CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- sap se business warehouse (bex analyzer)Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)4.3 Medium
- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- sap se s/4hana eprocurementCross-Site Scripting (XSS) in eProcurement on S/4HANA6.1 Medium
- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform5.4 Medium
- sap se netweaver bw (bex analyzer)Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)4.3 Medium
- ifeelweb affiliate super assistentAffiliate Super Assistent <= 1.5.3 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- buffercode frontend dashboardFrontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call8.8 High
- zyxel nas326 firmware, nas542 firmware +1 more**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of...9.8 Critical
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 moreAn insufficient entropy vulnerability caused by the improper use of a randomness function with...5.3 Medium
- jeecg jimureportAn issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to...9.8 Critical
- mozilo mozilocmsA reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to...6.1 Medium
- mozilo mozilocmsAn arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows...7.2 High
- phpokphpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component ...7.5 High
- hathway skyworth cm5100-511 firmware, skyworthdigital cm5100 firmware +1 moreAn issue in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to...4.6 Medium
- eladmineladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an...9.8 Critical
- eladmineladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to...4.8 Medium
- shenzhen haichangxing technology hcx h822 firmwareShenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15...8.0 High
- renwoxing intelligent management systemRenwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL...9.1 Critical
- officeweb365Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7...7.5 High
- gibbon core, gibbonedu gibbon +1 morecross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute...6.1 Medium
- samsung mobile exynos, samsung exynos 1480 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu...7.8 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Semiconductor Mobile Processor, Automotive Processor, and...5.9 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Semiconductor Mobile Processor, Automotive Processor, and...5.9 Medium
- loftware spectrumLoftware Spectrum through 4.6 has unprotected JMX Registry.9.8 Critical
- loftware spectrumLoftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.8.8 High
- loftware spectrumLoftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.7.5 High
- loftware spectrumLoftware Spectrum before 4.6 HF14 uses a Hard-coded Password.9.8 Critical
- loftware spectrumLoftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.8.8 High
- loftware spectrumLoftware Spectrum before 5.1 allows SSRF.8.8 High
- loftware spectrumLoftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.9.8 Critical
- loftware spectrumLoftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.9.8 Critical
- tenda ac15 firmwareCommand Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows...9.8 Critical
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System ssms.php sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System New Tenant Page index.php cross site scripting5.3 Medium
- baxter connex health portalVulnerability in Baxter Connex Health Portal8.2 High
- baxter connex health portalVulnerability in Baxter Connex Health Portal10.0 Critical
- hp hp-ux, hewlett packard enterprise (hpe) hpe hp-ux oncplus +1 moreHPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System ...9.3 Critical
- path-to-regexppath-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters7.5 High
- path-to-regexppath-to-regexp outputs backtracking regular expressions7.5 High
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +8 more +10 moreWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters7.1 High
- red hat build of keycloak, build of keycloak 24 +1 moreKeycloak-core: one time passcode (otp) is valid longer than expiration timeseverity4.8 Medium
- redhat keycloak, red hat build of keycloak, build of keycloak 24 +2 moreKeycloak-core: open redirect on account page6.1 Medium
- symfony twigTwig has a possible sandbox bypass8.6 High
nategood/httpfulPackagistHttpful is Missing Certificate Validation6.9 Medium- pyload-ng project pyload-ngpyload-ng vulnerable to RCE with js2py sandbox escape9.8 Critical
- craftcms cms, craft cms +1 moreCraft CMS stored XSS in breadcrumb list and title fields5.5 Medium
- code-projects inventory managementcode-projects Inventory Management Registration Form registration.php cross site scripting6.9 Medium
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting6.9 Medium
- rapid7 insight platformRapid7 Insight Platform Unauthorized Empty Group Creation2.4 Low
- external-secrets, external-secrets external secrets operator +1 moreExternal Secrets Operator vulnerable to privilege escalation8.3 High
- Show moreLoading…