CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- evolutionscript helpdeskzA cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute...7.6 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via...5.9 Medium
- ubiquiti airmax firmwareUbiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain...6.6 Medium
- linuxptp project linuxptpAn issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial...7.5 High
- symlinkA symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1...7.6 High
- doccano auto labeling pipeline, doccano +1 moreAn issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and...7.2 High
- doccano auto labeling pipeline, doccano +1 moreAn issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and...6.6 Medium
- centreonA SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to...6.7 Medium
- centreonA SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to...7.2 High
- entrust instant financial issuance instant financial issuanceEntrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2,...6.6 Medium
- No product listedEntrust Instant Financial Issuance (On Premise) Software (formerly known as Cardwizard) 6.10.0, 6...5.9 Medium
- woodwing elvis dam elvis damWoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution ...8.8 High
- parallels desktopA lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows...9.8 Critical
- temenos t24A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that...5.4 Medium
- firsh justified image gridWordPress Justified Image Grid plugin <= 4.6.1 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability7.5 High
- mayurik modern loan management systemSourceCodester Modern Loan Management System search_member.php sql injection5.3 Medium
- mayurik modern loan management systemSourceCodester Modern Loan Management System update_loan_record.php cross site scripting5.3 Medium
- razormist telecom billing management systemSourceCodester Telecom Billing Management System login buffer overflow5.3 Medium
- code-projects vehicle management, vehicle management project management +1 morecode-projects Vehicle Management edit1.php sql injection6.9 Medium
- code-projects restaurant reservation systemcode-projects Restaurant Reservation System filter.php sql injection5.3 Medium
- ibm cognos analytics, cognos analytics reports +1 moreIBM Cognos Analytics information disclosure5.5 Medium
ouchcrates.ioOuch! allows a segmentation fault due to use of uninitialized memory5.1 Medium- code-projects blood bank systemcode-projects Blood Bank System bbms.php cross site scripting5.3 Medium
- code-projects employee management systemSourceCodester Employee Management System add-admin.php cross site scripting5.1 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop User Creation Users.php improper authorization5.3 Medium
- code-projects restaurant reservation systemcode-projects Restaurant Reservation System index.php sql injection6.9 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop view_category.php sql injection5.3 Medium
- code-projects student record systemcode-projects Student Record System pincode-verification.php sql injection6.9 Medium
- code-projects student record systemcode-projects Student Record System marks.php sql injection6.9 Medium
- code-projects student record systemcode-projects Student Record System course.php sql injection6.9 Medium
- dingfangzu, gitapp dingfanzu +1 moredingfangzu Order Checkout order.js cross site scripting5.3 Medium
- dedecmsDedeCMS article_string_mix.php os command injection5.1 Medium
- lenel netboxA stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the ...5.4 Medium
- rapidscada rapid scadaCheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.7.5 High
- versoft nebulagraph studio, vesoft nebulagraph database +1 moreAn issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.9.8 Critical
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting2.3 Low
- apache hertzbeatApache HertzBeat: RCE by snakeYaml deser load malicious xml8.8 High
- dvankooten mc4wp: mailchimp for wordpress, ibericode mailchimp +1 moreMailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- ruoyiy_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting6.3 Medium
- moxa mxview one series, mxview one +1 moreMXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition6.0 Medium
- moxa mxview one series, mxview one +1 moreMXview One Series vulnerable to Path Traversal6.0 Medium
- moxa mxview one central manager series, mxview one, mxview one central manager +1 more +3 moreMXview One and MXview One Central Manager Series store cleartext credentials in a local file6.8 Medium
libavcOSS-FuzzHeap-buffer-overflow in ih264d_read_coeff4x4_cabacNo score- vesoft nebulagraph database, nebulagraph studio +1 moreAn issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.9.8 Critical
- gladysassistant gladys assistantGladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role)...8.8 High
- galaxyproject galaxyPossible Data Tampering & Loss of Public Datasets in Galaxy6.5 Medium
- galaxyproject galaxyStored Cross Site Scripting (Stored XSS) in Galaxy7.6 High
- versa director, versa-networks versa director +1 moreThe Versa Director offers REST APIs for orchestration and management. By design, certain APIs,...6.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: information leak in virtio devices3.8 Low
- mayurik best house rental management systemSourceCodester Best House Rental Management System ajax.php sql injection5.3 Medium
- Show moreLoading…