CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- skyselang yyladminskyselang yylAdmin Backend File.php list sql injection5.3 Medium
- kalvingit kvf-adminkalvinGit kvf-admin XML File cross site scripting5.3 Medium
- filamentphp filamentFilament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting6.1 Medium
- rockwell automation sequencemanager™, rockwellautomation sequencemanager +1 moreRockwell Automation Input Validation Vulnerability exists in the SequenceManager™ Server8.7 High
- puppet peadm forge moduleSecurity Misconfiguration in Forge module PEADM5.4 Medium
- advantech adam-5630Advantech ADAM-5630 Missing Authentication for Critical Function7.0 High
- advantech adam-5630, adam-5630 firmware +1 moreAdvantech ADAM-5630 Weak Encoding for Password6.9 Medium
- netflix e2nestA path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a8.7 High
- advantech adam-5630, adam-5630 firmware +1 moreAdvantech ADAM-5630 Cross-Site Request Forgery8.5 High
- advantech adam-5630, adam-5630 firmware +1 moreAdvantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information8.5 High
- advantech adam 5550, adam 5550-firmware +1 moreAdvantech ADAM-5550 Cross-site Scripting8.7 High
- advantech adam 5550, adam-5550 firmware +1 moreAdvantech ADAM-5550 Weak Encoding for Password6.8 Medium
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +8 more +10 moreUnchecked buffer in Dynamic DNS client9.2 Critical
- opw fuel managements systems sitesentinel, opwglobal sitesentinel firmware +1 moreOPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function9.8 Critical
- tp-link tl-wr841nd, tl-wr841nd \(11.0\) firmware, tl-wr841nd firmware +2 moreTP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow7.1 High
- alisonic sibylla, sibylla firmware +1 moreAlisonic Sibylla SQL Injection9.3 Critical
- omntec proteus tank monitoringOMNTEC Proteus Tank Monitoring Missing Authentication for Critical Function9.3 Critical
- topquadrant topbraid edgTopQuadrant TopBraid EDG JavaScript console XXE5.0 Medium
- topquadrant topbraid edgTopQuadrant TopBraid EDG password manager stores external credentials insecurely3.0 Low
- mudler localai, mudler/localai +1 moreRemote Code Execution in mudler/localai8.8 High
- red hat migration toolkit for applications 6, migration toolkit for runtimes 1 on rhel 8, build of apache camel for spring boot 3 +21 more +23 moreUndertow: cookie smuggling/spoofing7.4 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +4 more +6 moreUndertow: unrestricted request storage leads to memory exhaustion7.5 High
- goauthentik authentikauthentik cross-provider token validation problems6.5 Medium
- goauthentik authentikauthentik vulnerable to password authentication bypass via X-Forwarded-For HTTP header9.1 Critical
- ekol informatics website template, rsm design web template +1 moreSQLi in RSM Design's Website Template9.2 Critical
- ampacheAmpache vulnerable to Stored XSS via Democratic Playlist Name6.1 Medium
- relaxedjs relaxedRelaxedJS ReLaXed Pug to PDF Converter cross site scripting4.8 Medium
- amir20 dozzleDozzle uses unsafe hash for passwords4.8 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion8.8 High
- facebook thriftA null-dereference vulnerability involving parsing requests specifying invalid protocols can...5.3 Medium
- facebook thriftA use-after-free vulnerability involving upgradeToRocket requests can cause the application to...7.5 High
- 1234n minicmsbg5sbk MiniCMS page-edit.php cross-site request forgery6.9 Medium
- linux, linux kernel +1 morefirmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()5.5 Medium
- linux, linux kernel +1 moredrm/xe/client: fix deadlock in show_meminfo()5.5 Medium
- linux, linux kernel +1 moredrm/xe/client: add missing bo locking in show_meminfo()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefou: fix initialization of grc9.8 Critical
- linux, linux kernel +1 morex86/hyperv: fix kexec crash due to VP assist page corruption5.5 Medium
- linux, linux kernel +1 moreASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item7.3 High
- linux, linux kernel +1 moreASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item8.0 High
- linux, linux kernel +1 moreusbnet: ipheth: do not stop RX on failing RX callback5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change5.5 Medium
- debian linux, linux kernel +1 moreplatform/x86: panasonic-laptop: Fix SINF array out of bounds accesses7.8 High
- linux, linux kernel +1 moremptcp: pm: Fix uaf in __timer_delete_sync8.1 High
- linux, linux kernel +1 morenet/mlx5: Fix bridge mode operations when there are no VFs5.5 Medium
- linux, linux kernel +1 morenet: phy: dp83822: Fix NULL pointer dereference on DP83825 devices5.5 Medium
- linux, linux kernel +1 morenetfilter: nft_socket: fix sk refcount leaks7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: dpaa: Pad packets to ETH_ZLEN7.1 High
- debian linux, linux kernel +1 morespi: nxp-fspi: fix the KASAN report out-of-bounds bug7.8 High
- debian linux, linux kernel +1 moredma-buf: heaps: Fix off-by-one in CMA heap fault handler7.8 High
- linux, linux kernel +1 moredrm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()4.7 Medium
- Show moreLoading…