CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- loway queuemetricsLoway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 cstecgi.cgi setParentalRules os command injection5.3 Medium
- totolink ac1200 t10, ac1200 t8, ac1200 t10 firmware +3 more +5 moreTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow8.7 High
- gouniverse golang cmsGouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scripting5.3 Medium
- erjemin roll cmserjemin roll_cms views.py information exposure5.1 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System inccatadd.php sql injection5.3 Medium
- opti.marketing opti marketingOpti Marketing <= 2.0.9 - Unauthenticated SQLi9.8 Critical
- themetechmount truebooker, truebooker-appointment-booking +1 moreTrueBooker < 1.0.3 - Settings Update via CSRF4.3 Medium
- themetechmount truebooker, truebooker-appointment-booking +1 moreTrueBooker < 1.0.3 - Multiple Unauthenticated SQLi9.8 Critical
- ngothang wp multitaskingWP MultiTasking <= 0.1.12 - Reflected XSS via Shortcode5.4 Medium
- ngothang wp multitaskingWP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRF4.3 Medium
- ngothang wp multitaskingWP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF4.3 Medium
- ngothang wp multitaskingWP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF4.3 Medium
- ngothang wp multitaskingWP MultiTasking <= 0.1.12 - Settings Update via CSRF4.3 Medium
- code-projects hospital management systemcode-projects Hospital Management System user-login.php sql injection6.9 Medium
- mini mini-tmall, project team tmall demo +1 moreMini-Tmall 1 rewardMapper.select sql injection5.3 Medium
- itsourcecode payroll management system, payroll management system project management system +1 moreitsourcecode Payroll Management System ajax.php sql injection6.9 Medium
- code-projects online shop store, online shop store project shop store +1 morecode-projects Online Shop Store settings.php cross site scripting6.9 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodesters Clinics Patient Management System print_diseases.php sql injection6.9 Medium
- rems php crud, egavilanmedia phpcrud +1 moreSourceCodester PHP CRUD update.php sql injection5.3 Medium
- rems php crud, egavilanmedia phpcrud +1 moreSourceCodester PHP CRUD update.php cross site scripting5.3 Medium
- rems php crudSourceCodester PHP CRUD Add.php cross site scripting5.3 Medium
- rems php crudSourceCodester PHP CRUD Delete Person delete.php sql injection5.3 Medium
- oretnom23 simple invoice generator systemSourceCodester Simple Invoice Generator System save_invoice.php sql injection5.3 Medium
- remyandrade online food menuSourceCodester Online Food Menu delete-menu.php sql injection5.1 Medium
- samsung open source oneA vulnerability that allows an attacker in possession of the Veeam ONE Agent service account...9.1 Critical
- samsung open source oneAn improper access control vulnerability allows low-privileged users to execute code with...7.8 High
- samsung open source oneAn incorrect permission assignment vulnerability allows an attacker to modify product...7.5 High
- samsung open source oneAn improper access control vulnerability allows an attacker with valid access tokens to access...7.5 High
- samsung open source oneA Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML...7.3 High
- samsung open source oneA vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service...9.0 Critical
- nutanix ahv, veeam backup for nutanix ahv, backup for oracle linux virtualization manager and red hat virtualization +2 more +4 moreA server side request forgery vulnerability allows a low-privileged user to perform local...8.8 High
- veeam backup and recovery, backup \& replication +1 moreAn improper certificate validation vulnerability in TLS certificate validation allows an attacker...8.3 High
- veeam backup and recovery, backup \& replication +1 moreA vulnerability that allows a user who has been assigned a low-privileged role within Veeam...7.8 High
- veeam backup and recovery, backup \& replication +1 moreA path traversal vulnerability allows an attacker with a low-privileged account and local access...7.8 High
- veeam backup & replication, backup and recovery, backup \& replication +2 moreA deserialization of untrusted data vulnerability with a malicious payload can allow an...9.8 Critical
- veeam backup and recovery, backup \& replication +1 moreA series of related high-severity vulnerabilities, the most notable enabling remote code...8.8 High
- veeam agent, backup and recovery +1 moreA missing authorization vulnerability allows a local low-privileged user on the machine to...7.8 High
- veeam backup and recovery, backup \& replication +1 moreAn improper input validation vulnerability that allows a low-privileged user to remotely remove...8.1 High
- veeam service provider consoleA code injection vulnerability that allows a low-privileged user with REST API access granted to...8.5 High
- veeam service provider consoleA code injection vulnerability that permits a low-privileged user to upload arbitrary files to...9.9 Critical
- veeam service provider consoleA code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC...8.5 High
- veeam service provider consoleAn authentication bypass vulnerability can allow a low privileged attacker to access the NTLM...9.9 Critical
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System cancel-order.php sql injection5.3 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System congratulations.php redirect6.9 Medium
- ibm mq, mq operator, supplied mq advanced container images +2 moreIBM MQ security bypass7.5 High
- ibm mq, mq operator +1 moreIBM MQ denial of service5.5 Medium
- ibm maximo application suiteIBM Maximo Application Suite information disclosure5.9 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System users.php cross site scripting5.3 Medium
- Show moreLoading…