CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- code-projects blood bank management systemcode-projects Blood Bank Management System Password cleartext storage in a file or on disk4.6 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System ajax.php sql injection6.9 Medium
- campcodes online shopping portal, online shopping portal project shopping portal +1 moreCodezips Online Shopping Portal insert-product.php unrestricted upload5.3 Medium
- lyft confidantCross-site Scripting from in Confidant API call4.8 Medium
- codezips internal marks calculationCodezips Internal Marks Calculation index.php sql injection6.9 Medium
- itsourcecode online bookstore, angeljudesuarez online book store project +1 moreitsourcecode Online Bookstore admin_add.php unrestricted upload5.3 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System Admin Login login.php sql injection6.9 Medium
- code-projects patient record management systemcode-projects Patient Record Management System login.php sql injection6.9 Medium
- navidromeMultiple SQL Injections and ORM Leak in navidrome9.4 Critical
- udecode plateArbitrary DOM attributes in element.attributes and leaf.attributes in Platejs8.3 High
- mayurik best house rental management systemSourceCodester Best House Rental Management System ajax.php cross site scripting5.3 Medium
- sourcecodester simple forum-discussion system, oretnom23 simple forum\/discussion system +1 moreSourceCodester Simple Forum-Discussion System index.php path traversal5.3 Medium
- codecanyon crmgo saasCodeCanyon CRMGo SaaS show cross site scripting5.3 Medium
- codecanyon crmgo saasCodeCanyon CRMGo SaaS note cross site scripting5.3 Medium
- cellopoint secure email gatewayCellopoint Secure Email Gateway - Buffer Overflow9.8 Critical
- freebsdbhyve(8) out-of-bounds read access via XHCI emulation8.1 High
- jeremieglotin webo-factoWebo-facto <= 1.40 - Unauthenticated Privilege Escalation9.8 Critical
- code-projects crud operation systemcode-projects Crud Operation System updata.php sql injection5.3 Medium
- maccmsA stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10...4.8 Medium
- tenda ac8 firmware, ac8v4 firmware +1 moreTenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.9.8 Critical
- enmseNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.7.5 High
- enmseNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.7.5 High
- enmseNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.6.5 Medium
- enmseNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.6.5 Medium
- enmseNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.7.5 High
- enmseNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.6.5 Medium
- seacmsSeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although...9.8 Critical
- sem-cms semcmsSEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.9.8 Critical
- gdidees cmsGDidees CMS <= v3.9.1 has a file upload vulnerability.9.8 Critical
- the browser company arcArc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run...9.8 Critical
- leotheme leo product search moduleCross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier...6.1 Medium
- No product listedImproper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and...4.8 Medium
- puredataAn issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges...8.4 High
- envoyproxy envoyPotential manipulate `x-envoy` headers from external sources in envoy6.5 Medium
- envoyproxy envoyoghttp2 crash on OnBeginHeadersForStream in envoy7.5 High
- envoyproxy envoyMalicious log injection via access logs in envoy6.5 Medium
- envoyproxy envoyJwt filter crash in the clear route cache with remote JWKs in envoy5.3 Medium
- envoyproxy envoyEnvoy crashes for LocalReply in http async client6.5 Medium
- code-projects online quiz sitecode-projects Online Quiz Site showtest.php sql injection5.3 Medium
- mayurik best online news portalSourceCodester Best Online News Portal Comment Section news-details.php sql injection5.3 Medium
- pumaHeader normalization allows for client to clobber proxy set headers in Puma5.4 Medium
- jeanmarc77 123solarjeanmarc77 123solar detailed.php cross site scripting5.3 Medium
- jeanmarc77 123solarjeanmarc77 123solar config_invt1.php code injection5.3 Medium
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 Backup_Server_commit.php os command injection5.3 Medium
- jflow project jflowJinan Chicheng Company JFlow Attachment EntityMutliFile_Load.do AttachmentUploadController access control5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- totolink t10, t10 firmware +1 moreTOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection5.3 Medium
@rspack/corenpmDOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS6.3 Medium- Show moreLoading…