CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- pixelgrade nova blocks by pixelgrade, nova blocks +1 moreNova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute6.4 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A...2.3 Low
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A...6.7 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control...6.7 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to...7.3 High
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky...8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +63 more +65 morePhoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices8.1 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices8.8 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices8.8 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices.8.8 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices8.8 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: OS command execution in MGUARD products8.8 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products5.7 Medium
- logitech options plus, logi options\+ +1 moreInsecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS2.0 Low
- dell 7920 xl firmware, precision rack bios, precision 7920 firmware +2 moreDell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory...3.8 Low
- dell 7920 xl rack firmware, precision rack bios, precision 7920 rack firmware +2 moreDell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input...5.3 Medium
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.5.3 Medium
- endress echo curve viewer, field xpert smt50 firmware, field xpert smt70 firmware +12 more +14 moreEndress+Hauser: Multiple products are vulnerable to code injection9.8 Critical
- dell wyse proprietary os (modern thinos), wyse proprietary os, wyse thinos +2 moreDell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used...7.6 High
- peepso, peepso community by peepso – download from peepso.com +1 moreCommunity by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter4.4 Medium
- peepso, peepso community by peepso – download from peepso.com +1 moreCommunity by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- buffalo inc. wex-1166dhp, wex-1166dhp2, wex-1166dhps +33 more +35 moreOS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN...5.7 Medium
- squirrly starboxStarbox < 3.5.2 - Admin+ Stored XSS4.8 Medium
- christoph nagel floating contact buttonFloating Contact Button < 2.8 - Admin+ Stored XSS4.8 Medium
- axis osDuring internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...6.1 Medium
- axis os, os 2024 +1 moreAmin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which...6.8 Medium
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API...6.5 Medium
node-gettextnpmnode-gettext vulnerable to Prototype Pollution5.9 Medium- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform5.4 Medium
- axis communications ab osMarinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi...6.5 Medium
- sap se student life cycle management (slcm)Missing authorization check in SAP Student Life Cycle Management (SLcM)2.4 Low
- axis communications ab osMarinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi...4.3 Medium
- sap se netweaver as for java (destination service)Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)6.0 Medium
- alps system integration co., ltd. intersafe cats, intersafe gatewayconnection, intersafe logdirector +11 more +13 moreCross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and...6.5 Medium
- sap businessobjects business intelligence platform, business objects business intelligence platform +1 moreDLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform5.8 Medium
- sap se netweaver as java (logon application)Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)4.8 Medium
- sap se netweaver application server for abap (crm blueprint application builder panel)Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel)6.1 Medium
- sap se s/4 hana (statutory reports)Information Disclosure in SAP S/4 HANA (Statutory Reports)4.3 Medium
- sap se netweaver enterprise portalCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal4.7 Medium
- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform5.4 Medium
- sap se for oil & gas, sap oil \%\/ gas +1 moreMissing Authorization check in SAP for Oil & Gas (Transportation and Distribution)4.3 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform2.7 Low
- sap se production and revenue accounting (tobin interface)Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)6.5 Medium
- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- sap se netweaver application server for abap and abap platformMultiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform2.0 Low
- Show moreLoading…