CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- e-tax.nta e-tax, national tax agency the installer of e-tax software(common program) +1 moreUser interface (UI) misrepresentation of critical information issue exists in multiple Home...7.8 High
- synology drive, drive client +1 moreOut-of-bounds write vulnerability in backup task management functionality in Synology Drive...6.7 Medium
- synology drive, drive client +1 moreInclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component...7.8 High
- synology drive clientInsertion of sensitive information into log file vulnerability in proxy settings component in...6.5 Medium
- synology drive, drive client +1 moreBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss...8.2 High
- supsystic slider, slider by supsystic, social share buttons by supsystic +1 more +3 moreBroken Access Control vulnerability on multiple WordPress plugins by Supsystic4.3 Medium
- madfishdigital bulk noindex & nofollow toolkit, bulk noindex \& nofollow toolkit +1 moreBulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting6.1 Medium
- wp chill download monitorDownload Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable4.3 Medium
- ouhinit 012 ps multi languages012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- papercut mf, ng, ng, papercut mf +2 moreArbitrary File Deletion in PaperCut NG/MF Web Print Hot folder7.8 High
- papercut mf, ng, ng, papercut mf +2 moreArbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack6.1 Medium
libultrahdrOSS-FuzzHeap-buffer-overflow in ultrahdr::getYuv444PixelNo score- assimpAssimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.4.3 Medium
- tenda g3 firmwareTenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE)...9.8 Critical
- becn datagerryIncorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands...9.1 Critical
- vonets vap11g-300 firmwareVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the...7.4 High
- vonets vap11g-300 firmwareVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the...8.0 High
- vonets vap11g-300 firmwareVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several...8.0 High
- vonets vap11g-300 firmwareAn issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access...5.7 Medium
- butterflyeffectpte monicaMonica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information...4.0 Medium
- online voting system project voting systemProjectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF)...6.5 Medium
- online voting system project voting system, projectworlds online voting system project +1 moreA stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting...5.4 Medium
- varunsardana004 blood bank and donation management systemA Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation...4.7 Medium
- varunsardana004 blood bank and donation management systemA Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management...4.7 Medium
- kishan0725 hospital management systemA Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management...6.3 Medium
- schedulerA host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the...8.8 High
- bookreviewlibraryA host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the...8.8 High
- meanstoreA host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password...8.8 High
- lpc lines police cadA host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the...8.8 High
- solvaitAn information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2...7.5 High
- foxitsoftware foxit pdf editorAn issue in Foxit Software Foxit PDF Reader v.2024.2.2.25170 allows a local attacker to execute...8.4 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
camaleon_cmsRubyGemsCamaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)4.8 Medium- microsoft power platform terraform provider, terraform-provider-power-platform, terraform provider power platform +2 morePower Platform Terraform Provider has Improper Masking of Secrets in Logs8.8 High
emacsTuxCare,emacs-commonTuxCare,emacs-elTuxCare +3 more +5 moreemacs: Fix of CVE-2024-48337No scorekrb5-admin-serverTuxCare,krb5-docTuxCare,krb5-gss-samplesTuxCare +23 more +25 moreFix CVE(s): CVE-2021-37370, CVE-2021-37371, CVE-2024-37370, CVE-2024-37371No score- strawberry-graphql strawberryStrawberry GraphQL Cross-Site Request Forgery (CSRF) vulnerability4.6 Medium
- dineshkarki use any fontWordPress Use Any Font plugin <= 6.3.08 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- givewpWordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- grafana agent, agent flow, agent flow windows +2 moreGrafana Agent Flow on Windows Unquoted service path7.3 High
- grafana alloyGrafana Alloy on Windows Unquoted service path7.3 High
ca-certificatesUbuntuca-certificates updateNo score- cisco ios xe software, ios xe +1 moreA vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to...4.3 Medium
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow...6.5 Medium
- cisco iosA vulnerability in the access control list (ACL) programming of Cisco IOS Software running on...5.8 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for...4.7 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software...8.6 High
- Show moreLoading…