CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- pega infinity, pegasystems pega infinity +1 morePega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.5.2 Medium
- pega infinity, pegasystems pega infinity +1 morePega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.5.5 Medium
- pega infinity, pegasystems pega infinity +1 morePega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.5.5 Medium
- rockwell automation factorytalk® batch view™, rockwellautomation factorytalk batch view +1 moreFactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets9.2 Critical
- avg internet securityLocal privilege escalation vulnerability in AVG Internet Security7.8 High
- espressif esp-nowESP-NOW Replay Attacks Vulnerability6.5 Medium
- espressif esp-nowESP-NOW OOB Vulnerability In Group Type Message6.5 Medium
- rockwell automation factorytalk view site edition, rockwellautomation factorytalk view +1 moreFactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation9.2 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution9.0 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability6.3 Medium
- utarit soliclubIDOR in Utarit Information's SoliClub8.8 High
- mindsdbMindsDB Cross-site Scripting vulnerability9.0 Critical
- mindsdbMindsDB Deserialization of Untrusted Data vulnerability7.1 High
- mindsdbMindsDB Deserialization of Untrusted Data vulnerability7.1 High
- utarit soliclubIDOR in Utarit Information's SoliClub8.8 High
- mindsdbMindsDB Deserialization of Untrusted Data vulnerability7.1 High
- mindsdbMindsDB Deserialization of Untrusted Data vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- mindsdbMindsDB Eval Injection vulnerability8.8 High
- cleanlabCleanlab Deserialization of Untrusted Data vulnerability7.8 High
- refuel autolabelRefuel Autolab Eval Injection vulnerability7.8 High
- refuel autolabelRefuel Autolab Eval Injection vulnerability7.8 High
- edirectoryImproper Neutralization of Input During Web Page Generation Vulnerability5.4 Medium
- opentext identity manager azuread driverSensitive Information logging in NetIQ Identity Manager Driver5.8 Medium
- edirectoryPossible NLDAP Denial of Service attack Vulnerability7.6 High
- edirectoryPossible Insertion of Sensitive Information into Log File Vulnerability6.5 Medium
- edirectoryCross-Site Scripting (XSS) Vulnerability5.4 Medium
- edirectoryPossible External service interaction Vulnerability5.3 Medium
- edirectoryPossible Improper authentication Vulnerability in OpenText eDirectory7.4 High
- netiq identity manager rest driver, opentext identity manager rest driver 1.1.2.0200 +1 morePossible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager4.9 Medium
colordSUSESecurity update for colordNo score- synetics idoit pro, i-doit +1 moreCross-site Scripting vulnerability in Idoit pro5.4 Medium
- synetics idoit pro, i-doit +1 moreSQL Injection vulnerability in Idoit pro8.8 High
colordopenSUSESecurity update for colordNo score- te informatics v5Reflected XSS in TE Informatics' V5 Software8.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'10.0 Critical
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'10.0 Critical
- martynasma amcharts: charts and maps, amcharts amcharts\ +1 moreamCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery6.1 Medium
- mm-breaking news project news, unknown mm-breaking news +1 moreMM-Breaking News <= 0.7.9 - Reflected XSS6.1 Medium
- mm-breaking news project news, mm breaking news breaking news, unknown mm-breaking news +2 moreMM-Breaking News <= 0.7.9 - Stored XSS via CSRF6.1 Medium
- blogintroduction wordpress plugin wordpress plugin, kimhuebel blogintroduction-wordpress-plugin +1 moreBlog Introduction <= 0.3.0 - Settings Update via CSRF6.5 Medium
- michalaugustyniak misiek paypal, misiek paypal paypal +1 moreMisiek Paypal <= 1.1.20090324 - Stored XSS via CSRF6.1 Medium
- outtolunchproductions simple headline rotator, simple headline rotator headline rotator +1 moreSimple Headline Rotator <= 1.0 - Stored XSS via CSRF6.1 Medium
- freakingwildchild visual sound, visual sound sound +1 moreVisual Sound <= 1.03 - Settings Update via CSRF6.5 Medium
- gwycon quick code, quick code code +1 moreQuick Code <= 1.0 - Stored XSS via CSRF6.1 Medium
- elliot ilc thickbox, ilc thickbox thickbox +1 moreILC Thickbox <= 1.0 - Settings update via CSRF6.5 Medium
- Show moreLoading…