CVEs published November 19, 2024
388 CVEs were published on November 19, 2024: 17 critical, 114 high. 3 are now in CISA KEV.
- Published
- 388
- Critical
- 17
- High
- 114
- Medium
- 247
- Low
- 2
- Unrated
- 8
- Now in CISA KEV
- 3
- Fix available
- 44
Most affected products
- Linux
- 87
- Google Android
- 33
- needrestart
- 4
- IBM Concert Software
- 3
- Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- 3
- Apple macOS
- 2
- Apple Safari · Apple iOS and iPadOS +2
- 2
- Google Andrioid
- 2
- Kevin Stover Ninja Forms
- 2
- welaunch WordPress GDPR
- 2
Critical 17
- CVE-2018-9467In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination.Google Android
- CVE-2018-9433In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation.Google Android
- CVE-2018-9365In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check.Google Andrioid
- CVE-2018-9341In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check.Google Android
- CVE-2024-53066nfs: Fix KMSAN warning in decode_getfattr_attrs()Linux
- CVE-2024-42450The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data.Versa Director
- CVE-2024-53058net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB dataLinux
- CVE-2024-52401WordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerabilityHuangYe WuDeng Hacklog DownloadManager
- CVE-2024-52402WordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerabilitygunghoinc Exclusive Content Password Protect
- CVE-2024-50286ksmbd: fix slab-use-after-free in ksmbd_smb2_session_createLinux
- CVE-2024-50283ksmbd: fix slab-use-after-free in smb3_preauth_hash_rspLinux
- CVE-2024-50276net: vertexcom: mse102x: Fix possible double free of TX skbLinux
- CVE-2024-48069A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an
- CVE-2024-48070An issue in Weaver E-cology v.
- CVE-2024-48072Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form
- CVE-2024-48694File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arb
- CVE-2024-52675SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php.
High 114
- CVE-2024-44308The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2024-44307A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2024-44306A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2018-9466In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write.Google Android
- CVE-2018-9456In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2024-52595HTML Cleaner allows crafted scripts in special contexts like svg or math to pass throughfedora-python lxml_html_clean · lxml-html-clean
- CVE-2018-9432In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass.Google Android
- CVE-2018-9428In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free.Google Android
- CVE-2018-9424In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9419In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2018-9417In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking.Google Android
- CVE-2018-9411In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2024-52360IBM Concert Software SQL injectionIBM Concert Software
- CVE-2024-45419Zoom Apps - Improper Input ValidationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2018-9409In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9372In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9371In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mappGoogle Android
- CVE-2018-9370In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounGoogle Android
- CVE-2018-9369In bootloader there is fastboot command allowing user specified kernel command line arguments.Google Android
- CVE-2018-9367In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2018-9366In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer oveGoogle Android
- CVE-2024-11395Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2018-9364In the LG LAF component, there is a special command that allowed modification of certain partitions.Google Android
- CVE-2018-9348In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow.Google Android
- CVE-2024-51503A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate pTrend Micro Deep Security
- CVE-2024-21697This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for SourcetreAtlassian Sourcetree for Mac · Atlassian Sourcetree for Win…
- CVE-2018-9344In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking.Google Android
- CVE-2018-9340In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, cauGoogle Android
- CVE-2018-9339In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion.Google Android
- CVE-2018-9338In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-21270In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revokeGoogle Andrioid
- CVE-2017-13315In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.Google Android
- CVE-2024-53088i40e: fix race condition by adding filter's intermediate sync stateLinux
- CVE-2024-53082virtio_net: Add hash_key_length checkLinux
- CVE-2024-53080drm/panthor: Lock XArray when getting entries for the VMLinux
- CVE-2024-53079mm/thp: fix deferred split unqueue naming and lockingLinux
- CVE-2024-48992Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intneedrestart
- CVE-2024-48991Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race conditionneedrestart
- CVE-2024-48990Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intneedrestart
- CVE-2024-11003Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input.needrestart
- CVE-2024-53076iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()Linux
- CVE-2024-53073NFSD: Never decrement pending_async_copies on errorLinux
- CVE-2024-53068firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()Linux
- CVE-2024-53063media: dvbdev: prevent the risk of out of memory accessLinux
- CVE-2024-53062media: mgb4: protect driver against spectreLinux
- CVE-2024-53061media: s5p-jpeg: prevent buffer overflowsLinux
- CVE-2024-53059wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()Linux
- CVE-2024-53057net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOTLinux
- CVE-2024-53044net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()Linux
- CVE-2024-52388WordPress Hebrew Date plugin <= 2.1.0 - CSRF to Stored XSS vulnerabilitymikeage Hebrew Date
- CVE-2024-50532WordPress Events Manager Pro – extended plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityJerin K Alexander Events Manager Pro – extended
- CVE-2024-50533WordPress Domain Sharding plugin <= 1.2.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityDavid Garcia Domain Sharding
- CVE-2024-50534WordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilitytechdabang World Prayer Time
- CVE-2024-51631WordPress Sticky Social Bar plugin <= 2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityMd Eftakhairul Islam Sticky Social Bar
- CVE-2024-51632WordPress SH Slideshow plugin <= 4.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitySam Hoe SH Slideshow
- CVE-2024-51633WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityivycat Simple Page Specific Sidebars
- CVE-2024-51634WordPress Webriti Custom Login plugin <= 0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilitya.ankit Webriti Custom Login
- CVE-2024-51635WordPress While Loading plugin <= 3.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityGarmur While Loading
- CVE-2024-51636WordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityZ.com byGMO GMO Social Connection
- CVE-2024-51637WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitysroyalty Admin SMS Alert
- CVE-2024-51638WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerabilitySanjeev Mohindra Awesome Shortcodes For Genesis
- CVE-2024-51639WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerabilityHints Naver Blog
- CVE-2024-51640WordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerabilityMatt Rude MDR Webmaster Tools
- CVE-2024-51641WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerabilityJuan Camilo Advanced PDF Generator
- CVE-2024-51642WordPress Seo Free plugin <= 1.4 - CSRF to Stored XSS vulnerabilityivan9146 Seo Free
- CVE-2024-51643WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerabilityragaskar Amazon Associate Filter
- CVE-2024-51644WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitysamwilson Addressbook
- CVE-2024-51645WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilitythemefusecom ThemeFuse Maintenance Mode
- CVE-2024-51648WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityhands01 e-shops
- CVE-2024-51649WordPress Mobilize plugin <= 3.0.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityPatrick Lumumba Mobilize
- CVE-2024-51650WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityscottmydollarplancom Random Featured Post
- CVE-2024-51652WordPress Skip To plugin <= 2.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitymarckocher Skip To
- CVE-2024-51653WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityakira1891 UPDATE NOTIFICATIONS
- CVE-2024-51654WordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEric Allen APK Downloader
- CVE-2024-51655WordPress Custom Author URL plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitymicrokid Custom Author URL
- CVE-2024-51656WordPress Flash Show And Hide Box plugin <= 1.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitylitefeel Flash Show And Hide Box
- CVE-2024-51657WordPress SmartLink Dynamic URLs plugin <= 1.1.0 - CSRF to Stored XSS vulnerabilityWoopy Plugins SmartLink Dynamic URLs
- CVE-2024-52421WordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerabilitywp-buy WP Popup Window Maker
- CVE-2024-50519WordPress Jigoshop – Store Exporter plugin <= 1.5.8 - Reflected Cross Site Scripting (XSS) vulnerabilityJosh Kohlbach Jigoshop – Store Exporter
- CVE-2024-50522WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerabilityredyyu WeChat Subscribers Lite
- CVE-2024-10204Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025Dassault Systèmes eDrawings
- CVE-2024-11075SICK Incoming Goods Suite privilege escalation vulnerabilitySICK AG SICK Incoming Goods Suite
- CVE-2024-11194Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Updatetechlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2024-11036GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earningsrubengc GamiPress – Gamification plugin to reward points, a…
- CVE-2024-11038WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_formwpbean WPB Popup for Contact Form 7 – Showing Contact Form…
- CVE-2024-10388WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scriptingwelaunch WordPress GDPR
- CVE-2024-8403Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP ModuleMitsubishi Electric MELSEC iQ-F Series FX5-ENET · Mitsubish…
- CVE-2024-21539Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input@eslint/plugin-kit
- CVE-2024-50301security/keys: fix slab-out-of-bounds in key_task_permissionLinux
- CVE-2024-50300regulator: rtq2208: Fix uninitialized use of regulator_configLinux
- CVE-2024-50299sctp: properly validate chunk size in sctp_sf_ootb()Linux
- CVE-2024-50297net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine startsLinux
- CVE-2024-50294rxrpc: Fix missing locking causing hanging callsLinux
- CVE-2024-50293net/smc: do not leave a dangling sk pointer in __smc_create()Linux
- CVE-2024-50291media: dvb-core: add missing buffer index checkLinux
- CVE-2024-50288media: vivid: fix buffer overwrite when using > 32 buffersLinux
- CVE-2024-50285ksmbd: check outstanding simultaneous SMB operationsLinux
- CVE-2024-50284ksmbd: Fix the missing xa_store error checkLinux
- CVE-2024-50282drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()Linux
- CVE-2024-50281KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operationLinux
- CVE-2024-50280dm cache: fix flushing uninitialized delayed_work on cache_ctr errorLinux
- CVE-2024-50279dm cache: fix out-of-bounds access to the dirty bitset when resizingLinux
- CVE-2024-50278dm cache: fix potential out-of-bounds access on the first resumeLinux
- CVE-2024-50275arm64/sve: Discard stale CPU state when handling SVE trapsLinux
- CVE-2024-50274idpf: avoid vport access in idpf_get_link_ksettingsLinux
- CVE-2024-50273btrfs: reinitialize delayed ref list after deleting it from the listLinux
- CVE-2024-50269usb: musb: sunxi: Fix accessing an released usb phyLinux
- CVE-2024-50268usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()Linux
- CVE-2024-50267USB: serial: io_edgeport: fix use after free in debug printkLinux
- CVE-2024-50264vsock/virtio: Initialization of the dangling pointer occurring in vsk->transLinux
- CVE-2023-52921drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()Linux
- CVE-2024-52714Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
- CVE-2024-52788Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as
- CVE-2024-52789Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in
Medium, low and unrated 257
- CVE-2024-44309A cookie management issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2018-9440In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation.Google Android
- CVE-2024-51669WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityKalmang Dynamic Widgets
- CVE-2024-52392WordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerabilityW3SPEEDSTER
- CVE-2024-30424WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityBeaver Builder Addons by WPZOOM
- CVE-2023-27609WordPress WP Roles at Registration plugin <= 0.23 - Cross Site Scripting (XSS) vulnerabilityNetTantra WP Roles at Registration
- CVE-2024-11400HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameterrealmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2018-9421In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data.Google Android
- CVE-2018-9420In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2018-9412In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation.Google Android
- CVE-2018-9410In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-45422Zoom Apps - Improper Input ValidationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-52359IBM Concert Software improper access controlsIBM Concert Software
- CVE-2024-45420Zoom Apps - Uncontrolled Resource ConsumptionZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-37070IBM Concert Software information disclosureIBM Concert Software
- CVE-2018-9368In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies.Google Android
- CVE-2018-9346In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2018-9345In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2024-50430WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerabilityBeaver Builder
- CVE-2024-53087drm/xe: Fix possible exec queue leak in exec IOCTLLinux
- CVE-2024-53086drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTLLinux
- CVE-2024-53085tpm: Lock TPM chip in tpm_pm_suspend() firstLinux
- CVE-2024-53084drm/imagination: Break an object reference loopLinux
- CVE-2024-53083usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlierLinux
- CVE-2024-53081media: ar0521: don't overflow when checking PLL valuesLinux
- CVE-2024-10224Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possiblyModule::ScanDeps
- CVE-2024-53078drm/tegra: Fix NULL vs IS_ERR() check in probe()Linux
- CVE-2024-53077rpcrdma: Always release the rpcrdma_device's xa_arrayLinux
- CVE-2024-53075riscv: Prevent a bad reference count on CPU nodesLinux
- CVE-2024-53074wifi: iwlwifi: mvm: don't leak a link on AP removalLinux
- CVE-2024-53072platform/x86/amd/pmc: Detect when STB is not availableLinux
- CVE-2024-53071drm/panthor: Be stricter about IO mapping flagsLinux
- CVE-2024-53070usb: dwc3: fix fault at system suspend if device was already runtime suspendedLinux
- CVE-2024-53069firmware: qcom: scm: fix a NULL-pointer dereferenceLinux
- CVE-2024-53067scsi: ufs: core: Start the RTC update work laterLinux
- CVE-2024-53065mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_createLinux
- CVE-2024-53064idpf: fix idpf_vc_core_init error pathLinux
- CVE-2024-53060drm/amdgpu: prevent NULL pointer dereference if ATIF is not supportedLinux
- CVE-2022-47424WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Repute InfoSystems ARMember
- CVE-2024-53056drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()Linux
- CVE-2024-53055wifi: iwlwifi: mvm: fix 6 GHz scan constructionLinux
- CVE-2024-53053scsi: ufs: core: Fix another deadlock during RTC updateLinux
- CVE-2024-53052io_uring/rw: fix missing NOWAIT check for O_DIRECT start writeLinux
- CVE-2024-53051drm/i915/hdcp: Add encoder check in intel_hdcp_get_capabilityLinux
- CVE-2024-53050drm/i915/hdcp: Add encoder check in hdcp2_get_capabilityLinux
- CVE-2024-53049slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprofLinux
- CVE-2024-53048ice: fix crash on probe for DPLL enabled E810 LOMLinux
- CVE-2024-53047mptcp: init: protect sched with rcu_read_lockLinux
- CVE-2024-53046arm64: dts: imx8ulp: correct the flexspi compatible stringLinux
- CVE-2024-53045ASoC: dapm: fix bounds checker error in dapm_widget_list_createLinux
- CVE-2024-53043mctp i2c: handle NULL header addressLinux
- CVE-2024-53042ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()Linux
- CVE-2024-50304ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()Linux
- CVE-2024-50303resource,kexec: walk_system_ram_res_rev must retain resource flagsLinux
- CVE-2024-43338WordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityAutomattic Crowdsignal Dashboard – Polls, Surveys & more
- CVE-2024-51686WordPress Manage User Columns plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerabilityDeepak Khokhar Manage User Columns
- CVE-2024-52420WordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityThemeisle Disable Admin Notices individually
- CVE-2024-50513WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerabilityWPXPO PostX
- CVE-2024-50514WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2024-50515WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2024-50516WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerabilityadamskaat Countdown & Clock
- CVE-2024-50517WordPress ID-SK Toolkit plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerabilityIDSK team ID-SK Toolkit
- CVE-2024-50518WordPress Pricer Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityCommon Ninja Pricer Ninja
- CVE-2024-50520WordPress Ancient World Linked Data plugin <= 0.2.1 - Cross Site Scripting (XSS) vulnerabilityPeter J. Herrel Ancient World Linked Data
- CVE-2024-50521WordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityalleythemes Alley Elementor Widget
- CVE-2024-50535WordPress Step by Step plugin <= 0.4.5 - Stored Cross Site Scripting (XSS) vulnerabilityKyle M Brown Step by Step
- CVE-2024-50536WordPress GDReseller plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityTamer Ziady GDReseller
- CVE-2024-50537WordPress Smart Mockups plugin <= 1.2.0 - Stored Cross Site Scripting (XSS) vulnerabilityStefano Marra Smart Mockups
- CVE-2024-50538WordPress Show Visitor IP Address plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerabilityirfantea Show Visitor IP Address
- CVE-2024-50540WordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitydemixpress (dp) AddThis
- CVE-2024-50541WordPress Advanced Control Manager plugin <= 2.16.0 - Stored Cross Site Scripting (XSS) vulnerabilityoverclokk Advanced Control Manager for WordPress by ItalySt…
- CVE-2024-50542WordPress RLM Elementor Widgets Pack plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityzachsilberstein RLM Elementor Widgets Pack
- CVE-2024-50543WordPress amazing neo icon font for elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilitymudssar amazing neo icon font for elementor
- CVE-2024-50545WordPress DataMentor plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityAuburnForest DataMentor
- CVE-2024-50546WordPress MyOrderDesk plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerabilityRiley Magnuson MyOrderDesk
- CVE-2024-50547WordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerabilityMark Hodder Themedy Toolbox
- CVE-2024-50548WordPress Awesome Progress Bar plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerabilityAbdullah Nahian Awesome Progress Bar
- CVE-2024-50549WordPress Bonway Static Block Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilitySteven Nolles Bonway Static Block Editor
- CVE-2024-50551WordPress EndomondoWP plugin <= 0.1.1 - Stored Cross Site Scripting (XSS) vulnerabilityOdyno EndomondoWP
- CVE-2024-50552WordPress Hover Video Preview plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilityjasonpancake Hover Video Preview
- CVE-2024-50553WordPress Classy Addons for Elementor plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityClassy Addons for Elementor
- CVE-2024-50554WordPress Sided plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerabilitySided
- CVE-2024-50556WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityWorldMarkerter WM Zoom
- CVE-2024-51617WordPress Clyp plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityClyp
- CVE-2024-51794WordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerabilitysellerthemes Storely
- CVE-2024-51795WordPress Pdf Embedder Fay plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerabilityfayjur Pdf Embedder Fay
- CVE-2024-51796WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityShahjahan Jewel Trendy Restaurant Menu
- CVE-2024-51797WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityMd. Shiddikur Rahman Ultimate Accordion
- CVE-2024-51798WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerabilitySurbma | Font Awesome
- CVE-2024-51799WordPress Bg Patriarchia BU plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerabilityVadim Bogaiskov Bg Patriarchia BU
- CVE-2024-51801WordPress Brand my Footer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityjakeatthrive Brand my Footer
- CVE-2024-51802WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerabilityBread & Butter
- CVE-2024-51803WordPress Inline Click To Tweet plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityMagnetic Creative Inline Click To Tweet
- CVE-2024-51804WordPress Moka Get Posts Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitybobmatnyc Moka Get Posts Shortcode
- CVE-2024-51805WordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerabilityyonisink yPHPlista
- CVE-2024-51806WordPress Awesome Fitness Testimonials plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityShingo Awesome Fitness Testimonials
- CVE-2024-51807WordPress AgendaPress plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerabilityBlack and White AgendaPress – Easily Publish Meeting Agenda…
- CVE-2024-51808WordPress codeSnips plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerabilityPat O’Brien codeSnips
- CVE-2024-51809WordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilityintelligentDesign Keymaster Chord Notation Free
- CVE-2024-51810WordPress Lewe Bootstrap Visuals plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabilityGeorge Lewe Lewe Bootstrap Visuals
- CVE-2024-51811WordPress Popup Image plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerabilityHussam Hussien Popup Image
- CVE-2024-51812WordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityWasim Pro Addons For Elementor
- CVE-2024-51813WordPress Anant Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityanantaddons Anant Addons for Elementor
- CVE-2024-51814WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability野人 活动链接推广插件
- CVE-2024-51816WordPress Banner System plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilitySaul Morales Pacheco Banner System
- CVE-2024-51819WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitytigrisflexplatform Tigris Flexplatform
- CVE-2024-51821WordPress WE – Client Logo Carousel plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilitywordpresteem WE – Client Logo Carousel
- CVE-2024-51822WordPress Creative Blocks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitykeonthemes Creative Blocks
- CVE-2024-51823WordPress Add Ribbon Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitySherkSpear Add Ribbon Shortcode
- CVE-2024-51824WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerabilityKaram Singh Advanced Video Player with Analytics
- CVE-2024-51825WordPress Alert Me! plugin <= 0.4.0 - Cross Site Scripting (XSS) vulnerabilitycrissoca Alert Me!
- CVE-2024-51826WordPress Bitcoin Payments plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityJandal Bitcoin Payments
- CVE-2024-51827WordPress Boombox Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityMovement Ventures Boombox Shortcode
- CVE-2024-51828WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityDan Griffiths Beacon For Help Scout
- CVE-2024-51829WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityfigoliquinn Mobile Kiosk
- CVE-2024-51830WordPress News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityFazilatunnesa News Ticker
- CVE-2024-51831WordPress Persian Nested Show/Hide Text plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityAboutorab Pourhaghani Persian Nested Show/Hide Text
- CVE-2024-51832WordPress Plenigo plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerabilityPlenigo
- CVE-2024-51833WordPress Easy Social Sharebar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilitynomaniplex Easy Social Sharebar
- CVE-2024-51834WordPress Luzuk Slider plugin <= 0.1.5 - Stored Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Slider
- CVE-2024-51835WordPress OpenCart Product Display plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityajinkyanahar OpenCart Product Display
- CVE-2024-51836WordPress Wezido plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityteconce Wezido
- CVE-2024-51838WordPress Pull This plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitysmajda Pull This
- CVE-2024-51839WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityMeini Utech Spinning Earth
- CVE-2024-51840WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityrezaul Wd-image-magnifier-xoss
- CVE-2024-51841WordPress File Select Control For Elementor plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityAbdul Awal Uzzal File Select Control For Elementor
- CVE-2024-51842WordPress Image Carousel Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilitySazzad Image Carousel Shortcode
- CVE-2024-51844WordPress Location Click Map plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityKiran Patil Location Click Map
- CVE-2024-51846WordPress Community Yard Sale plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerabilityMichael Simpson Community Yard Sale
- CVE-2024-51847WordPress WP PagSeguro Payments plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitygiovanebribeiro WP PagSeguro Payments
- CVE-2024-51848WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerabilitydigitalzoomstudio Parallaxer
- CVE-2024-51849WordPress My Restaurant Menu plugin <= 0.2.0 - Cross Site Scripting (XSS) vulnerabilityMarco Piarulli My Restaurant Menu
- CVE-2024-51850WordPress WoW Guild Armory Roster plugin <= 0.5.5 - Cross Site Scripting (XSS) vulnerabilitybchristopeit WoW Guild Armory Roster
- CVE-2024-51851WordPress best bootstrap widgets for elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitysalehattari best bootstrap widgets for elementor
- CVE-2024-51852WordPress Dynamic Post Grid Elementor Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerabilityMaidul Dynamic Post Grid Elementor Addon
- CVE-2024-51853WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityAlberuni Azad. Faltu Testimonial Rotator
- CVE-2024-51854WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerabilityholanetworks Hola Free Video Player
- CVE-2024-51855WordPress Redirecter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityProductineer Redirecter
- CVE-2024-51856WordPress Moose Elementor Kit plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityibllex Moose Elementor Kit
- CVE-2024-51857WordPress Olympus Shortcodes plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityDannyCooper Olympus Shortcodes
- CVE-2024-51858WordPress Social Locker plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityPluginOps Social Locker
- CVE-2024-51859WordPress Bamboo Enquiries plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerabilityBamboo Manchester Bamboo Enquiries
- CVE-2024-51860WordPress Custom Dashboard Widget plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityDuoGeek Custom Dashboard Widget
- CVE-2024-51861WordPress EventPress plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityDuoGeek EventPress
- CVE-2024-51862WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerabilityBaptiste Wicht Google Visualization Charts
- CVE-2024-51863WordPress PF Timer plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityProfit Funnels PF Timer
- CVE-2024-51864WordPress Shortcode Collection plugin <= 1.4 - Stored Cross Site Scripting (XSS) vulnerabilityAgnel Waghela Shortcode Collection
- CVE-2024-51865WordPress Simple Social Share Block plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityleroysabrina Simple Social Share Block
- CVE-2024-51866WordPress Social button plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilityriponshah Social button
- CVE-2024-51867WordPress Simpul Events by Esotech plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerabilitygeilt Simpul Events by Esotech
- CVE-2024-51868WordPress DuoGeek Blocks plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerabilityTapan Kumer Das DuoGeek Blocks
- CVE-2024-51869WordPress Gutenium Blocks plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerabilityBest WP Developer Gutenium Blocks
- CVE-2024-51870WordPress Ultimate Flipbox Addon for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilitydragwyb Ultimate Flipbox Addon for Elementor
- CVE-2024-51871WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Team
- CVE-2024-51872WordPress Luzuk Testimonials plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerabilityluzuk Themes Luzuk Testimonials
- CVE-2024-51873WordPress Multi-day Booking Calendar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityMasashi Takizawa Multi-day Booking Calendar
- CVE-2024-51874WordPress ParOne Feeds plugin <= 1.17.1 - Cross Site Scripting (XSS) vulnerabilityParOne Feeds
- CVE-2024-51875WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerabilityNazmul Ahsan MDC YouTube Downloader
- CVE-2024-51876WordPress wp_automatic_widget plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCodstack wp_automatic_widget
- CVE-2024-51877WordPress SV Forms plugin <= 2.0.05 - Cross Site Scripting (XSS) vulnerabilitystraightvisions SV Forms
- CVE-2024-51878WordPress AchillesTheme-shortcodes plugin <= 0.1 - Cross Site Scripting (XSS) vulnerabilitystrailejoey AchillesTheme-shortcodes
- CVE-2024-51879WordPress Text Advertisements plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilityArash Heidari Text Advertisements
- CVE-2024-51880WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerabilitysistemasBebetter BeBetter Social Icons
- CVE-2024-51881WordPress Be Shortcodes plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityBeautimour Be Shortcodes
- CVE-2024-51883WordPress I Plant A Tree plugin <= 1.7.4 - Stored Cross Site Scripting (XSS) vulnerabilityMicha I Plant A Tree
- CVE-2024-51884WordPress Posts Search plugin <= 1.2.2 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Posts Search
- CVE-2024-51885WordPress Browsing History plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Browsing History
- CVE-2024-51886WordPress Posts Filter plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerabilityTakashi Matsuyama Posts Filter
- CVE-2024-51887WordPress NV Slider plugin <= 1.6 - Stored Cross Site Scripting (XSS) vulnerabilityryscript NV Slider
- CVE-2024-51889WordPress Fancy User List plugin <= 3.1 - Stored Cross Site Scripting (XSS) vulnerabilityGeroNikolov Fancy User List
- CVE-2024-51890WordPress Geoportail Shortcode plugin <= 2.4.4 - Stored Cross Site Scripting (XSS) vulnerabilitygeoWP Geoportail Shortcode
- CVE-2024-51891WordPress Official SalesWizard CRM Plugin plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerabilitySalesWizard.pl Official SalesWizard CRM Plugin
- CVE-2024-51892WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerabilityNoor Alam Sell Media File with Stripe
- CVE-2024-51893WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityFixoLab Postify: Post Layout For Elementor
- CVE-2024-51894WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityreyzua Topbar ID for Elementor
- CVE-2024-51895WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerabilitypankaj9296 Minical Hotel Booking Plugin
- CVE-2024-51896WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilitywebvitaly Magic Slider
- CVE-2024-51897WordPress News Articles plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityErik Saulnier News Articles
- CVE-2024-51898WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitysachin8600 Semantic Shortcode
- CVE-2024-51899WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityseothemes Simple Pricing Table
- CVE-2024-51901WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitywojciechborowicz Smooth Maps
- CVE-2024-51902WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilitycybio TinyCode
- CVE-2024-51903WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerabilityBrandon Hubbard WP Listings Pro
- CVE-2024-51904WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerabilityJoan Boluda Embed documents shortcode
- CVE-2024-51905WordPress RSV PDF Preview plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityRavi Kumar Vanukuru RSV PDF Preview
- CVE-2024-51906WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityRavi Kumar Vanukuru RSV 360 View
- CVE-2024-51907WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityCodemenschen WP Virtual Room Configurator
- CVE-2024-51908WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitykevinabl Adventure Bucket List
- CVE-2024-51909WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityMonarkie DCS audioCase
- CVE-2024-51910WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerabilityezlab Assist24 Help Desk
- CVE-2024-51911WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityKetan Patel Featured product by category name
- CVE-2024-51912WordPress IntelliWidget Elements plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilitylilaeamedia IntelliWidget Elements
- CVE-2024-51913WordPress Mapme plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityMapme
- CVE-2024-51914WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerabilitygopiplus drop in image slideshow gallery
- CVE-2024-51916WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerabilityCreative Brahma Multifox Plus
- CVE-2024-51917WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilitylequanghuylc Multiple Votes in one page
- CVE-2024-51918WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityFreshlight Lab Pay With Stripe
- CVE-2024-51920WordPress Map Store Locator plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityPierre Jégo Map Store Locator
- CVE-2024-51921WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitymidori scrollup
- CVE-2024-51922WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityMaruf Arafat VP Sitemap
- CVE-2024-51923WordPress Websand Subscription Form plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityWebsand Subscription Form
- CVE-2024-51924WordPress WP Agenda plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityalexandremagno WP Agenda
- CVE-2024-51925WordPress Testimonial Slider Shortcode plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilitySazzad Testimonial Slider Shortcode
- CVE-2024-51926WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitywpsoul GreenCon
- CVE-2024-51927WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityAsaduzzaman Abir Rig Elements For Elementor
- CVE-2024-51928WordPress Blocks Post Grid plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityJakir Hasan Blocks Post Grid
- CVE-2024-51929WordPress Icon Widget plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityphilspectrum Icon Widget
- CVE-2024-51930WordPress Custom URL Shortener plugin <= 0.3.6 - Cross Site Scripting (XSS) vulnerabilityIronFeet Custom URL Shortener
- CVE-2024-51931WordPress AzonBox plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityShazahanul Islam Shohag AzonBox
- CVE-2024-51932WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitySaif Kings Tab Slider
- CVE-2024-51933WordPress Cookie Nonsense for YT plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilitydozyde Cookie Nonsense for YT
- CVE-2024-51934WordPress Ekiline Block Collection plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityUri Lazcano Ekiline Block Collection
- CVE-2024-51935WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerabilitySam Perrow Fast Video and Image Display
- CVE-2024-51936WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityeSparkBiz ESB Testimonials
- CVE-2024-51937WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerabilitybnisia IA Map Analytics Basic
- CVE-2024-51938WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Charity Addon for Elementor
- CVE-2024-49680WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityRexTheme WP VR
- CVE-2024-49689WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerabilityHarmonic Design HD Quiz – Save Results Light
- CVE-2024-49697WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-50417WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerabilityboldthemes Bold Page Builder
- CVE-2024-51660WordPress Easy Accordion Gutenberg Block plugin <= 1.2.3 - Broken Access Control vulnerabilityBinsaifullah Easy Accordion Gutenberg Block
- CVE-2024-51671WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerabilityThemeisle Otter - Gutenberg Block
- CVE-2024-51817WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerabilityCodeZel Combo WP Rewrite Slugs
- CVE-2024-52395WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerabilityQuantumCloud Floating Buttons for WooCommerce
- CVE-2024-52600Statamic CMS has Path Traversal in Asset Uploadstatamic cms · statamic/cms
- CVE-2024-52582cachi2 allows traceback prints localscontainerbuildsystem cachi2
- CVE-2024-10524GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLsgnu wget
- CVE-2024-9777Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameterwproyal Ashe
- CVE-2024-9830Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameterwproyal Bard
- CVE-2024-11198GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parametergdragon GD Rating System
- CVE-2024-11224Parallax Image <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameterthehowarde Parallax Image
- CVE-2024-11195Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcodenik00726 Email Subscription Popup
- CVE-2024-31141Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProviderApache Software Foundation Apache Kafka Clients · org.apach…
- CVE-2024-11069WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletionwelaunch WordPress GDPR
- CVE-2024-10268MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer ShortcodeMP3 Audio Player – Music Player, Podcast Player & Radio by…
- CVE-2024-11098SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Uploadmr2p SVG Block
- CVE-2024-10103MailPoet < 5.3.2 - Admin+ Stored XSSMailPoet
- CVE-2024-50302HID: core: zero-initialize the report bufferLinux · :linux_kernel:
- CVE-2024-50298net: enetc: allocate vf_state during PF probesLinux
- CVE-2024-50296net: hns3: fix kernel crash when uninstalling driverLinux
- CVE-2024-50295net: arc: fix the device for dma_map_single/dma_unmap_singleLinux
- CVE-2024-50292ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_removeLinux
- CVE-2024-50290media: cx24116: prevent overflows on SNR calculusLinux
- CVE-2024-50289media: av7110: fix a spectre vulnerabilityLinux
- CVE-2024-50287media: v4l2-tpg: prevent the risk of a division by zeroLinux
- CVE-2024-50277dm: fix a crash if blk_alloc_disk failsLinux
- CVE-2024-50272filemap: Fix bounds checking in filemap_read()Linux
- CVE-2024-50271signal: restore the override_rlimit logicLinux
- CVE-2024-50270mm/damon/core: avoid overflow in damon_feed_loop_next_input()Linux
- CVE-2024-50266clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCsLinux
- CVE-2024-50265ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()Linux
- CVE-2024-48071E-cology has a directory traversal vulnerability.
- CVE-2024-50803The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker redaxo/source
- CVE-2024-52711DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.
- CVE-2024-52759D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.
- CVE-2024-52762A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arb
- CVE-2024-52763A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute