CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- limesurveyA CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code...4.8 Medium
- clickhouseClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB:...7.5 High
- yugabyte yugabytedbYugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.7.5 High
- pingcap tidbPingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column)...4.3 Medium
- pingcap tidbPingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression...9.8 Critical
- vivavis high-leitHIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain...7.8 High
- bpl pws-01-btBPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in...5.1 Medium
- visual planning admin centerInsufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow...8.8 High
- nt-ware uniflow online, uniflow online print \& scan, uniflow smartclient +2 moreuniFLOW Online device registration susceptible to compromise8.3 High
- linux, linux kernel +1 morefuse: Initialize beyond-EOF page contents before setting uptodate5.5 Medium
- overleafInsecure default setting for Server Pro installed via Overleaf toolkit5.4 Medium
- overleafArbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf5.3 Medium
- hedgedocMySQL & free URL mode allows to hide existing notes in hedgedoc6.5 Medium
- vimheap-buffer-overflow in Vim4.5 Medium
- jellyfinPrivilege escalation to admin from a low-privileged user via SVG upload in Jellyfin4.6 Medium
- advplyr audiobookshelfPath Traversal in audiobookshelf6.3 Medium
- haloHalo's editor has a stored Cross-Site Scripting vulnerability6.3 Medium
- actions toolkit, github actions\/artifact, actions toolkit +2 moreArbitrary File Write via artifact extraction in actions/artifact7.3 High
- elabftwStored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftw8.9 High
- hoverflyArbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)7.5 High
- nescalante urlregexnescalante urlregex Backtracking index.js redos5.3 Medium
- secure systems engineering connaisseurSecure Systems Engineering Connaisseur Delegation Name targets_schema.json redos2.1 Low
- nac nacpremiumCleartext Username and Password in NAC Telecommunication's NACPremium8.7 High
- nac nacpremiumStored XSS in NAC Telecommunication's NACPremium4.8 Medium
- nac nacpremiumSQLi in NAC Telecommunication's NACPremium9.3 Critical
olm-syscrates.ioolm-sys: wrapped library unmaintained, potentially vulnerableNo score- quinn-rs quinnDenial of service in quinn-proto when using `Endpoint::retry()`7.5 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia, dassault 3dswymer 3dexperience 2022 +2 more +4 moreStored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 moreStored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x8.7 High
- 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2023 +1 more +3 moreStored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x8.7 High
- 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 moreStored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x8.7 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +189 more +191 moreUse After Free in DSP Services7.8 High
- qualcomm ar8035 firmware, c-v2x 9150 firmware, fastconnect 7800 firmware +38 more +40 moreUse After Free in Qualcomm IPC7.8 High
- qualcomm 315 5g iot firmware, 315 5g iot modem firmware, 9206 lte firmware +343 more +345 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +23 more +25 moreBuffer Over-read in Display8.4 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +331 more +333 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storage6.8 Medium
- qualcomm fastconnect 7800 firmware, qam8255p firmware, qam8650p firmware +46 more +48 moreUse After Free in SCE-Mink8.4 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +177 more +179 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +230 more +232 moreImproper Input Validation in Trusted Execution Environment7.1 High
- qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +159 more +161 moreBuffer Over-read in Multi Mode Call Processor8.2 High
- qualcomm 205 mobile platform firmware, apq8017 firmware, apq8037 firmware +51 more +53 moreBuffer Over-read in Multi Mode Call Processor7.5 High
- checkmkCross-site scripting in Robotmk logs view2.3 Low
- project caruso flaming formsFlaming Forms <= 1.0.1 - Reflected XSS6.1 Medium
- project caruso flaming formsFlaming Forms <= 1.0.1 - Unauthenticated Stored XSS6.1 Medium
- digireturn dn popup, dn-popup +1 moreDN Popup <= 1.2.2 - Settings Update via CSRF4.3 Medium
- ninjaforms ninja formsNinja Forms 3.8.6-3.8.10 - Reflected XSS6.1 Medium
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection8.7 High
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection8.7 High
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection8.7 High
- easytest online test platform, huachu digital technology ltd. easytest online test platform, huaju easytest online learning test platform +2 moreHuachu Easytest Online Learning Test Platform - SQL Injection9.3 Critical
- Show moreLoading…