CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Information Disclosure Vulnerability6.5 Medium
- cisco telepresence video communication server (vcs) expressway, telepresence video communication server +1 moreCisco Expressway Series Privilege Escalation Vulnerability6.0 Medium
- cisco nexus dashboard insights, nexus dashboard fabric controller, nexus dashboard orchestrator +2 moreCisco Nexus Dashboard Insights Information Disclosure Vulnerability6.3 Medium
- cisco nexus dashboard orchestrator, nexus dashboard fabric controller, data center network manager +1 more +3 moreCisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator Information Disclosure Vulnerability6.3 Medium
- cisco nexus dashboard, nexus dashboard fabric controller, data center network manager +2 moreCisco Nexus Dashboard Fabric Controller Unauthorized REST API Endpoint Vulnerability5.4 Medium
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability7.2 High
- cisco nexus dashboard fabric controller, data center network manager +1 moreCisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability8.8 High
- cisco data center network manager, nexus dashboard fabric controller +1 moreCisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability6.3 Medium
- cisco data center network manager, nexus dashboard fabric controller +1 moreCisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability5.5 Medium
- cisco nexus dashboard, nexus dashboard fabric controller +1 moreCisco Nexus Dashboard Unauthorized API Endpoints Vulnerability5.4 Medium
- cisco nexus dashboard, nexus dashboard fabric controller, data center network manager +2 moreCisco Nexus Dashboard Fabric Controller Unauthorized API Endpoint Vulnerability5.7 Medium
- cisco nexus dashboard, nexus dashboard fabric controller, data center network manager +2 moreCisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability6.3 Medium
- cisco nexus dashboard fabric controller, data center network manager +1 moreCisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability9.9 Critical
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation Vulnerability8.8 High
- cisco nexus dashboard orchestratorCisco Nexus Dashboard Orchestrator SSL Certificate Validation Vulnerability5.9 Medium
- cisco unified computing system (managed), unified computing system, unified computing system manager firmware +2 moreCisco Integrated Management Controller Redfish Command Injection Vulnerability6.5 Medium
- drupal persistent login, persistent login project login +1 morePersistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-0449.8 Critical
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-0439.8 Critical
- diff project diffDiff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-0429.1 Critical
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin lacks issuer claim validation8.1 High
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin lacks audience claim validation8.1 High
- jenkins credentials, jenkins project credentials plugin +1 moreJenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission7.5 High
- jenkinsJenkins item creation restriction bypass vulnerability4.3 Medium
- jenkinsJenkins exposes multi-line secrets through error messages4.3 Medium
- hp inc. certain hp laserjet printers, hp 1y7d4a firmware, 2a129a firmware +101 more +103 moreCertain HP LaserJet Printers – Potential Denial of Service5.3 Medium
- microfocus verticaIncorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.6.9 Medium
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for...7.8 High
- miraheze datadumpXSS in Special:DataDump when displaying dump status3.5 Low
- tukaani xzXZ Utils on Microsoft Windows platform are vulnerable to argument injection6.3 Medium
- google android, nest cam \(indoor\, wired\) firmware, nest cam \(outdoor or indoor\, battery\) firmware +6 more +8 moreAccording to the researcher: "The TLS connections are encrypted against tampering or...9.8 Critical
- code-projects restaurant reservation systemcode-projects Restaurant Reservation System filter2.php sql injection5.3 Medium
- sophos intercept xA local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device...8.8 High
- bytecodealliance wasmtimeWasmtime runtime crash when combining tail calls with trapping imports5.5 Medium
- canonical jujuVulnerable juju introspection abstract UNIX domain socket7.9 High
- canonical jujuVulnerable juju hook tool abstract UNIX domain socket6.5 Medium
- schneider elektronik series 700Schneider Elektronik Series 700 prone to missing authentication for traffic capture function6.5 Medium
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secret8.7 High
- schneider elektronik series 700Schneider Elektronik Series 700 prone to missing authentication for critical reset function9.1 Critical
- connekthq ajax load more, dcooney ajax load more – infinite scroll, load more, & lazy load +1 moreWordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter6.4 Medium
- vowelweb ibtana, ibtana – wordpress website builder +1 moreIbtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute6.4 Medium
- minhyeong lim mh boardWordPress MH Board plugin <= 1.3.2.1 - Local File Inclusion vulnerability7.5 High
- mestres do wp checkout mestres wpWordPress Checkout Mestres WP plugin <= 8.6 - Local File Inclusion vulnerability7.2 High
- themegrill magazine blocks, wpblockart magazine blocks – blog designer, magazine & newspaper website builder, page builder with posts blocks, post grid, blockart blocks +2 moreMagazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting6.1 Medium
- icopydoc yml for yandex marketYML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting6.1 Medium
- berqier berqwp, berqwp – automated all-in-one page speed optimization for core web vitals, cache, cdn, images, css, and javascript +1 moreBerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript <= 2.1.1 - Reflected Cross-Site Scripting6.1 Medium
- rabbitloader, sanrl rabbitloader – ai speed optimization, caching & cdn for wordpress & woocommerce +1 moreRabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting6.1 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting6.1 Medium
- dvankootem mailchimp top bar, dvankooten mc4wp: mailchimp top bar +1 moreMC4WP: Mailchimp Top Bar <= 1.6.0 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…