CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
aws-sam-cliPyPISensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs5.7 Mediumsagemaker-trainingPyPIAWS SageMaker Training Toolkit logs CodeArtifact Authorization token5.6 Medium- surrealdbSurrealDB before 1.5.5 Query Injection via RPC API8.7 High
- tduckcloud tduckproTDuckCloud TDuckPro password recovery6.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect Portal5.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows Administrator Can Disable the Agent5.6 Medium
- palo alto networks activemq content packActiveMQ Content Pack: Cleartext Exposure of Credentials6.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)6.7 Medium
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes6.9 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Packet Memory Exhaustion Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco Routed Passive Optical Network Cleartext Password Vulnerability8.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR PON Controller Command Injection Vulnerabilities7.2 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability7.4 High
- cisco network services orchestrator, ios xr software, small business rv series router firmware +1 more +3 moreCisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability8.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Layer 2 Services Denial of Service Vulnerability7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Local Privilege Escalation Vulnerability8.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability5.3 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software CLI Arbitrary File Read Vulnerability5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Command Injection Vulnerability8.6 High
- payara platform serverSensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level6.7 Medium
- drupal security kit, security kit project kit +1 moreSecurity Kit - Less critical - Denial of Service - SA-CONTRIB-2024-0395.3 Medium
- adobe auditionAudition | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe auditionAudition | Out-of-bounds Write (CWE-787)7.8 High
- payara, payara platform server +1 moreREST Interface Link Redirection via Host parameter7.0 High
- hp inc. samsung universal print driver, samsung universal print driver +1 moreThe Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of...7.8 High
- linux, linux kernel +1 morewifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion5.5 Medium
- linux, linux kernel +1 moreigb: cope with large MAX_SKB_FRAGS9.8 Critical
- linux, linux kernel +1 morei2c: tegra: Do not mark ACPI devices as irq safe5.5 Medium
- linux, linux kernel +1 moremmc: mmc_test: Fix NULL dereference on allocation failure5.5 Medium
- linux, linux kernel +1 moreusb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()5.5 Medium
- linux, linux kernel +1 mores390/dasd: fix error recovery leading to data corruption on ESE devices7.0 High
- linux, linux kernel +1 morefix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE5.5 Medium
- linux, linux kernel +1 moremm/hugetlb: fix hugetlb vs. core-mm PT locking7.8 High
- linux, linux kernel +1 moremd/raid1: Fix data corruption for degraded array with slow disk7.8 High
- linux, linux kernel +1 moremm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 07.8 High
- linux, linux kernel +1 morememcg_write_event_control(): fix a user-triggerable oops7.1 High
- linux, linux kernel +1 morebpf: Fix a kernel verifier crash in stacksafe()7.8 High
- linux, linux kernel +1 morenet/mlx5e: Take state lock during tx timeout reporter7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: flowtable: initialise extack before use5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix IPsec RoCE MPV trace call7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetem: fix return value if duplicate enqueue fails7.8 High
- linux, linux kernel +1 moredrm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()5.5 Medium
- linux, linux kernel +1 mores390/boot: Avoid possible physmem_info segment corruption5.5 Medium
- linux, linux kernel +1 morenvme: move stopping keep-alive into nvme_uninit_ctrl()9.8 Critical
- linux, linux kernel +1 morenouveau/firmware: use dma non-coherent allocator5.5 Medium
- linux, linux kernel +1 morechar: xillybus: Check USB endpoints when probing device5.5 Medium
- linux, linux kernel +1 moremptcp: pm: only mark 'subflow' endp as available5.5 Medium
- linux, linux kernel +1 moremptcp: pm: only decrement add_addr_accepted for MPJ req8.2 High
- schneider electric vijeo designer, vijeo designer embedded in ecostruxure™ machine expert, schneider-electric vijeo designer embedded in ecostruxure machine expert +2 moreCWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access,...7.8 High
- hashgraph guardian, nozomi networks cmc +1 moreIncorrect authorization for Reports configuration in Guardian/CMC before 24.2.05.8 Medium
- Show moreLoading…