CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- code-projects hospital management systemcode-projects Hospital Management System check_availability.php sql injection6.9 Medium
- getsentry sentryImproper authorization on muting of alert rules in sentry7.1 High
- getsentry sentryImproper authorization on deletion of user issue alert notifications in sentry6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)7.2 High
- millbeck communications proroute h685t-w, millbeckcommunications proroute h685t-w firmware +1 moreMillbeck Communications Proroute H685t-w Cross-site Scripting.5.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface7.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)7.2 High
- millbeck communications proroute h685t-w, millbeck proroute h685t-w firmware +1 moreMillbeck Communications Proroute H685t-w Command Injection.8.8 High
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 morePrivilege escalation vulnerability7.5 High
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 moreHeap-overflow vulnerability9.8 Critical
- devise-two-factorInsufficient Default OTP Shared Secret Length6.0 Medium
- red hat enterprise linux ai (rhel ai)Vllm: denials of service in vllm json web api6.2 Medium
- red hat enterprise linux ai (rhel ai)Vllm: a completions api request with an empty prompt will crash the vllm api server.7.5 High
- contaoInsert tag injection via canonical URL in Contao5.3 Medium
- contaoDirectory traversal in the file selector widget in contao/core-bundle4.3 Medium
- contaoRemote command execution through file upload in contao/core-bundle8.3 High
- checkmkReflected links in error message facilitate phishing attacks5.1 Medium
- favethemes houzezWordPress Houzez theme <= 3.2.4 - Privilege Escalation vulnerability8.8 High
- favethemes houzez, houzez login register +1 moreWordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability8.8 High
- veribilim software veribase order, veribase order management +1 moreStored XSS in Veribilim Software's Veribase Order Management9.4 Critical
- mozilla firefox, firefox for android +1 moreUnder certain conditions, an attacker with the ability to redirect users to a malicious site via...6.1 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreDeserialization of Untrusted Data in langchain-ai/langchain5.2 Medium
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +1 more +3 moreSensitive data disclosure and manipulation due to unnecessary privileges assignment. The...9.9 Critical
- mihail-barinov share this image, share this image project this image +1 moreShare This Image <= 2.03 - Open Redirect via link Parameter7.2 High
- wp-property-hive propertyhive, propertyhive property hive +1 morePropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details8.8 High
- lucas garcia posts reminderPosts reminder <= 0.20 - Settings Update via CSRF6.5 Medium
- alaingg accordion image menuAccordion Image Menu <= 3.1.3 - Stored XSS via CSRF5.4 Medium
- jakesnyder enhanced search boxEnhanced Search Box <= 0.6.1 - Settings Update via CSRF6.5 Medium
- joen review ratingsReview Ratings <= 1.6 - Stored XSS via CSRF6.1 Medium
- moc special feed itemsSpecial Feed Items <= 1.0.1 - Stored XSS via CSRF5.4 Medium
- freakingwildchild visual sound, unknown visual sound (old), visual sound sound +2 moreVisual Sound (old) <= 1.06 - Settings Update via CSRF6.5 Medium
- rubayathasan infolinks ad wrapinfolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF6.5 Medium
- seanschulte vikinghammer tweetVikinghammer Tweet <= 0.2.4 - Stored XSS via CSRF5.4 Medium
- logo manager for enamad manager for enamad, unknown logo manager for enamad +1 moreLogo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget4.8 Medium
- yokogawa dual-redundant platform for computer \(pc2ckm\), yokogawa electric corporation dual-redundant platform for computer (pc2ckm) +1 moreDenial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If...7.5 High
capstoneOSS-FuzzHeap-buffer-overflow in readBytes48No scoregalera-4Debiangalera-4 - new upstream versionNo score- libreofficeSignatures in "repair mode" should not be trusted7.8 High
- czim file-handlingczim/file-handling vulnerable to SSRF and directory traversal8.2 High
- in2code powermailpowermail TYPO3 extension has Insecure Direct Object Reference7.5 High
- frogcms project frogcmsFrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- frogcms project frogcmsFrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-controller-manager: elevated build pods can lead to node compromise in openshift9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy9.1 Critical
- apple macosA downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.5 High
- apple ipados, macos, visionos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS...7.5 High
- apple macos, visionos +1 moreThe issue was addressed with improved checks. This issue is fixed in visionOS 2, macOS Sequoia 15...4.4 Medium
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...8.8 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed through improved state management. This issue is fixed in iOS 18 and...6.5 Medium
- Show moreLoading…