CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- nokia hit 7300 firmwareAn issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote...3.3 Low
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic...6.6 Medium
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in...8.8 High
- nokia hit 7300 firmwareAn issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface...2.7 Low
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information...6.5 Medium
- mayurik advocate office management systemSourceCodester Advocate Office Management System edit_client.php sql injection5.3 Medium
- red hat satellite 6, satellite 6.12 for rhel 8 +1 moreForeman: foreman: oauth secret exposure via unauthenticated access to the graphql api7.5 High
- code-projects blood bank systemcode-projects Blood Bank System forgot.php sql injection5.3 Medium
- campcodes online shopping portalPHPGurukul Online Shopping Portal Admin Panel index.php sql injection6.9 Medium
- intelbras incontrol, incontrol web +1 moreIntelbras InControl incontrol-service-watchdog.exe unquoted search path8.5 High
- intelbras incontrol, incontrol web +1 moreIntelbras InControl Relatório de Operadores Page operador code injection5.3 Medium
- code-projects inventory management system, mayurik free and open source inventory management system +1 moreSourceCodester Inventory Management System add_staff.php cross site scripting5.3 Medium
- anisha supply chain managementcode-projects Supply Chain Management edit_manufacturer.php sql injection5.3 Medium
- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System view_details.php access control6.9 Medium
readstatOSS-FuzzHeap-buffer-overflow in extract_mr_dataNo scorelibultrahdrOSS-FuzzUse-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadataNo score- rems online timesheet app, sourcecodester online timesheet +1 moreSourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting5.3 Medium
- rems online timesheet app, sourcecodester online timesheet +1 moreSourceCodester Online Timesheet App delete-timesheet.php sql injection5.3 Medium
- mayurik advocate office management systemSourceCodester Advocate Office Management System activate.php sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Master.php delete_category sql injection5.3 Medium
- blood bank management system project bank management system, code-projects blood bank management system, blood bank system +2 morecode-projects Blood Bank Management System B+.php sql injection5.3 Medium
- oretnom23 employee and visitor gate pass logging systemSourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection5.3 Medium
- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System Message Us Form contact_us.php cross site scripting6.9 Medium
- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System ?page=reserve cross site scripting5.3 Medium
- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System Ticket ?page=tickets access control5.3 Medium
- ngothang wp multitasking, thangnv27 wp multitasking – wp utilities +1 moreWP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System admin improper authorization5.3 Medium
- mayurik advocate office management systemSourceCodester Advocate Office Management System forgot_pass.php sql injection6.9 Medium
- stape gtm server side, gtmserver stape conversion tracking +1 moreGTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting6.1 Medium
- mayurik advocate office management systemSourceCodester Advocate Office Management System login.php sql injection6.9 Medium
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability8.8 High
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 Improper Verification of Cryptographic Signature Vulnerability4.6 Medium
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability6.8 Medium
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability6.8 Medium
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 eu firmware, maxicharger ac elite business c50 firmware +2 moreAutel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 eu firmware, maxicharger ac elite business c50 firmware +2 moreAutel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 eu firmware, maxicharger ac elite business c50 firmware +2 moreAutel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability6.5 Medium
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 eu firmware, maxicharger ac elite business c50 firmware +2 moreAutel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- silabs gecko osSilicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- phpPHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)8.1 High
- clifgriffin simple ldap loginSimple LDAP Login <= 1.6.0 - Reflected Cross-Site Scripting6.1 Medium
- wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager, eu\/uk vat manager for woocommerce +2 moreEU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization5.3 Medium
- givew donation plugin and fundraising platform, givewp, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection9.8 Critical
- axton wp-webauthnWP-WebAuthn <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode6.4 Medium
- wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager for woocommerce +1 moreEU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting6.1 Medium
- garrettgrimm simple popup pluginSimple Popup Plugin <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- tianocore edk2Integer overflow in PeCoffLoaderRelocateImage5.9 Medium
- dingfanzu cmsdingfanzu CMS saveNewPwd.php sql injection5.3 Medium
- hcl software nomad server on domino, hcltech hcl nomad +1 moreAn insufficient session timeout vulnerability affects HCL Nomad server on Domino5.3 Medium
- Show moreLoading…