CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- qualcomm qca6584au firmware, qca6698aq firmware, qca9367 firmware +9 more +11 moreUse After Free in Automotive Multimedia6.7 Medium
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +116 more +118 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOS7.8 High
- qualcomm qam8295p firmware, qca6584au firmware, qca6595 firmware +18 more +20 moreUntrusted Pointer Dereference in DSP Service7.8 High
- notfound mobile, rocketchat rocket.chat +1 moreThe E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient,...6.7 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
pastecrates.iopaste - no longer maintainedNo scoredbncrates.ioDatabento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function6.8 Medium- redisLua library commands may lead to stack overflow and RCE in Redis7.0 High
- redisDenial-of-service due to unbounded pattern matching in Redis5.5 Medium
- redisDenial-of-service due to malformed ACL selectors in Redis4.4 Medium
- stylemix ulistingWordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability5.3 Medium
- bit apps form, unknown bit form +1 moreWordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability7.6 High
- google android, mediatek, inc. mt3605, mt6985, mt6989, mt6990, mt7927, mt8678, mt8796, mt8893 +1 moreIn wlan driver, there is a possible out of bounds read due to improper input validation. This...4.9 Medium
- google android, linuxfoundation yocto, mediatek mt6768 +6 more +8 moreIn power, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, linuxfoundation yocto, mediatek mt6768 +18 more +20 moreIn power, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6785, mt6789, mt6853, mt6873, mt6885, mt8666, mt8667, mt8673, mt8675, mt8678 +1 moreIn vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8666, mt8667, mt8673, mt8675, mt8678 +1 moreIn m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8666, mt8667, mt8673, mt8675, mt8678 +1 moreIn m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to...4.4 Medium
- d-link dir-605l, dir-650l, dlink dir-605l firmware +2 moreD-Link DIR-605L formSetPassword buffer overflow8.7 High
- d-link dir-605l, dir-650l, dlink dir-605l firmware +2 moreD-Link DIR-605L formWlanWizardSetup buffer overflow8.7 High
- mecha-cms mecha, mecha cms +1 moreMecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs...9.8 Critical
- tp-link wr740n firmwareTP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm...5.5 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- sismics teedyTeedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.8.4 High
- ruoyiRuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code...9.8 Critical
- iothaat smart plug ih in 16a sIoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay.8.8 High
- No product listedIoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration....6.5 Medium
- online news portal project news portalOnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute...6.6 Medium
- webkul krayin crmKrayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name4.8 Medium
- solvaitA security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate...6.5 Medium
- bluecms project bluecmsBlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin...4.9 Medium
- vegabird vookiA DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code ...9.8 Critical
- vegabird yaazhiniA DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary...9.8 Critical
- dlink covr-2600r firmwareD-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the...5.7 Medium
- samsung exynos 850 firmware, exynos 980 firmware, exynos 9820 firmware +3 more +5 moreAn issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable...8.1 High
- elaine marketing automationA reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17...6.1 Medium
- limesurveyLimeSurvey Cross Site Scripting vulnerability6.1 Medium
- limesurveyLimeSurvey Cross Site Scripting vulnerability6.1 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formWlanSetup_Wizard buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWizard2 buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWAN_Wizard52 buffer overflow8.7 High
- esafenet cdgESAFENET CDG Catelogs;logindojojs delCatelogs sql injection5.3 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formWlanSetup buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWanPPTP buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWanPPPoE buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetEnableWizard buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetEasy_Wizard buffer overflow8.7 High
- saad iqbal wpexperts square for givewpWordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability8.5 High
- unknown yith woocommerce ajax searchWordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability9.3 Critical
- axton wp-webauthnWordPress WP-WebAuthn plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…