CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- michalaugustyniak misiek photo album, misiek photo album photo album +1 moreMisiek Photo Album <= 1.4.3 - Stored XSS via CSRF6.1 Medium
- michalaugustyniak misiek photo album, misiek photo album photo album +1 moreMisiek Photo Album <= 1.4.3 - Album Deletion via CSRF6.5 Medium
- adeelraza gixaw chat, gixaw chat chat +1 moreGixaw Chat <= 1.0 - Stored XSS via CSRF6.1 Medium
- erichamby adicon serverAdicon Server <= 1.2 - Admin+ SQL Injection7.2 High
- rafflepress giveaways and contests by rafflepress, seedprod rafflepress +1 moreGiveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS4.8 Medium
- scriptonite music request managerMusic Request Manager <= 1.3 - Unauthenticated Stored XSS6.1 Medium
- scriptonite music request managerMusic Request Manager <= 1.3 - Reflected XSS6.1 Medium
- scriptonite music request managerMusic Request Manager <= 1.3 - Stored XSS via CSRF6.1 Medium
- creativemindssolutions cm pop-up banners, unknown cm pop-up banners for wordpress, cminds cm popup +2 moreCM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS4.8 Medium
- easy property listings property listings, merv barrett easy property listings +1 moreEasy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF4.3 Medium
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an...5.6 Mediumintel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreObservable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user...6.8 Medium- pgpool pgpool-iiExposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a...7.5 High
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System includes exposure of information through directory listing6.9 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability6.5 Medium
- code-projects inventory managementcode-projects Inventory Management Products Table Page viewProduct.php sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System admin_class.php save_user sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System categories.php cross site scripting5.3 Medium
- ivanti epm, endpoint manager +1 moreAn External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before...8.2 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...9.1 Critical
- ivanti epm, endpoint manager +1 moreDeserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024...10.0 Critical
- yunknet yunke online school system云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal5.3 Medium
- wibu wibukeyAn issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70...5.5 Medium
- wibu wibukeyAn issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70...7.8 High
- emqx nanomqAn invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).7.5 High
- octavolabs vernemqA memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS)...7.5 High
- texas instruments fusion digital power designerAn issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to...5.5 Medium
- no-ip ducNo-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command...9.1 Critical
- keyfactor ejbcaThe CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not...3.1 Low
- ordat foss-online, ordat.erp +1 moreUser enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine...5.3 Medium
- ordat foss-online, ordat.erp +1 moreORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site...6.1 Medium
- ordat foss-online, ordat.erp +1 moreORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the...7.5 High
- mirapolis lmsAn issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object...4.3 Medium
- kasda kw5515, kasdanet kw5515 firmware +1 moreCross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515...4.3 Medium
- heyewei jfinalcmsJFinalCMS com.cms.util.TemplateUtils update path traversal5.3 Medium
- hitachi vantara pentaho data integration & analyticsHitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials8.5 High
- citrix workspace app for windows, workspace, workspace app +2 moreLocal privilege escalation allows a low-privileged user to gain SYSTEM privileges5.4 Medium
- shandong star measurement and control equipment heating network wireless monitoring systemShandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System UCCGSrv.asmx GetDataKindByType sql injection5.3 Medium
- citrix workspace app for windows, workspace, workspace app +2 moreLocal privilege escalation allows a low-privileged user to gain SYSTEM privileges7.0 High
omniauth-samlRubyGemsomniauth-saml vulnerable to Improper Verification of Cryptographic Signature9.9 Critical- heyewei jfinalcmsJFinalCMS com.cms.controller.admin.TemplateController update path traversal5.1 Medium
- kaon cg3000, kaonmedia cg3000 firmware +1 moreKaon CG3000 dhcpcd Command cross site scripting5.1 Medium
- Show moreLoading…