CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- cisco ios xe software, ios xe +1 moreA vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access ...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the web-based management interface of Cisco IOS XE Software could allow an...8.1 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service...8.6 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and...8.6 High
- cisco sd-wan vedge router, sd-wan vedge cloud +1 moreCisco SD-WAN vEdge Routers Denial of Service Vulnerability6.1 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Cross-Site Scripting Vulnerability6.4 Medium
- cisco utd snort ips engine software, unified threat defense snort intrusion prevention system engine +1 moreCisco UTD Snort IPS Engine Software for Cisco IOS XE Software Security Policy Bypass and Denial of Service Vulnerability5.8 Medium
- cisco catalyst center, digital network architecture center (dna center), digital network architecture center +2 moreCisco Catalyst Center Static SSH Host Key Vulnerability7.5 High
- cisco ios xe software, ios xe, ios xe catalyst sd-wan +1 more +3 moreA vulnerability in the process that classifies traffic that is going to the Unified Threat...8.6 High
- meshtastic firmwareMeshtastic firmware Authentication/Authorization Bypass via MQTT8.1 High
- devolutions remote desktop managerAn information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows...5.5 Medium
- steve burge wordpress tag cloud plugin – tag groups, taxopress +1 moreWordPress Tag Groups plugin <= 2.0.3 - Sensitive Data Exposure vulnerability5.3 Medium
- stylemixthemes masterstudy lms starter, masterstudy lms +1 moreWordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability5.3 Medium
- themepoints testimonialsWordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hcl software nomad server on dominoAn open proxy vulnerability affects HCL Nomad server on Domino8.6 High
- progress software telerik ui for wpf, telerik ui for wpf +1 moreProgress UI for WPF format provider unsafe deserialization vulnerability7.8 High
- progress software telerik ui for wpf, telerik ui for wpf +1 moreProgress UI for WPF format provider unsafe deserialization vulnerability7.8 High
- progress software telerik ui for wpf, telerik ui for wpf +1 moreImproper neutralization special element in hyperlinks7.8 High
- devolutions serverAuthorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10...6.5 Medium
- progress software telerik ui for winforms, telerik ui for winforms, ui for wpf +2 moreImproper neutralization special element in hyperlinks7.8 High
- ckeditor ckeditor5CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package5.1 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget6.4 Medium
- talent software bap automationStrored XSS in Talent Software's BAP Automation9.3 Critical
attycrates.io`atty` is unmaintainedNo score- watchguard single sign-on client, sso client +1 moreWatchGuard Firebox Single Sign-On Client Denial-of-Service8.7 High
- watchguard authentication gateway, sso agent +1 moreWatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass9.3 Critical
- watchguard authentication gateway, single sign-on client, sso agent +1 more +3 moreWatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass9.3 Critical
- livemesh addons by elementor, livemeshelementor addons for elementor +1 moreElementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter6.4 Medium
- teamviewer full client, host, remote full client +1 more +3 moreImproper signature verification of VPN driver installation in TeamViewer Remote Clients8.8 High
- teamviewer host, remote full client, remote host +2 moreImproper signature verification of Printer driver installation in TeamViewer Remote Clients8.8 High
- litespeedtech litespeed cachelitespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +16 more +18 moreCODESYS: web server vulnerable to DoS7.5 High
- livemesh addons for elementorWordPress Elementor Addons by Livemesh plugin <= 8.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- apache hadoopApache Hadoop: Temporary File Local Information Disclosure6.2 Medium
- apache answerApache Answer: Avatar URL leaked user email addresses5.3 Medium
- ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 moreNinja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer4.7 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation8.8 High
- revolut gateway, gateway for woocommerce, revolutbusiness revolut gateway for woocommerce +2 moreRevolut Gateway for WooCommerce <= 4.17.3 - Missing Authorization to Unauthenticated Order Status Update5.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id4.3 Medium
- unknown adstxt plugin, vladyslav bondarenko adstxt +1 moreadstxt Plugin <= 1.0.0 - Settings Update via CSRF4.3 Medium
- alimir wp ulikeWP ULike < 4.7.4 - Admin+ Stored XSS4.8 Medium
- smartsearchwp chatbot with chatgpt wordpress, webdigit chatbot with chatgpt +1 moreSmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure5.3 Medium
- mycred, saadiqbal points management system for gamification, ranks, badges, and loyalty rewards program – mycred +1 moremyCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Author…5.3 Medium
- stellarwp the events calendarThe Events Calendar <= 6.6.4 - Unauthenticated SQL Injection9.8 Critical
- devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- freelancer-coder wordpress simple html sitemap, ashish ajani wp simple html sitemap +1 moreWordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection9.1 Critical
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure4.3 Medium
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- prisna google website translator, gwt – google website translator, gwt-google website translator +2 morePrisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection9.1 Critical
- uncanny owl groups for learndash, uncannyowl uncanny groups for learndash +1 moreUncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add2.7 Low
- Show moreLoading…