CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- linux, linux kernel +1 morebtrfs: do not BUG_ON() when freeing tree block after error5.5 Medium
- linux, linux kernel +1 moreBluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Forward soft recovery errors to userspace5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreusb: gadget: core: Check for unset descriptor5.5 Medium
- linux, linux kernel +1 moretracefs: Use generic inode RCU for synchronizing freeing7.8 High
- linux, linux kernel +1 moresched/smt: Fix unbalance sched_smt_present dec/inc5.5 Medium
- linux, linux kernel +1 morexen: privcmd: Switch from mutex to spinlock for irqfds5.5 Medium
- linux, linux kernel +1 moredrm/xe/preempt_fence: enlarge the fence critical section5.5 Medium
- linux, linux kernel +1 moreALSA: line6: Fix racy access to midibuf7.8 High
- linux, linux kernel +1 morescsi: ufs: core: Fix deadlock during RTC update5.5 Medium
- linux, linux kernel +1 moreserial: sc16is7xx: fix TX fifo corruption7.8 High
- linux, linux kernel +1 moreserial: sc16is7xx: fix invalid FIFO access with special register set7.1 High
- linux, linux kernel +1 moreparisc: fix a possible DMA corruption7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86/mtrr: Check if fixed MTRRs exist before saving them5.5 Medium
- yunknet online school system, yunke online school system +1 more云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source2.3 Low
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System ticket-status.php sql injection5.3 Medium
- cern indicoIndico has a Cross-Site-Scripting during account creation4.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System add-ticket.php sql injection5.3 Medium
- itsourcecode insurance management systemSourceCodester Insurance Management System cross-site request forgery6.9 Medium
- cisco expressway-e, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Edge Improper Authorization Vulnerability4.3 Medium
- cisco duo authentication for epicCisco Duo Epic for Hyperdrive Information Disclosure Vulnerability5.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Command Injection Vulnerability6.0 Medium
- cisco smart license utilityA vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker...7.5 High
- cisco smart licensing utility, smart license utility +1 moreA vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker...9.8 Critical
- drupal open socialOpen Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-0385.3 Medium
- drupal open socialOpen Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-0375.4 Medium
- dpgaspar flask-appbuilderFlask-AppBuilder login form allows browser to cache sensitive fields3.6 Low
- ethyca fidesRemote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine9.1 Critical
- ibm webmethods integrationIBM webMethods Integration directory traversal6.5 Medium
- ibm webmethods integrationIBM webMethods Integration privilege escalation8.8 High
- ibm webmethods integrationIBM webMethods Integration code execution9.9 Critical
- ethyca fidesFides Webserver Authentication Timing-Based Username Enumeration Vulnerability5.3 Medium
- drupal paragraphs table, paragraphs table project table +1 moreParagraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-0366.3 Medium
- content entity clone project entity clone, drupal content entity clone +1 moreContent Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-0354.3 Medium
- lif-platforms new-ringer-serverRinger Server Does Not Check Members When Loading Messages7.1 High
- projectdiscovery nucleiNuclei Template Signature Verification Bypass7.4 High
- drupal freelinkingFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-0344.3 Medium
- linuxos shakal-ngLinuxOSsk Shakal-NG views.py redirect5.3 Medium
- rust-lang rustRust OS Command Injection/Argument Injection vulnerability8.2 High
- eclipse vert.xEclipse Vert.x gRPC server does not limit the maximum message size6.9 Medium
- abcd abcd2, abcd-community abcd +1 moreABCD ABCD2 buscar_integrada.php cross site scripting5.1 Medium
- abcd abcd2, abcd-community abcd +1 moreABCD ABCD2 otros_sitios.php path traversal5.3 Medium
- semtek sempos, semtekyazilim semtek sempos +1 moreUnauthenticate SQLi in Semtek Informatics Software's Semtek Sempos9.2 Critical
- abcd abcd2, abcd-community abcd +1 moreABCD ABCD2 show_image.php path traversal5.3 Medium
- semtek informatics software consulting inc. sempos, semtekyazilim semtek sempos +1 moreReflected XSS in Semtek Informatics Software's Semtek Sempos5.3 Medium
- containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service7.5 High
- semtek sempos, semtekyazilim semtek sempos +1 moreSQLi in Semtek Informatics Software's Semtek Sempos9.3 Critical
- linksys wrt54g, wrt54g firmware +1 moreLinksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow5.3 Medium
- alwindoss akademyalwindoss akademy handlers.go cross site scripting5.3 Medium
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +4 more +6 morePuppet-pulpcore: an authentication bypass vulnerability exists in pulpcore9.8 Critical
- Show moreLoading…