CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- phpgurukul job portalSQL injection vulnerability in Job Portal6.3 Medium
- windmill-labs windmillWindmill HTTP Request users.rs excessive authentication6.3 Medium
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalSQL injection vulnerability in Job Portal9.8 Critical
- phpgurukul job portalFile upload restriction bypass vulnerability in Job Portal9.9 Critical
- d-link dns-320, dlink dns-320 firmware +1 moreD-Link DNS-320 Web Management Interface discovery.cgi information disclosure6.9 Medium
- d-link dns-320, dlink dns-320 firmware +1 moreD-Link DNS-320 Web Management Interface widget_api.cgi information disclosure6.3 Medium
- dfinity canister developer kit for the internet computer, internet computer ic-cdk +1 moreMemory leak when calling a canister method via `ic_cdk::call`7.5 High
- creativform geo controllerGeo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution5.3 Medium
- msoftplugins security, antivirus, firewall – s.a.f, security antivirus firewall +1 moreSecurity, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass5.3 Medium
- creativform geo controllerGeo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion4.3 Medium
- kanev cab fare calculatorCab fare calculator <= 1.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- helloassoHelloAsso <= 1.1.10 - Missing Authorization to Authenticated (Contributor+) Limited Options Update4.3 Medium
- trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 moreThis vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs...6.3 Medium
- trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 moreThis vulnerability allows unauthenticated remote attackers to bypass authentication and gain...6.5 Medium
- ankitpokhrel dynamic featured imageDynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter6.4 Medium
- filipe-mateus-do-nascimento rd stationRD Station <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ameliabooking booking for appointments and events calendar – amelia, tmsproducts amelia, amelia booking for appointments and events calendar – amelia pro +2 moreBooking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure6.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-24186: Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability5.5 Medium
- mihail-barinov share this imageShare This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode6.4 Medium
- wpvibes form vibes – database manager for forms, form vibes +1 moreForm Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions5.4 Medium
- ivorysearch ivory search, vinod-dalvi ivory search – wordpress search plugin +1 moreIvory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form5.3 Medium
- smartsearchwp chatbot with chatgpt wordpress, webdigit chatbot with chatgpt +1 moreSmartSearchWP <= 2.4.4 - Unauthenticated Log Purge5.3 Medium
- freebsdumtx Kernel panic or Use-After-Free10.0 Critical
- freebsdbhyve(8) privileged guest escape via USB controller8.2 High
- freebsdMultiple issues in ctl(4) CAM Target Layer8.8 High
- freebsdMultiple issues in ctl(4) CAM Target Layer8.8 High
- freebsdMultiple issues in ctl(4) CAM Target Layer8.8 High
- freebsdMultiple issues in ctl(4) CAM Target Layer8.8 High
- freebsdbhyve(8) privileged guest escape via TPM device passthrough8.4 High
- freebsdMultiple vulnerabilities in libnv8.4 High
- freebsdMultiple vulnerabilities in libnv7.5 High
- bitapps file manager, bitpressadmin bit file manager – 100% free & open source file manager and code editor for wordpress +1 moreBit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition8.1 High
- identityautomation rapididentity, rapididentity lts, rapididentity cloud +2 moreRapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive...5.9 Medium
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user...7.1 High
- c-mor video surveillanceAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input...6.1 Medium
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is...8.8 High
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege...8.8 High
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user...8.8 High
- trustedfirmware mbed tlsAn issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables...9.8 Critical
- mbed mbedtls, trustedfirmware mbed tls +1 moreAn issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in...9.8 Critical
- angeljudesuarez event management systemSourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full...6.1 Medium
- angeljudesuarez event management systemSourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter ...9.8 Critical
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via...8.8 High
- esafenet cdgSQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute...9.1 Critical
- Show moreLoading…