CVEs published December 2, 2024
194 CVEs were published on December 2, 2024: 10 critical, 117 high. 1 is now in CISA KEV.
- Published
- 194
- Critical
- 10
- High
- 117
- Medium
- 57
- Low
- 7
- Unrated
- 3
- Now in CISA KEV
- 1
- Fix available
- 39
Most affected products
- Linux
- 22
- Qualcomm Snapdragon
- 13
- Google Android
- 12
- Progress Software WhatsUp Gold
- 6
- rails-html-sanitizer
- 5
- MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- 3
- Astoundify Jobify
- 2
- Snap One OVRC cloud
- 2
- 8bitkid Yahoo! WebPlayer
- 1
- acbaltaci Google Plus Share and +1 Button
- 1
Critical 10
- CVE-2018-9430In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2024-53990AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`sAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2024-10905IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control VulnerabilitySailPoint Technologies IdentityIQ
- CVE-2024-8785WhatsUp Gold Registry Overwrite Remote Code Execution VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-46909WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-52476WordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerabilityStefan Bohacek Fediverse Embeds
- CVE-2024-52724ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php.
- CVE-2024-52732Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused.
- CVE-2024-53477JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java
- CVE-2024-53900Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.mongoose
High 117
- CVE-2018-9431In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation.Google Android
- CVE-2018-9418In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check.Google Android
- CVE-2018-9414In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds cheGoogle Android
- CVE-2018-9413In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2018-9376In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorreGoogle Android
- CVE-2018-9381In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2018-9380In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2024-53992unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video uploadEDM115 unzip-bot
- CVE-2024-49763PlexRipper allows API leak due to open CORS policyPlexRipper
- CVE-2024-50381Missing Authentication for Critical Function in Snap One OVRC cloudSnap One OVRC cloud
- CVE-2024-50380Authentication Bypass by Spoofing in Snap One OVRC cloudSnap One OVRC cloud
- CVE-2024-52596SimpleSAMLphp xml-common XXE vulnerabilitysimplesamlphp xml-common · simplesamlphp/xml-common
- CVE-2024-52806SimpleSAMLphp SAML2 has an XXE in parsing SAML messagessimplesamlphp saml2 · simplesamlphp/saml2 +1
- CVE-2024-53981python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundaryKludex python-multipart · python-multipart
- CVE-2024-46905WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-46906WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-46907WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-46908WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityProgress Software WhatsUp Gold
- CVE-2024-52452WordPress Open edX LMS plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityeduNEXT Open edX LMS
- CVE-2024-52453WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerabilityphotonicgnostic Library Bookshelves
- CVE-2024-52454WordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilitygoqsystem GoQMieruca
- CVE-2024-52455WordPress GoQSmile plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilitygoqsystem GoQSmile
- CVE-2024-52456WordPress Awesome Studio plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerabilitywpoets Awesome Studio
- CVE-2024-52457WordPress Youneeq Recommendations plugin <= 3.0.7 - Reflected Cross Site Scripting (XSS) vulnerabilityYouneeq Recommendations
- CVE-2024-52458WordPress TM Islamic Helper plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityzaymund TM Islamic Helper
- CVE-2024-52459WordPress Chameleoni Jobs plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerabilityChameleoni Jobs
- CVE-2024-52460WordPress AtaraPay WooCommerce Payment Gateway plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerabilityAtaraPay WooCommerce Payment Gateway
- CVE-2024-52461WordPress Infinite Slider plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityKinsta Infinite Slider
- CVE-2024-52462WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityJacob Schwartz WP e-Commerce Style Email
- CVE-2024-52463WordPress Post By Email plugin <= 1.0.4b - Reflected Cross Site Scripting (XSS) vulnerabilityPeter Westwood Post By Email
- CVE-2024-52464WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerabilityanmari amr shortcodes
- CVE-2024-52465WordPress LGPD Framework plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityData443 Risk Mitigation LGPD Framework
- CVE-2024-52466WordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityExplara Events
- CVE-2024-52467WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityAugust Infotech AI Responsive Gallery Album
- CVE-2024-52468WordPress LeadBoxer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityLeadBoxer
- CVE-2024-52469WordPress WooCommerce Price Alert plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityDhrubok Infotech Services WooCommerce Price Alert
- CVE-2024-52477WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerabilitydocxpresso Document & Data Automation
- CVE-2024-52482WordPress Ortto plugin <= 1.0.19 - Reflected Cross Site Scripting (XSS) vulnerabilityrafalautopilot Ortto
- CVE-2024-52483WordPress LeanPress plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityIgor Benic LeanPress
- CVE-2024-52484WordPress Wc Recently viewed products plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilitydeepintowp Wc Recently viewed products
- CVE-2024-53710WordPress ITERAS plugin <= 1.8.0 - CSRF to Stored XSS vulnerabilityITERAS
- CVE-2024-53711WordPress Hotlink2Watermark plugin <= 0.3.2 - CSRF to Stored XSS vulnerabilitytranchesdunet Hotlink2Watermark
- CVE-2024-53712WordPress Kevin's plugin <= 2.0.0 - CSRF to Stored XSS vulnerabilitykevmimcc Kevin's
- CVE-2024-53713WordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerabilityrickota Silverlight Video Player
- CVE-2024-53714WordPress Continue Shopping From Cart plugin <= 1.3 - CSRF to Stored XSS vulnerabilityIrish_Cathal Continue Shopping From Cart
- CVE-2024-53715WordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityThomas Hoefter Simple Travel Map
- CVE-2024-53716WordPress wp auto top plugin <= 2.9.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityovertrue wp auto top
- CVE-2024-53717WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityyonisink yPHPlista
- CVE-2024-53718WordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEric Teubert Multi Feed Reader
- CVE-2024-53719WordPress Zajax – Ajax Navigation plugin <= 0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityonigetoc Zajax – Ajax Navigation
- CVE-2024-53720WordPress WP-ISPConfig 3 plugin <= 1.5.6 - CSRF to Stored XSS vulnerabilityole1986 WP-ISPConfig
- CVE-2024-53722WordPress Favicon My Blog plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityrockemmusic Favicon My Blog
- CVE-2024-53723WordPress Google Plus Share and +1 Button plugin <= 1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityacbaltaci Google Plus Share and +1 Button
- CVE-2024-53724WordPress IceStats plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityronnybull IceStats
- CVE-2024-53725WordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityaMiT Post Hits Counter
- CVE-2024-53726WordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityRealtyCandy.com RealtyCandy IDX Broker Extended
- CVE-2024-53727WordPress LinkLaunder SEO plugin <= 0.92.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityLars Koudal LinkLaunder SEO
- CVE-2024-53728WordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityOliver Lindner Protect Your Content
- CVE-2024-53729WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityplumwd Blizzard Quotes
- CVE-2024-53753WordPress CultBooking Hotel Booking Engine plugin <= 2.1 - CSRF to Stored XSS vulnerabilityCultBooking Hotel Booking Engine
- CVE-2024-53754WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilityIrish_Cathal Out Of Stock Badge
- CVE-2024-53755WordPress Third Party Cookie Eraser plugin <= 1.0.2 - CSRF to Cross Site Scripting (XSS) vulnerabilityAndrea Pernici Third Party Cookie Eraser
- CVE-2024-53759WordPress ArCa Payment Gateway plugin <= 1.3.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityPlanet Studio ArCa Payment Gateway
- CVE-2024-53762WordPress FastBook plugin <= 1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityFasterThemes FastBook
- CVE-2024-53765WordPress Mins To Read plugin <= 1.2.2 - CSRF to Stored XSS vulnerabilityThink201 Mins To Read
- CVE-2024-53769WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerabilitylriaudel Custom Post Type to Map Store
- CVE-2024-53770WordPress RingCentral Communications plugin <= 1.7.0 - CSRF to Stored XSS vulnerabilitypbmacintyre RingCentral Communications
- CVE-2024-53776WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerabilityraphaelheide Donate Me
- CVE-2024-53777WordPress Simple Header and Footer plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityAlberto Reineri Simple Header and Footer
- CVE-2024-53779WordPress Yahoo! WebPlayer plugin <= 2.0.6 - CSRF to Stored XSS vulnerability8bitkid Yahoo! WebPlayer
- CVE-2024-53780WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerabilityrajeevglocify Load More Posts
- CVE-2024-53781WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerabilityhomejunction SpatialMatch IDX
- CVE-2024-53782WordPress Photo Video Store plugin <= 21.07 - CSRF to Cross Site Scripting (XSS) vulnerabilitycmsaccount Photo Video Store
- CVE-2024-53789WordPress Advanced What should we write next about plugin <=1.0.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityRitesh Sanap Advanced What should we write next about
- CVE-2024-53792WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerabilityBob Watu Quiz
- CVE-2024-53793WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerabilityjerodmoore eDoc Easy Tables
- CVE-2024-53124net: fix data-races around sk->sk_forward_allocLinux
- CVE-2024-53122mptcp: cope racing subflow creation in mptcp_rcv_space_adjustLinux
- CVE-2024-53121net/mlx5: fs, lock FTE when checking if activeLinux
- CVE-2024-53120net/mlx5e: CT: Fix null-ptr-deref in add rule err flowLinux
- CVE-2024-53111mm/mremap: fix address wraparound in move_page_tables()Linux
- CVE-2024-53110vp_vdpa: fix id_table array not null terminated errorLinux
- CVE-2024-53109nommu: pass NULL argument to vma_iter_prealloc()Linux
- CVE-2024-53108drm/amd/display: Adjust VSDB parser for replay featureLinux
- CVE-2024-53107fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()Linux
- CVE-2024-53106ima: fix buffer overrun in ima_eventdigest_init_commonLinux
- CVE-2024-53730WordPress April's Call Posts plugin <= 2.1.1 - CSRF to Stored XSS vulnerabilityspringthistle April's Call Posts
- CVE-2024-53740WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWPSwings WooCommerce Ultimate Gift Card
- CVE-2024-12015SQL Injection in WordPress Project Manager PluginWeDevs WP Project Manager
- CVE-2024-43053Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows HostQualcomm Snapdragon
- CVE-2024-43052Improper Input Validation in Video Analytics and ProcessingQualcomm Snapdragon
- CVE-2024-43050Stack-based Buffer Overflow in WLAN Windows HostQualcomm Snapdragon
- CVE-2024-43049Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows HostQualcomm Snapdragon
- CVE-2024-43048Stack-based Buffer Overflow in PerformanceQualcomm Snapdragon
- CVE-2024-33063Integer Overflow or Wraparound in WLAN Host CommunicationQualcomm Snapdragon
- CVE-2024-33056Buffer Over-read in MProcQualcomm Snapdragon
- CVE-2024-33044Improper Validation of Array Index in HypervisorQualcomm Snapdragon
- CVE-2024-10490Authentication bypass flaw in several mapp componentsB&R Industrial Automation B&R mapp Cockpit · B&R Industr… +3
- CVE-2024-53104media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatLinux
- CVE-2024-53103hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointerLinux
- CVE-2024-20138In wlan driver, there is a possible out of bound read due to improper input validation.MediaTek MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT…
- CVE-2024-20137In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions.MediaTek MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
- CVE-2024-20127In Telephony, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2024-20128In Telephony, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2024-20129In Telephony, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2024-29645Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function.
- CVE-2024-31669rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate
- CVE-2024-39343An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123
- CVE-2024-39890An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200,
- CVE-2024-53375An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series.
- CVE-2024-53484Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key.
- CVE-2024-53605Incorrect access control in the component content://com.handcent.messaging.provider.MessageProvider/ of Handcent NextSMS v10.9.9.7 allows at
- CVE-2024-53937An issue was discovered on Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53938An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53939An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53940An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
- CVE-2024-53941An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices.
Medium, low and unrated 67
- CVE-2018-9435In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check.Google Android
- CVE-2018-9429In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data.Google Android
- CVE-2018-9426In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs beingGoogle Android
- CVE-2018-9423In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check.Google Android
- CVE-2024-53985Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0rails-html-sanitizer
- CVE-2024-53987Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0rails-html-sanitizer
- CVE-2024-53986Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0rails-html-sanitizer
- CVE-2024-53988Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0rails-html-sanitizer
- CVE-2024-53989Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0rails-html-sanitizer
- CVE-2024-49581Access control issue impacting RV backed objectscom.palantir.gotham:external-artifacts
- CVE-2024-5890HTML Injection in the Assessment pluginServiceNow Now Platform
- CVE-2024-53259quic-go affected by an ICMP Packet Too Large Injection Attack on Linuxquic-go · github.com/quic-go/quic-go
- CVE-2024-53862Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` modeargoproj argo-workflows · github.com/argoproj/argo-workf… +2
- CVE-2024-53984Nanopb does not release memory on error return when using PB_DECODE_DELIMITEDnanopb
- CVE-2024-38827Spring Security Authorization Bypass for Case Sensitive ComparisonsSpring by VMware Tanzu Spring Security · org.springframewor…
- CVE-2024-51900WordPress What Would Seth Godin Do plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityJames Hunt What Would Seth Godin Do
- CVE-2024-52478WordPress Jobify theme < 4.3.0 - Cross Site Scripting (XSS) vulnerabilityAstoundify Jobify
- CVE-2024-52479WordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityAstoundify Jobify
- CVE-2024-52486WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilitySolverWp Elementor Portfolio Builder
- CVE-2024-52487WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilitywebcodingplace Ultimate Classified Listings
- CVE-2024-52489WordPress Add Chat App Button plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityudidol Add Chat App Button
- CVE-2024-52491WordPress Sticky Social Icons plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilitySanil Shakya Sticky Social Icons
- CVE-2024-52492WordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerabilitygopiplus Image horizontal reel scroll slideshow
- CVE-2024-52493WordPress Meteor Slides plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerabilityJosh Leuze Meteor Slides
- CVE-2024-52494WordPress Dynamic To Top plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerabilityMatt Varone, Tim Berneman Dynamic "To Top"
- CVE-2024-52502WordPress ImbaChat plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerabilityImbaSynergy ImbaChat
- CVE-2024-52503WordPress Tailored Tools plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerabilityTailored Media Tailored Tools
- CVE-2024-53707WordPress Ahmeti Wp Güzel Sözler plugin <= 4.0 - Cross Site Request Forgery (CSRF) vulnerabilityAhmeti Wp Güzel Sözler
- CVE-2024-53708WordPress AI Quiz plugin <= 1.1 - Broken Access Control vulnerabilitykekotron AI Quiz
- CVE-2024-53709WordPress Generic Elements plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityNasir Uddin Generic Elements
- CVE-2024-53721WordPress Advanced Event Manager plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerabilityStachethemes Advanced Event Manager
- CVE-2024-53741WordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerabilityGarrett Grimm Simple Popup
- CVE-2024-53751WordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerabilityhakeemnala Build App Online
- CVE-2024-53761WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityP Roy WP Revisions Manager
- CVE-2024-53775WordPress DancePress (TRWA) plugin <= 3.1.11 - Cross Site Request Forgery (CSRF) vulnerabilitybenmoreassynt DancePress
- CVE-2024-53784WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.0.4 - Broken Access Control vulnerabilityE-goi Smart Marketing SMS and Newsletters Forms
- CVE-2024-53123mptcp: error out earlier on disconnectLinux
- CVE-2024-53119virtio/vsock: Fix accept_queue memory leakLinux
- CVE-2024-53118vsock: Fix sk_error_queue memory leakLinux
- CVE-2024-53117virtio/vsock: Improve MSG_ZEROCOPY error handlingLinux
- CVE-2024-53116drm/panthor: Fix handling of partial GPU mapping of BOsLinux
- CVE-2024-53115drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handleLinux
- CVE-2024-53114x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 clientLinux
- CVE-2024-53113mm: fix NULL pointer dereference in alloc_pages_bulk_noprofLinux
- CVE-2024-53112ocfs2: uncache inode which has failed entering the groupLinux
- CVE-2024-53105mm: page_alloc: move mlocked flag clearance into free_pages_prepare()Linux
- CVE-2024-33053Use After Free in VideoQualcomm Snapdragon
- CVE-2024-33040Use After Free in Camera DriverQualcomm Snapdragon
- CVE-2024-33039Untrusted Pointer Dereference in AudioQualcomm Snapdragon
- CVE-2024-33037Buffer Over-read in Neural Processing UnitQualcomm Snapdragon
- CVE-2024-33036Use of Out-of-range Pointer Offset in Camera DriverQualcomm Snapdragon
- CVE-2024-20139In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions.MediaTek MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT…
- CVE-2024-20116In cmdq, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT…
- CVE-2024-20136In da, there is a possible out of bounds read due to a missing bounds check.MediaTek MT2737, MT6781, MT6789, MT6855, MT6878, MT6879, MT…
- CVE-2024-20135In soundtrigger, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6768, MT6781, MT6833, MT6853, MT6877, MT6878, MT…
- CVE-2024-20134In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6835, MT6878, MT6879, MT6895, MT6896, MT6897, MT…
- CVE-2024-20133In Modem, there is a possible escalation of privilege due to an incorrect bounds check.MediaTek MT6879, MT6886, MT6895, MT6895T, MT6896, MT6980, M…
- CVE-2024-20132In Modem, there is a possible out of bonds write due to a mission bounds check.MediaTek MT2737, MT6298, MT6879, MT6886, MT6895, MT6895T, M…
- CVE-2024-20131In Modem, there is a possible escalation of privilege due to an incorrect bounds check.MediaTek MT2737, MT2739, MT6789, MT6813, MT6815, MT6835, MT…
- CVE-2024-20130In power, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…
- CVE-2024-20125In vdec, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT…
- CVE-2024-11856HPE IceWall Products, Remote Unauthorized Data ModificationHewlett Packard Enterprise HPE IceWall
- CVE-2024-53364A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php.
- CVE-2024-53459Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
- CVE-2024-53564A vulnerability was discovered in FreePBX 17.0.19.17.Sangoma FreePBX
- CVE-2024-53566An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execut
- CVE-2024-53617A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file