CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- 4pace cadclickA reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and...5.4 Medium
- 4pace cadclickA SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before...8.8 High
- 4pace cadclickA Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick...3.9 Low
- emiloimagtolis online discussion forum, online discussion forum project discussion forum +1 moreFile Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote...8.8 High
- emiloimagtolis online discussion forum, online discussion forum project discussion forum +1 moreFile Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote...8.8 High
- taskcafe project taskcafeTaskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the...6.5 Medium
- taskcafe project taskcafeTaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a...9.8 Critical
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0...4.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and...5.5 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.7 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection9.3 Critical
@saltcorn/plugins-loadernpm@saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source7.3 High- optigo networks ons-s8 spectra aggregation switch, optigo ons-s8 firmware +1 moreOptigo Networks ONS-S8 Spectra Aggregation Switch Weak Authentication9.3 Critical
- optigo networks ons-s8 spectra aggregation switch, optigo ons-s8 firmware +1 moreOptigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion9.3 Critical
@saltcorn/servernpm@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings7.3 High@saltcorn/servernpm@saltcorn/server arbitrary file and directory listing when accessing build mobile app results5.5 Medium@saltcorn/servernpm@saltcorn/server arbitrary file zip read and download when downloading auto backups5.0 Medium- @clerk expressOpen Redirect4.7 Medium
@rootio/sentry__browserRoot,@sentry/browsernpm +1 moreSentry SDK Prototype Pollution gadget in JavaScript SDKs6.3 Medium- tem opera plus fm family transmitterMissing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter9.3 Critical
- tem opera plus fm family transmitterCross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter8.6 High
- webroot secureanywhere - web shield, secureanywhere web shield +1 moreType-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump6.3
- webroot secureanywhere - web shield, secureanywhere web shield +1 moreType confusion that can cause the WRSA.exe service to crash and generate a crash dump6.2
- webroot secureanywhere - web shield, secureanywhere web shield +1 moreUnhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump6.2
- open source opentofuOpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation8.7 High
- backstageUnexpected visibility of environment variable configurations in @backstage/plugin-app-backend5.8 Medium
- nvidia cuda toolkitNVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line...3.3 Low
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of Service5.3 Medium
- powerdns recursorCrafted responses can lead to a denial of service due to cache inefficiencies in the Recursor7.5 High
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of v1...8.4 High
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of...8.4 High
- veertu anka build, anka build cloud +1 moreA directory traversal vulnerability exists in the archive download functionality of Veertu Anka...7.5 High
- veertu anka build, anka build cloud +1 moreA privilege escalation vulnerability exists in the Veertu Anka Build 1.42.0. The vulnerability...7.8 High
- veertu anka build, anka build cloud +1 moreA directory traversal vulnerability exists in the log files download functionality of Veertu Anka...7.5 High
- campcodes online shopping portal, online shopping portal project shopping portal +1 moreCodezips Online Shopping Portal index.php sql injection6.9 Medium
- async-graphqlasync-graphql vulnerable to Directive Overload7.5 High
- suluReflected XSS Vulnerability in Sulu Media Bundle6.1 Medium
- avast antivirus, avg anti-virus +1 moreLocal privelage escalation via COM hijacking7.5 High
- suluSulu vulnerable to XSS via uploaded SVG5.1 Medium
- manageengine analytics plusLocal File Inclusion6.5 Medium
- bytecodealliance wasmtimeWasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations2.9 Low
- apache commons io, netapp active iq unified manager, bluexp +5 more +7 moreApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader4.3 Medium
- canonical authdPAM module may allow accessing with the credentials of another user8.8 High
- apache avro, apache software foundation avro java sdk, netapp active iq unified manager +1 more +3 moreApache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)9.2 Critical
- hewlett packard enterprise hpe icewall agent productsHPE IceWall Agent products, Cross-Site Request Forgery (CSRF)4.3 Medium
- faronics deepfreezeDeep Freeze 9.00.020.5760 - Out-of-bounds read6.4 Medium
- dejanmarkovic social web suite – social media auto post, social media auto publish, hypestudio social web suite +1 moreSocial Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download7.5 High
- jtekt kostac plc, kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +2 moreOut-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC...7.8 High
- Show moreLoading…