CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- joplin project joplinJoplin has a parsing error leading to Cross-site Scripting (XSS)9.7 Critical
- profelis passboxImproper Authentication in Profelis Informatics and Consulting's PassBOX7.1 High
- checkmkImproper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'6.3 Medium
- techexcel back office software, techexcel inc. back office +1 moreImproper Access Control Vulnerability in TechExcel Back Office Software8.7 High
- elastic kibanaA deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to...9.9 Critical
- istyle inc. "@cosme" app for android, "@cosme" app for ios, istyle \@cosme +2 moreImproper authorization in handler for custom URL scheme issue in "@cosme" App for Android...4.3 Medium
- pocket widget wordpress plugin widget wordpress plugin, ronvalstar pocket widget +1 morePocket Widget <= 0.1.3 - Admin+ Stored XSS4.8 Medium
- snapshot backup project backup, unknown snapshot backup, versluis snapshot-backup +2 moreSnapshot Backup <= 2.1.1 - Stored XSS via CSRF4.3 Medium
- azindex project azindex, azindex wordpress plugin wordpress plugin +1 moreAZIndex <= 0.8.1 - Index Deletion via CSRF6.5 Medium
- azindex project azindex, azindex wordpress plugin wordpress plugin +1 moreAZIndex <= 0.8.1 - Stored XSS via CSRF4.3 Medium
- ashanjay eventon, eventon wordpress plugin wordpress plugin +1 moreEventON < 2.2.17 - Admin+ Stored XSS4.8 Medium
- code-atlantic popup maker, popup maker maker, wp +2 morePopup Maker < 1.19.1 - Admin+ Stored XSS4.8 Medium
- incsub forminatorCross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this...6.1 Medium
- uniong webitrUniong WebITR - Open Redirect6.1 Medium
- learning digital orca hcmLEARNING DIGITAL Orca HCM - Arbitrary File Download6.5 Medium
- learning digital orca hcmLEARNING DIGITAL Orca HCM - Missing Authentication9.8 Critical
- thinkphpThinkPHP deserialization vulnerability9.8 Critical
- qualitor, qualitor qalitor +1 moreQualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in...9.8 Critical
- autocmsAutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at...7.2 High
- autocmsAutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url...7.2 High
- seacmsSeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at ...9.8 Critical
- seacmsSeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe...7.5 High
- d-link di-8300, dlink di-8300 firmware +1 moreD-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.9.8 Critical
- d-link di-8300, dlink di-8300 firmware +1 moreD-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.9.8 Critical
- dlink di-8100 firmwareD-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.7.5 High
- dlink di-7003g firmware, di-7003gv2 firmware, di-7100g\+v2 firmware +4 more +6 moreD-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04...8.8 High
- dlink di-7003g firmware, di-7003gv2 firmware, di-7100g\+v2 firmware +4 more +6 moreD-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04...8.8 High
- dlink di-7003gv2 firmware, di-7100g\+v2 firmware, di-7100gv2 firmware +3 more +5 moreD-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04...8.8 High
- onlyoffice docs, onlyoffice +1 moreONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro....6.1 Medium
- ellevoAn issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api...6.3 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos...6.7 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos Mobile Processor, Wearable Processor...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos Wearable Processor Exynos 980, Exynos...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080,...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +6 more +8 moreAn issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos...4.4 Medium
- alinto sogoCross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to...6.1 Medium
- onlyoffice docs, document server +1 moreONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function...6.1 Medium
- oretnom23 online bank management system, sourcecodester online bank management system - +1 moreSourceCodester Online Bank Management System Feedback mfeedback.php cross site scripting5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System index.php cross site scripting5.3 Medium
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 shadow.sample hard-coded password9.2 Critical
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow8.7 High
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow8.7 High
- totolink ac1200 t10, ac1200 t8, ac1200 t10 firmware +3 more +5 moreTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow8.7 High
- totolink ac1200 t10, ac1200 t8, ac1200 t10 firmware +3 more +5 moreTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow8.7 High
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 cstecgi.cgi setWiFiScheduleCfg buffer overflow8.7 High
anstreamcrates.ioUnsoundness in anstreamNo score- loway queuemetricsLoway - CWE-204: Observable Response Discrepancy5.3 Medium
- loway queuemetricsLoway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4.3 Medium
- Show moreLoading…