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, twinpictures T(-) Countdown)
- [CVE-2024-10506](https://cve.now/CVE-2024-10506.md): code-projects Blood Bank System B-.php sql injection (CVSS 5.3, code-projects Blood Bank System)
- [CVE-2024-10505](https://cve.now/CVE-2024-10505.md): wuzhicms block.php edit code injection (CVSS 5.3, wuzhicms)
- [CVE-2024-10503](https://cve.now/CVE-2024-10503.md): Klokan MapTiler tileserver-gl URL cross site scripting (CVSS 5.3, Klokan MapTiler tileserver-gl)
- [CVE-2024-10502](https://cve.now/CVE-2024-10502.md): ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2024-10501](https://cve.now/CVE-2024-10501.md): ESAFENET CDG ExamCDGDocService.java findById sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2024-10500](https://cve.now/CVE-2024-10500.md): ESAFENET CDG HookWhiteListService.java sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2023-52066](https://cve.now/CVE-2023-52066.md): http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter. (CVSS 7.2)
- [CVE-2024-31972](https://cve.now/CVE-2024-31972.md): EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execu (CVSS 4.3)
- [CVE-2024-31973](https://cve.now/CVE-2024-31973.md): Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Ne (CVSS 5.2)
- [CVE-2024-31975](https://cve.now/CVE-2024-31975.md): EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. (CVSS 4.8)
- [CVE-2024-36060](https://cve.now/CVE-2024-36060.md): EnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell metacharacters in the Ping and Speed Test param (CVSS 8.8)
- [CVE-2024-37573](https://cve.now/CVE-2024-37573.md): The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application (with no permissions) to place phone cal (CVSS 8.4)
- [CVE-2024-42041](https://cve.now/CVE-2024-42041.md): The com.videodownload.browser.videodownloader (aka AppTool-Browser-Video All Video Downloader) application 20-30.05.24 for Android allows an (CVSS 8.1)
- [CVE-2024-43382](https://cve.now/CVE-2024-43382.md): Snowflake JDBC driver versions \>= 3.2.6 and \<= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encryp (CVSS 5.9, net.snowflake:snowflake-jdbc)
- [CVE-2024-46531](https://cve.now/CVE-2024-46531.md): phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter a (CVSS 6.3)
- [CVE-2024-48093](https://cve.now/CVE-2024-48093.md): Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading (CVSS 8.0)
- [CVE-2024-48112](https://cve.now/CVE-2024-48112.md): A deserialization vulnerability in the component \\controller\\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary co (CVSS 9.8, topthink/thinkphp)
- [CVE-2024-48202](https://cve.now/CVE-2024-48202.md): icecms \<=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. (CVSS 9.8)
- [CVE-2024-48214](https://cve.now/CVE-2024-48214.md): KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. (CVSS 8.4)
- [CVE-2024-48241](https://cve.now/CVE-2024-48241.md): An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the \_\_bf\_div function. (CVSS 5.5)
- [CVE-2024-48271](https://cve.now/CVE-2024-48271.md): D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers t (CVSS 8.8)
- [CVE-2024-48272](https://cve.now/CVE-2024-48272.md): D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the dev (CVSS 6.5)
- [CVE-2024-48346](https://cve.now/CVE-2024-48346.md): xtreme1 \<= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data/upload path. (CVSS 6.1)
- [CVE-2024-48569](https://cve.now/CVE-2024-48569.md): Proactive Risk Manager version 9.1.1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in the add/edit form fields, at th (CVSS 5.4)
- [CVE-2024-48646](https://cve.now/CVE-2024-48646.md): An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validatio (CVSS 8.1)
- [CVE-2024-48647](https://cve.now/CVE-2024-48647.md): A file disclosure vulnerability exists in Sage 1000 v7.0.0. (CVSS 7.2)
- [CVE-2024-48648](https://cve.now/CVE-2024-48648.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. (CVSS 6.1)
- [CVE-2024-48733](https://cve.now/CVE-2024-48733.md): SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL (CVSS 8.8)
- [CVE-2024-48734](https://cve.now/CVE-2024-48734.md): Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malic (CVSS 8.8)
- [CVE-2024-48735](https://cve.now/CVE-2024-48735.md): Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access i (CVSS 7.7)
- [CVE-2024-48807](https://cve.now/CVE-2024-48807.md): Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary cod (CVSS 5.4)
- [CVE-2024-51242](https://cve.now/CVE-2024-51242.md): A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. (CVSS 6.5)
- [CVE-2024-51243](https://cve.now/CVE-2024-51243.md): The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this (CVSS 7.2)
- [CVE-2024-51257](https://cve.now/CVE-2024-51257.md): DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the (CVSS 8.8)
- [CVE-2024-51258](https://cve.now/CVE-2024-51258.md): DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the (CVSS 8.8)
- [CVE-2024-51296](https://cve.now/CVE-2024-51296.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pi (CVSS 8.8)
- [CVE-2024-51298](https://cve.now/CVE-2024-51298.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the do (CVSS 9.8)
- [CVE-2024-51299](https://cve.now/CVE-2024-51299.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the du (CVSS 8.8)
- [CVE-2024-51300](https://cve.now/CVE-2024-51300.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ge (CVSS 8.8)
- [CVE-2024-51301](https://cve.now/CVE-2024-51301.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pa (CVSS 8.8)
- [CVE-2024-51304](https://cve.now/CVE-2024-51304.md): In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ld (CVSS 8.8)
- [CVE-2024-51419](https://cve.now/CVE-2024-51419.md): Cross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibition v.1.0.0 allows a (CVSS 6.1)
- [CVE-2024-51424](https://cve.now/CVE-2024-51424.md): An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact (CVSS 9.8)
- [CVE-2024-51425](https://cve.now/CVE-2024-51425.md): An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impac (CVSS 8.8)
- [CVE-2024-51426](https://cve.now/CVE-2024-51426.md): An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact (CVSS 8.8)
- [CVE-2024-51427](https://cve.now/CVE-2024-51427.md): An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-10-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.