CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- body-parserbody-parser vulnerable to denial of service when url encoding is enabled7.5 High
- nixos nixNix affected by unsafe NAR unpacking9.1 Critical
- yeti-platform yetiYeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack5.3 Medium
- lizardbyte sunshineSunshine has incorrect state management during pairing process may lead to incorrectly authorized client6.5 Medium
- codesys oscat basic libraryOut-of-bounds read in OSCAT-Library4.4 Medium
- cvat computer vision annotation tool, cvat-ai cvat +1 moreComputer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries6.4 Medium
- bareosBareos's negative command ACLs can be circumvented by abbreviating commands8.8 High
- citrix workspace, dell wyse proprietary os (modern thinos) +1 moreCitrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization...6.1 Medium
- expressjs serve-staticserve-static affected by template injection that can lead to XSS5.0 Medium
- pillarjs sendsend vulnerable to template injection that can lead to XSS5.0 Medium
- fortinet forticlient, forticlientlinux, forticlientmac +2 more +4 moreAAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7...6.4 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...5.5 Medium
- fortinet forticlient, forticlientandroid, forticlientios +3 more +5 moreAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions...4.6 Medium
- fortinet fortiadcAn improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web...3.4 Low
- fortinet forticlient, forticlientios +1 moreA cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting...3.9 Low
- fortinet forticlientems, forticlient endpoint management server, forticlient enterprise management server +2 moreAn improper neutralization of special elements used in a command ('Command Injection')...6.9 Medium
- fortinet fortisandboxAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSandbox version 4...4.2 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer...4.7 Medium
- fortinet fortiedr manager, fortiedrmanager +1 moreAn improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6...4.6 Medium
- @clerk expressexpress vulnerable to XSS via response.redirect()5.0 Medium
- ibm openpages, openpages grc platform, openpages with watson +2 moreIBM OpenPages information disclosure4.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may access non-initialized region of memory leading to unexpected behaviour5.0 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure5.3 Medium
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element5.4 Medium
- bitapps file manager, bitpressadmin bit file manager wordpress +1 moreBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- samsung open source escargotHeap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows...6.9 Medium
- wiresharkAccess of Uninitialized Pointer in Wireshark5.5 Medium
- siemens industrial edge management pro, industrial edge management virtual +1 moreA vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5),...10.0 Critical
- siemens automation license manager v5, automation license manager v6.0, automation license manager v6.2 +1 more +3 moreA vulnerability has been identified in Automation License Manager V5 (All versions), Automation...9.2 Critical
- siemens sinumerik 828d v4, sinumerik 840d sl v4, sinumerik one +2 moreA vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK...6.8 Medium
- siemens simatic s7-200 smart cpu cr40, simatic s7-200 smart cpu cr60, simatic s7-200 smart cpu sr20 +7 more +9 moreA vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All...8.7 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2)....5.3 Medium
- siemens sinema remote connect clientA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)....4.8 Medium
- siemens sinumerik 828d v4, sinumerik 828d v5, sinumerik 840d sl v4 +4 more +6 moreA vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All...9.3 Critical
- siemens tecnomatix plant simulation v2302, tecnomatix plant simulation v2404, tecnomatix plant simulation +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...2.1 Low
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...5.3 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...6.9 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...5.9 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...6.0 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...7.0 High
- siemens simatic batch v9.1, simatic information server 2020, simatic information server 2022 +10 more +12 moreA vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information...9.4 Critical
- siemens opcenter quality, opcenter rdnl, simatic pcs neo v4.0 +11 more +13 moreA vulnerability has been identified in SIMATIC Information Server 2022 (All versions), SIMATIC...9.3 Critical
- siemens sinema remote connect clientA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)....5.3 Medium
- siemens mendix, mendix runtime v10, mendix runtime v10.12 +3 more +5 moreA vulnerability has been identified in Mendix Runtime V10 (All versions < V10.14.0 only if the...6.9 Medium
- siemens simatic cp 1242-7 v2 (incl. siplus variants), simatic cp 1243-1 (incl. siplus variants), simatic cp 1243-1 dnp3 (incl. siplus variants) +9 more +11 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions...8.2 High
- siemens simatic cp 1242-7 v2 (incl. siplus variants), simatic cp 1243-1 (incl. siplus variants), simatic cp 1243-1 dnp3 (incl. siplus variants) +9 more +11 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions...5.9 Medium
- siemens simatic cp 1242-7 v2 (incl. siplus variants), simatic cp 1243-1 (incl. siplus variants), simatic cp 1243-1 dnp3 (incl. siplus variants) +9 more +11 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions...8.2 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'4.3 Medium
- artembovkun slider comparison image before and afterSlider comparison image before and after <= 0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…