CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +3 more +5 morePuppet-foreman: an authentication bypass vulnerability exists in foreman9.8 Critical
- overwolfLocal privilege escalation in Overwolf7.8 High
strasoncrates.iostrason is unmaintainedNo scorebcccrates.iobcc is unmaintainedNo scorehwloccrates.iohwloc is unmaintainedNo score- raspcontrolCross Site Scripting (XSS) in Raspcontrol5.4 Medium
- multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 moreMultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover9.8 Critical
- pixelyoursite, pixelyoursite – your smart pixel (tag) & api manager, pro +1 more +3 morePixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion6.5 Medium
- apache ofbizApache OFBiz: Confused controller-view authorization logic (forced browsing)7.5 High
- apache ofbizApache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE9.8 Critical
- skadev attributes for blocksAttributes for Blocks <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributesForBlocks Parameter6.4 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change5.4 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference5.4 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update8.8 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page6.1 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure6.5 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download8.8 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option6.1 Medium
- automattic sensei lmsSensei LMS < 4.24.2 - Unauthenticated Email Template Leak5.3 Medium
- unknown viral signup, wow-company viral-signup +1 moreViral Signup <= 2.1 - Unauthenticated SQLi9.8 Critical
- ays-pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS4.8 Medium
- ays-pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS4.8 Medium
- mansurahamed chatbot support ai, unknown chatbot support ai: free chatgpt chatbot, woocommerce chatbot +1 moreChatbot Support AI <= 1.0.2 - Admin+ Stored XSS4.8 Medium
- fetch designs sign-up sheetsSign-up Sheets < 2.2.13 - Reflected XSS6.1 Medium
- samsung assistantImproper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7...4.3 Medium
- samsung notesHeap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers...7.3 High
- samsung group sharingExposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote...7.5 High
- samsung notesOut-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.4.0 Medium
- samsung notesStack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote...8.6 High
- samsung notesPath traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute...7.3 High
- samsung android, samsung mobile devices +1 moreIncorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1...6.2 Medium
- samsung android, samsung mobile devices +1 moreImproper Export of android application component in My Files prior to SMR Sep-2024 Release 1...6.2 Medium
- samsung android, samsung mobile devices +1 morePath Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access...4.6 Medium
- samsung android, samsung mobile devices +1 moreIncorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to...6.2 Medium
- samsung android, samsung mobile devices +1 moreIncorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1...2.4 Low
- samsung android, samsung mobile devices +1 moreImproper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1...5.1 Medium
- samsung android, samsung mobile devices +1 moreIncorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local...6.6 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in key input related function in Dressroom prior to SMR Sep-2024 Release...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers...4.6 Medium
- samsung android, samsung mobile devices +1 moreImproper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows...3.3 Low
- samsung android, samsung mobile devices +1 moreImproper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows...4.6 Medium
- samsung android, samsung mobile devices +1 moreImproper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12,...6.2 Medium
- blockspare, blockspare — news, magazine and blog addons for (gutenberg) block editor +1 moreGutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…