CVEs published November 10, 2024
35 CVEs were published on November 10, 2024: 1 critical, 11 high.
- Published
- 35
- Critical
- 1
- High
- 11
- Medium
- 21
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- D-Link DI-8003
- 3
- AMTT Hotel Broadband Operation System
- 2
- 1000 Projects Beauty Parlour Management System
- 1
- anas2004 Marquee Elementor with Posts
- 1
- CodeAstro Real Estate Management System
- 1
- Codezips Hospital Appointment System
- 1
- Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- 1
- lpagg 3D Presentation
- 1
- neville.lugton bpmn.io
- 1
- nicheaddons Restaurant & Cafe Addon for Elementor
- 1
Critical 1
High 11
- CVE-2024-11056Tenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflowTenda AC10
- CVE-2024-10958WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelayopajaap WP Photo Album Plus
- CVE-2024-11048D-Link DI-8003 dbsrv.asp dbsrv_asp stack-based overflowD-Link DI-8003
- CVE-2024-11047D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflowD-Link DI-8003
- CVE-2020-10370Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bl
- CVE-2021-41737In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route(333333333333333
- CVE-2024-46951An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.
- CVE-2024-46952An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0.
- CVE-2024-46953An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.
- CVE-2024-46954An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0.
- CVE-2024-46956An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.
Medium, low and unrated 23
- CVE-2024-11059Project Worlds Free Download Online Shopping System success.php sql injectionProject Worlds Free Download Online Shopping System
- CVE-2024-11058CodeAstro Real Estate Management System About Us Page aboutedit.php sql injectionCodeAstro Real Estate Management System
- CVE-2024-11057Codezips Hospital Appointment System removeBranchResult.php sql injectionCodezips Hospital Appointment System
- CVE-2024-110551000 Projects Beauty Parlour Management System admin-profile.php sql injection1000 Projects Beauty Parlour Management System
- CVE-2024-10265Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg ParameterForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2024-51576WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerabilitywpza AMP Img Shortcode
- CVE-2024-11054SourceCodester Simple Music Cloud Community System ajax.php unrestricted uploadSourceCodester Simple Music Cloud Community System
- CVE-2024-51577WordPress bpmn.io plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityneville.lugton bpmn.io
- CVE-2024-51578WordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitylpagg 3D Presentation
- CVE-2024-51580WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityzootemplate Clever Addons for Elementor
- CVE-2024-51581WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Restaurant & Cafe Addon for Elementor
- CVE-2024-51583WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityPluginsPoint Kento Ads Rotator
- CVE-2024-51584WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityanas2004 Marquee Elementor with Posts
- CVE-2024-11051AMTT Hotel Broadband Operation System online_status.php sql injectionAMTT Hotel Broadband Operation System
- CVE-2024-11050AMTT Hotel Broadband Operation System language.php cross site scriptingAMTT Hotel Broadband Operation System
- CVE-2024-11049ZKTeco ZKBio Time Image File photo direct requestZKTeco ZKBio Time
- CVE-2024-11046D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp os command injectionD-Link DI-8003
- CVE-2020-10367Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory access via a "Spectra"
- CVE-2020-10368Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spe
- CVE-2020-10369Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inferences about memory conte
- CVE-2023-40457The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a
- CVE-2024-46613WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items
- CVE-2024-46955An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.