CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d...7.5 High
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow...7.5 High
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter...7.5 High
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName...7.5 High
- mayurik best house rental management systemBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the...9.8 Critical
- best house rental management system house rental management system, mayurik best house rental management system +1 moreBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the...9.8 Critical
- best house rental management system house rental management system, mayurik best house rental management system +1 moreBest House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the...9.8 Critical
- best house rental management system house rental management system, mayurik best house rental management system +1 moreBest House Rental Management System 1.0 contains a SQL injection vulnerability in the...9.8 Critical
- dedecmsDedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.8.8 High
- dedecmsDedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the...6.1 Medium
- frogcms project frogcmsFrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- assimpHeap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local...8.4 High
- hitachi id bravura security fabricAn issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x...9.1 Critical
- dlink dcs-960l firmwareStack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with...8.8 High
- todeskSQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code...9.8 Critical
- rws multitransAn HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to...6.1 Medium
- rws multitransMultiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and...6.1 Medium
- bluekitchen bluestackBuffer Overflow vulnerability in btstack mesh commit before v...9.8 Critical
- globalsuzuki smartplay headunit firmwareA vulnerability has been discovered in all versions of Smartplay headunits, which are widely used...7.5 High
- jktyre smart tyre car \& bikeAn issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack...4.2 Medium
- sqlitedictsqlitedict insecure deserialization vulnerability9.8 Critical
- bmc remedy mid-tier**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An...9.8 Critical
- siemens sicam a8000 firmware, sicam egs firmware, sicam s8000 +4 more +6 moreTriangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size...7.5 High
- technitium dns server, dnsserver +1 moreTechnitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification)...7.5 High
- chaosbladeChaosblade vulnerable to OS command execution8.6 High
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat...8.8 High
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.6.5 Medium
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in...8.8 High
- coredns.io corednsCoreDNS Cache Poisoning via a birthday attack7.5 High
- technitium dns server, dnsserver +1 moreAn issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache...7.5 High
- technitium dns server, dnsserver +1 moreAn issue was discovered in Technitium through 11.0.2. It enables attackers to launch...7.5 High
- technitium dns server, dnsserver +1 moreAn issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to...7.5 High
- coredns.io corednsCoreDNS vulnerable to TuDoor Attacks7.5 High
- technitium dns server, dnsserver +1 moreAn issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS...7.5 High
- surecartWordPress SureCart plugin <= 2.29.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- pagelayerWordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- highwarden super store finderWordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wayneconnor sliding doorWordPress Sliding Door theme <= 3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- digitalnature mystiqueWordPress Mystique theme <= 2.5.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webdzier hotel galaxyWordPress Hotel Galaxy theme <= 4.4.24 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- latepointWordPress LatePoint plugin <= 4.9.91 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryoutcreations liquidoWordPress Liquido theme <= 1.0.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryoutcreations kahunaWordPress Kahuna theme <= 1.7.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sktthemes posterityWordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- royal-elementor-addons royal elementor addonsWordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pickplugins team showcaseWordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- spicethemes spice starter sitesWordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…