CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- testlinkTestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a...8.1 High
- nasa cryptolibNASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem ...7.5 High
- nasa cryptolibNASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem ...7.5 High
- nasa cryptolibNASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem ...7.5 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...8.2 High
- openpetraCross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain...7.3 High
- plasmoapp rpshareDirectory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote...8.8 High
- plasmoapp rpshareAn issue in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary...8.8 High
- flatpressA cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute...6.1 Medium
- flatpressA cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute...6.1 Medium
- gitlabImproper Encoding or Escaping of Output in GitLab3.1 Low
- gitlabIncorrect Provision of Specified Functionality in GitLab2.6 Low
- suse rancherRancher agents can be hijacked by taking over the Rancher Server URL8.0 High
- openprinting libcupsfilterslibcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server8.6 High
- openprinting cups, cups-browsed +1 morecups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source5.3 Medium
- microsoft windows 10, windows 11, windows server 2016 +2 more +4 moreMedium to High Integrity Privilege Escalation in Microsoft Windows8.4 High
- openprinting libppd, debian linux +1 morelibppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer8.6 High
- hashicorp vault, vault enterprise, vault community edition +1 more +3 moreVault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default7.5 High
- badges shieldsShields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badges8.8 High
- diygod rsshubRSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover.8.8 High
- grafanaGrafana alerting wrong permission on datasource rule write endpoint5.1 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data5.3 Medium
- gotenna atak plugin, pro atak plugin +1 moregoTenna Pro ATAK Plugin Observable Response Discrepancy5.3 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data5.3 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Weak Authentication6.0 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number Generator7.1 High
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information2.3 Low
- emlog pro, gotenna pro app +1 moreMissing Authentication for Critical Function in goTenna Pro8.7 High
- emlog pro, gotenna pro app +1 moreObservable Response Discrepancy in goTenna Pro5.3 Medium
- emlog pro, gotenna pro app +1 moreInsertion of Sensitive Information Into Sent Data in goTenna Pro5.3 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Missing Support for Integrity Check6.0 Medium
- nixos nixCredential leak when credentials are used with `<nix/fetchurl.nix>`5.9 Medium
- emlog pro, gotenna pro app +1 moreWeak Authentication in goTenna Pro6.0 Medium
- emlog pro, gotenna pro app +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in goTenna Pro7.1 High
- gotenna atak plugin, pro atak plugin +1 moregoTenna Pro ATAK Plugin Insecure Storage of Sensitive Information5.1 Medium
- emlog pro, gotenna pro app +1 moreImproper Restriction of Communication Channel to Intended Endpoints in goTenna Pro7.6 High
- agnaiAgnai vulnerable to Relative Path Traversal in Image Upload4.3 Medium
- emlog proCleartext Transmission of Sensitive Information in goTenna Pro2.3 Low
- emlog proMissing Support for Integrity Check in goTenna Pro6.0 Medium
- emlog proInsecure Storage of Sensitive Information in goTenna Pro5.1 Medium
- emlog proWeak Passwords Requirements in goTenna Pro6.0 Medium
- agnaiAgnai File Disclosure Vulnerability: JSON via Path Traversal4.3 Medium
- agnaiAgnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal8.8 High
- layuiDOM Clobbering gadgets found in layui that lead to Cross-site Scripting6.4 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Weak Password Requirements6.0 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an...7.1 High
- go-kratos kratosOry Kratos's `highest_available` setting does not properly respect code + mfa credentials4.4 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an...7.5 High
- Show moreLoading…