CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation9.8 Critical
- huawei emui, harmonyos +1 moreMemory request vulnerability in the memory management module Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the ringtone setting module Impact: Successful...5.1 Medium
- huawei emui, harmonyos +1 morePage table protection configuration vulnerability in the trusted firmware module Impact:...4.1 Medium
- huawei emui, harmonyos +1 moreAccess control vulnerability in the camera framework module Impact: Successful exploitation of...4.4 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the camera driver module Impact: Successful...5.5 Medium
- huawei emui, harmonyos +1 moreVulnerability of resources not being closed or released in the keystore module Impact: Successful...4.0 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the WMS module Impact: Successful exploitation of...5.5 Medium
- fsas technologies inc. ipcom ex2 series, ipcom ve2 series, fujitsu ipcom ex2 dc 3200 firmware +18 more +20 moreObservable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401,...7.5 High
- huawei emui, harmonyos +1 moreDirectory traversal vulnerability in the cust module Impact: Successful exploitation of this...6.1 Medium
- huawei emui, harmonyos +1 moreVulnerability of permission verification for APIs in the DownloadProviderMain module Impact:...5.1 Medium
- huawei emui, harmonyos +1 moreInput verification vulnerability in the system service module Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 moreAccess control vulnerability in the SystemUI module Impact: Successful exploitation of this...4.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the software update module. Impact: Successful exploitation...4.0 Medium
- idec ft1a-b12ra firmware, ft1a-b24ra firmware, ft1a-h12ra firmware +93 more +95 moreCleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an...4.6 Medium
- idec windldr, idec corporation windo/i-nv4, idec windo\/i-nv4 +2 moreCleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If...8.1 High
- virtualmin, webmin +1 moreWebmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP...7.5 High
- haproxyHAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote...7.5 High
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to...5.4 Medium
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to...8.1 High
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to...6.8 Medium
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or...8.1 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.8.0 High
- zzcmsZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The...5.3 Medium
- zzcmsA sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the...6.1 Medium
- zzcmsCross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain...6.1 Medium
- zzcmsCross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain...5.4 Medium
- zzcmsSQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain...8.8 High
- vypor attack api systemAn issue in Vypor Attack API System v.1.0 allows a remote attacker to execute arbitrary code via...9.8 Critical
- d-link di-8400 firmwareD-Link DI-8400 16.07.26A1 is vulnerable to Command Injection via upgrade_filter_asp.9.8 Critical
- wayos fbm-291w firmwareWAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via msp_info_htm.6.8 Medium
ironicDebian,ironic-python-agentDebian,containernetworking-pluginsRed Hat +30 more +32 moreRed Hat Security Advisory: OpenShift Container Platform 4.13.z security update4.3 Medium- crucial mx500 firmwareMicron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which...6.7 Medium
- google chromeUse after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to...8.8 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to...8.8 High
- openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 moreRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 High
actions/download-artifactGitHub Actions@actions/download-artifact has an Arbitrary File Write via artifact extraction8.6 High- authenticatorSecret encryption vulnerable to brute-force attacks8.8 High
- mozilla focus for ios, firefox focus +1 moreWebsites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This...4.7 Medium
github.com/cometbft/cometbftGo,github.com/cometbft/cometbft/lightGo +1 moreCometBFT's state syncing validator from malicious node may lead to a chain split2.3 Lowpimcore/admin-ui-classic-bundlePackagist,pimcore/data-importerPackagist,pimcore/pimcorePackagist +2 morePimcore includes vulnerable PHPOffice/PhpSpreadsheet8.7 High- redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 moreKeycloak: potential bypass of brute force protection6.5 Medium
- tinacms, ssw tinacms\/cli +1 moreTina search token leak via lock file in TinaCMS7.5 High
- blakeembrey template, js-template +1 more@blakeembrey/template vulnerable to code injection when attacker controls template input7.3 High
- cloudcannon pagefindPagefind DOM clobbering could escalate to Cross-site Scripting (XSS)6.4 Medium
- linuxfoundation runcrunc can be confused to create empty files/directories on the host3.6 Low
- onesoft-sudo sudobotSudoBot missing authorization check in `-config` command8.8 High
- metal3-io baremetal-operatorBMO can expose particularly named secrets from other namespaces via BMH CRD4.9 Medium
- xibosignage xibo, xibo-cms +1 moreXibo CMS XSS vulnerability using DataSet HTML columns3.5 Low
- xibosignage xibo, xibo-cms +1 moreXibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS4.6 Medium
- Show moreLoading…