CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- linuxKVM: VMX: Fix crash due to uninitialized current_vmcs5.6 Medium
- nt-ware micard plus ble, micard plus ci, rfideas micard plus ble firmware +1 more +3 moreMultiple MiCard PLUS card reader dropped characters5.3 Medium
- d-link dir-x4860 a1, dlink dir-4860 a1, dir-x4860 firmware +2 moreD-Link WiFi router - OS Command Injection9.8 Critical
- d-link dir-x4860 a1, dlink dir-4860 a1, dir-x4860 firmware +2 moreD-Link WiFi router - Hidden Functionality9.8 Critical
- d-link covr-x1870, dir-x4860 a1, dlink covr-x1870 firmware +1 more +3 moreD-Link WiFi router - Hidden Functionality8.8 High
- mattermost, mattermost mobile +1 moreMobile password gets saved in dictionary under conditions4.5 Medium
- mattermost, mattermost desktop +1 moreRCE in desktop app in Windows by local attacker5.3 Medium
- d-link dir-x4860 a1, dlink dir-x4860 firmware +1 moreD-Link WiFi router - Stack-based Buffer Overflow9.8 Critical
- d-link dir-x4860 a1, dir-x5460 a1, dlink dir-x4860 firmware +1 more +3 moreD-Link WiFi router - Stack-based Buffer Overflow9.8 Critical
- linux, linux kernel +1 moreperf trace: Really free the evsel->priv area5.5 Medium
- linux, linux kernel +1 morewifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()7.8 High
- linux, linux kernel +1 morebpf, sockmap: Fix repeated calls to sock_put() when msg has more_data7.8 High
- linux, linux kernel +1 moreperf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()5.5 Medium
- linux, linux kernel +1 moreRDMA/core: Make sure "ib_port" is valid when access sysfs node5.5 Medium
- linux, linux kernel +1 moreHID: mcp2221: prevent a buffer overflow in mcp_smbus_write()7.8 High
- linux, linux kernel +1 moreigc: avoid kernel warning when changing RX ring parameters5.5 Medium
- linux, linux kernel +1 moredrm/amdkfd: Fix UBSAN shift-out-of-bounds warning7.1 High
- syscomgo omflowThe SYSCOM Group OMFLOW - Improper Authorization for Data Query Function6.5 Medium
- syscomgo omflowThe SYSCOM Group OMFLOW - Broken Access Control8.8 High
- syscomgo omflowThe SYSCOM Group OMFLOW - Arbitrary File Read6.5 Medium
- syscomgo omflowThe SYSCOM Group OMFLOW - Information Leakage7.5 High
- intumit smartrobotINTUMIT SmartRobot - Cross-site Scripting6.1 Medium
- linux, linux kernel +1 moreALSA: ymfpci: Fix BUG_ON in probe function5.5 Medium
- linux, linux kernel +1 morebus: mhi: host: Range check CHDBOFF and ERDBOFF8.4 High
- linux, linux kernel +1 morenet: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()7.8 High
- linux, linux kernel +1 morenet: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null5.5 Medium
- linux, linux kernel +1 morenet: genl: fix error path memory leak in policy dumping5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morepadata: fix UAF in padata_reorder7.8 High
- linux, linux kernel +1 morebpf: reject unhashed sockets in bpf_sk_assign5.5 Medium
- linux, linux kernel +1 morebpf: Fix KASAN use-after-free Read in compute_effective_progs7.8 High
- playsmsplaySMS Template index.php code injection6.3 Medium
- nextcloud desktopIn Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the...9.1 Critical
- mfasoft secure authentication serverAn improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties...7.5 High
- totolink ac1200 t8 firmware, t8 firmware +1 moreTOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the...9.8 Critical
- totolink ac1200 t8 firmware, t8 firmware +1 moreTOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the...7.5 High
- totolink ac1200 t8 firmware, t8 firmware +1 moreTOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg...9.8 Critical
- zte zxhn e1600 firmware, zxhn e2603 firmware, zxhn e2615 firmware +7 more +9 moreThe HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init...8.1 High
- zte zxhn e1600 firmware, zxhn e2603 firmware, zxhn e2615 firmware +7 more +9 moreThe HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in...9.8 Critical
- zte zxhn e1600 firmware, zxhn e2603 firmware, zxhn e2615 firmware +7 more +9 moreThe HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in...9.8 Critical
- zte zxhn e1600 firmware, zxhn e2603 firmware, zxhn e2615 firmware +7 more +9 moreThe HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in...8.1 High
- spx graphics controller, tuomoku spx gc +1 moreAn issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code...9.8 Critical
- kashipara music management systemAn Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music...7.6 High
- kashipara music management systemAn Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in...5.9 Medium
- kashipara music management systemAn Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music...4.2 Medium
- kashipara music management systemKashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax...4.7 Medium
- shopkit project shopkitA Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative...7.5 High
- xiaohe4966 tpmecmsxiaohe4966 TpMeCMS lang path traversal5.3 Medium
- vedees wcmsvedees wcms finder.php path traversal5.3 Medium
get-size-derivecrates.ioget-size-derive is unmaintainedNo scoreget-sizecrates.ioget-size is unmaintainedNo score- Show moreLoading…