CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- ivanti endpoint managerWeak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September...4.3 Medium
- ivanti endpoint managerMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...5.8 Medium
- ivanti automation, endpoint manager +1 moreMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...5.3 Medium
- ivanti endpoint managerSQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September...7.8 High
- ivanti workspace controlDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...8.8 High
- ivanti workspace control, automation +1 moreInsufficient server-side controls in the management console of Ivanti Workspace Control version...8.8 High
- ivanti workspace control, automation +1 moreCleartext transmission of sensitive information in the management console of Ivanti Workspace...8.2 High
- ivanti workspace control, automation +1 moreAn incorrectly implemented authentication scheme that is subjected to a spoofing attack in the...8.8 High
- ivanti workspace control, automation +1 moreDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...8.8 High
- ivanti workspace controlAn authentication bypass weakness in the message broker service of Ivanti Workspace Control...7.8 High
- ivanti cloud services appliance, csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518...7.2 High
- ininet solutions gmbh spidercontrol scada web server, spidercontrol scada webserver +1 moreiniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type8.7 High
- mercury mnvr816, mercurycom mnvr816 firmware +1 moreMercury MNVR816 web-static file access6.9 Medium
- vicidialVICIdial Authenticated Remote Code Execution8.8 High
- vicidialVICIdial Unauthenticated SQL Injection9.8 Critical
- omniauth saml, onelogin ruby-saml, gitlab +1 more +3 moreThe Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector10.0 Critical
- directusDirectus's session is cached for OpenID and OAuth2 if `redirect` is not used7.4 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +4 more +6 moreWindows libarchive Remote Code Execution Vulnerability7.3 High
- microsoft azure web appsAzure Web Apps Elevation of Privilege Vulnerability8.4 High
- microsoft windows 10 version 1507, windows 10 1507 +1 moreMicrosoft Windows Update Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +15 more +17 moreWindows Mark of the Web Security Feature Bypass Vulnerability6.5 Medium
- microsoft power automate, power automate for desktop +1 moreMicrosoft Power Automate Desktop Remote Code Execution Vulnerability8.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Security Zone Mapping Security Feature Bypass Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability7.6 High
- microsoft windows server 2008 service pack 2, windows server 2008 service pack 2, windows server 2008 service pack 2 (server core installation) +1 more +3 moreMicrosoft Windows Admin Center Information Disclosure Vulnerability7.3 High
- microsoft azure network watcher vm extension, azure network watcher agent +1 moreAzure Network Watcher VM Agent Elevation of Privilege Vulnerability7.3 High
- microsoft azure cyclecloud, azure cyclecloud 8.0.0, azure cyclecloud 8.0.1 +12 more +14 moreAzure CycleCloud Remote Code Execution Vulnerability8.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Denial of Service Vulnerability6.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows MSHTML Platform Spoofing Vulnerability8.8 High
- microsoft windows 10 version 1607, windows server 2016, windows server 2016 (server core installation) +1 more +3 moreWindows Networking Information Disclosure Vulnerability7.7 High
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreWindows Setup and Deployment Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Remote Desktop Licensing Service Spoofing Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Remote Desktop Licensing Service Remote Code Execution Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Network Address Translation (NAT) Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows TCP/IP Remote Code Execution Vulnerability8.1 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Remote Desktop Licensing Service Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows TCP/IP Remote Code Execution Vulnerability8.1 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2012 +11 more +13 moreWindows Remote Desktop Licensing Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +9 more +11 moreMicrosoft Management Console Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Remote Desktop Licensing Service Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreMicrosoft AllJoyn API Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +13 more +15 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +13 more +15 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Kerberos Elevation of Privilege Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…