CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- ibm concertIBM Concert information disclosure4.3 Medium
- code-projects crud operation systemcode-projects Crud Operation System updatedata.php sql injection5.3 Medium
edk2OSS-FuzzHeap-buffer-overflow in StrLenNo scorepopplerOSS-FuzzUNKNOWN WRITE in std::__1::recursive_mutex::lockNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scorebinutilsOSS-FuzzUNKNOWN WRITE in bfd_elf_get_str_sectionNo scoreassimpOSS-FuzzBad-cast to Assimp::LogStream from invalid vptrNo scorellamacppOSS-FuzzHeap-buffer-overflow in gguf_get_tensor_offsetNo score- tenda o6 firmwareTenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the...9.8 Critical
- tenda fh451 firmwareTenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i9.8 Critical
- tenda fh451 firmwareTenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.7.5 High
- tenda fh451 firmwareTenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.9.8 Critical
- tenda ch22 firmwareTenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.9.8 Critical
- tenda ch22 firmwareCH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.9.8 Critical
- anujk305 bus pass management system, bus pass management system project pass management system +1 morephpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin...4.8 Medium
- southrivertech titan sftp serverTitan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability...5.0 Medium
- best free law office management software free law office management software, mayurik best free law office management +1 moreSQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker...9.8 Critical
- dani-garcia vaultwardenAn issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site...5.4 Medium
- dani-garcia vaultwardenAn issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding...6.5 Medium
- dani-garcia vaultwardenAn issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been...8.8 High
- endress+hauser flps, gm32, gms800 +15 more +17 moreCVE-2024-87517.5 High
- rockwell automation pavilion8®, rockwellautomation pavilion8 +1 moreRockwell Automation Path Traversal Vulnerability in Pavilion8®8.6 High
- rockwell automation pavilion8®, rockwellautomation pavilion8 +1 moreRockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8®8.8 High
- rockwell automation 2800c optixpanel™ compact, 2800s optixpanel™ standard, embedded edge compute module +5 more +7 moreRockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions7.7 High
- rockwell automation guardlogix 5580, 1756-en4, compact guardlogix 5380 sil 2 +15 more +17 moreRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP8.7 High
- secreto31126 whatsapp-api-jswhatsapp-api-js fails to validate message's signature5.8 Medium
- cisco meraki systems manager agent, meraki systems manager +1 moreCisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability7.3 High
- gitlabImproper Protection of Alternate Path in GitLab6.5 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.0 Medium
- gitlabAuthentication Bypass by Spoofing in GitLab9.9 Critical
- gitlabPrivilege Context Switching Error in GitLab6.7 Medium
- microsoft high definition audio bus driver, hdaudbus.sys +1 moreA mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft...5.0 Medium
- discourse calendar, discourse-calendar +1 moreDiscourse Calendar plugin event names susceptible to XSS6.1 Medium
- docker desktopA remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.8.9 High
- docker desktopA remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.9.0 Critical
- gitlabPrivilege Defined With Unsafe Actions in GitLab5.5 Medium
- gitlabExternal Control of Critical State Data in GitLab6.4 Medium
- gitlabServer-Side Request Forgery (SSRF) in GitLab7.7 High
- gitlabIncorrect Authorization in GitLab5.3 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab6.4 Medium
- gitlabMissing Authorization in GitLab6.5 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab4.5 Medium
- gitlabBusiness Logic Errors in GitLab3.5 Low
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab8.5 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 moreAutomation-controller: gain access to the k8s api server via job execution with container group6.6 Medium
- kemptechnologies loadmaster, loadmaster mt, progress multi-tenant loadmaster +2 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.8.4 High
- rockwell automation thinmanagerThinManager® Code Execution Vulnerability8.5 High
- rockwell automation 5015-u8ihft, rockwellautomation 5015-u8ihft firmware +1 more5015-U8IHFT Denial-of-Service Vulnerability via CIP Message8.7 High
- Show moreLoading…