CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection9.3 Critical
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection8.7 High
- openatom openharmonyLiteos-A has an use after free vulnerability8.8 High
- openatom openharmonyLiteos-A has an use after free vulnerability8.8 High
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability8.4 High
- openatom openharmonyNet Manager has an out-of-bounds read permission bypass vulnerability6.5 Medium
- openatom openharmonyBackground Task Manager has an out-of-bounds read permission bypass vulnerability5.5 Medium
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability8.4 High
- openatom openharmonyAbility Runtime has an out-of-bounds read permission bypass vulnerability5.5 Medium
- openatom openharmonyLiteos-A has an integer overflow vulnerability3.3 Low
- google android, linuxfoundation yocto, mediatek mt6835 +13 more +15 moreIn wlan, there is a possible denial of service due to incorrect error handling. This could lead...7.5 High
- google android, mediatek, inc. mt6765, mt6768, mt6781, mt6833, mt6835, mt6855, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6983, mt6985, mt6989, mt8321, mt8755, mt8765, mt8766, mt8768, mt8775, mt8781, mt8786, mt8788, mt8792, mt8796 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, mediatek mt6765, mt6768 +11 more +13 moreIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek mt6765, mt6768 +11 more +13 moreIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 moreIn power, there is a possible out of bounds read due to a missing bounds check. This could lead...4.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 moreIn power, there is a possible out of bounds read due to a missing bounds check. This could lead...4.4 Medium
- hashicorp vault, vault enterprise +1 moreVault Leaks AppRole Client Tokens And Accessor in Audit Log6.2 Medium
- d-link dap-2310 firmwareD-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers to execute arbitrary code...9.8 Critical
- asisASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php...9.8 Critical
- rocket.chatThe Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an...5.4 Medium
- codeastro membership management systemCodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php...5.4 Medium
- redcapREDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead...6.1 Medium
- majeedraza carousel sliderWordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery...4.3 Medium
- majeedraza carousel sliderWordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery...4.3 Medium
- grocy project grocyGrocy SVG File Upload recipepictures cross site scripting5.3 Medium
instantcrates.io`instant` is unmaintainedNo scoreproc-macro-errorcrates.ioproc-macro-error is unmaintainedNo score- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification4.2 Medium
- code-projects hospital management systemcode-projects Hospital Management System Login index.php sql injection6.9 Medium
- hm courts & tribunals service probate back officeHM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection5.1 Medium
- linenLinen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting...9.8 Critical
- mispIn MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access...6.5 Medium
- htmldocHTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an...9.8 Critical
- google androidthere is a possible arbitrary read due to an insecure default value. This could lead to local...4.4 Medium
- google androidIn ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic...7.8 High
- google androidIn ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper...7.8 High
- google androidIn ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic...7.8 High
- google androidIn TBD of TBD, there is a possible LCS signing enforcement missing due to test/debugging code...7.8 High
- google androidIn scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper...7.8 High
- google androidIn getRegistration of RemoteProvisioningService.java, there is a possible way to permanently...5.5 Medium
- google androidIn getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to...7.8 High
- google androidIn addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable...7.8 High
- google androidIn handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to...5.5 Medium
- google androidIn bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to...7.8 High
- google androidIn multiple locations, there is a possible permission bypass due to a confused deputy. This could...7.8 High
- google androidIn onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app...7.8 High
- google androidIn wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for...7.8 High
- google android, unisoc t820, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +2 moreIn UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This...8.3 High
- google android, unisoc t820, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +2 moreIn UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This...8.3 High
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- Show moreLoading…