CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- jtekt kostac plc, kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +2 moreStack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name:...7.8 High
- electronics.jtekt kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +1 moreOut-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo...7.8 High
- google chromeInsufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote...9.6 Critical
- google chromeInteger overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to...8.8 High
- syrotech sy-gpon-8olt-l3 firmwareSyrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command...8.0 High
- bandisoft bandiviewBandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability...6.3 Medium
- bandisoft bandiviewBandisoft BandiView 7.05 is Incorrect Access Control via sub_0x232bd8 resulting in denial of...6.3 Medium
- bandisoft bandiviewBandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted...6.5 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreBuffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor...8.0 High
- draytek vigor3910 firmwareDrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a...8.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreAn issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive...7.5 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via...9.8 Critical
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query...8.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.6.1 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreSeveral CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of...8.0 High
- draytek vigor3910 firmwareDrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.8.8 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreThe CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are...8.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreStored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting...5.4 Medium
- draytek vigor3910 firmwareA stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a...8.0 High
- draytek vigor3910 firmwareDrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability...6.8 Medium
- draytek vigor3910 firmwareDrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users,...4.7 Medium
- draytek vigor3910 firmwareDrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by...4.7 Medium
- zabbixAuthentication privilege escalation via user groups due to missing authorization checks7.5 High
- zabbixThe implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and...6.5 Medium
- joinmastodon mastodonIn Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request...5.9 Medium
- zabbixValue of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added2.2 Low
- eufy homebase 2 firmwareEufy HomeBase 2 model T8010X v3.2.8.3h was discovered to use the deprecated wireless protocol...8.2 High
- pomeriumPomerium's service account access token may grant unintended access to databroker API6.8 Medium
- foxit reader, foxitsoftware foxit reader, foxit pdf reader +2 moreA use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkbox ...8.8 High
- openc3 cosmosOpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)4.8 Medium
- openc3 cosmosOpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)5.3 Medium
- openc3 cosmosOpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)5.1 Medium
- hp, inc. hp one agent software, hp inc one agent software +1 moreHP One Agent Software – Potential Privilege Escalation8.0 High
- linear emerge e3-series, nortekcontrol emerge e3 firmware +1 moreLinear eMerge e3-Series Forgot Password Command Injection9.8 Critical
- brian voelker slim selectSlim Select 2.0 createOption "text" XSS5.4 Medium
- cisco meraki mx firmware, meraki mx100 firmware, meraki mx105 firmware +23 more +25 moreA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...5.8 Medium
- cisco meraki mx firmware, meraki mx100 firmware, meraki mx105 firmware +23 more +25 moreA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...5.8 Medium
- cisco meraki mx, meraki mx firmware, meraki mx100 firmware +25 more +27 moreA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...5.8 Medium
- cisco meraki mx, meraki mx firmware, meraki mx100 firmware +25 more +27 moreMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z...8.6 High
- cisco meraki mx, meraki mx firmware, meraki mx100 firmware +25 more +27 moreMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z...8.6 High
- cisco meraki mx, meraki mx firmware, meraki mx100 firmware +25 more +27 moreA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...5.8 Medium
- cisco meraki mx, meraki mx firmware, meraki mx100 firmware +25 more +27 moreMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z...8.6 High
inventreePyPIInventree Server-Side Request Forgery vulnerability exposes server port/internal IP5.3 Medium- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.8 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv042 firmware, rv042g firmware +2 more +4 moreCisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities6.5 Medium
- Show moreLoading…