CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- cactiStored Cross-site Scripting (XSS) when creating external links in Cacti5.7 Medium
- cactiStored Cross-site Scripting (XSS) when creating external links in Cacti7.3 High
- discourseDenial of service by the absence of restrictions on replies to posts in Discourse7.5 High
- discoursePrevent topic list filtering by hidden tags for unauthorized users in Discourse5.3 Medium
- discourseBypass of email address validation via encoded email addresses in Discourse8.2 High
- meshtastic firmwareUnauthorized usage of remote hardware module because of missing channel verification6.4 Medium
- solidigm d5-p5316, d7-p5510, d7-p5520 +1 more +3 moreImproper resource management in firmware of some Solidigm DC Products may allow an attacker to...4.0 Medium
- solidigm d5-p5316, d7-p5520, d7-p5620 +2 moreImproper error handling in firmware of some SSD DC Products may allow an attacker to enable...6.5 Medium
- solidigm d5-p4320, d5-p4326, d5-p5316 +21 more +23 moreImproper access removal handling in firmware of some Solidigm DC Products may allow an attacker...6.7 Medium
- solidigm d5-p4320, d5-p4326, d5-p5316 +19 more +21 moreImproper access control validation in firmware of some Solidigm DC Products may allow an attacker...7.0 High
- xerox freeflow coreAuthenticated RCE via Path Traversal7.6 High
- xerox freeflow coreAuthenticated RCE via Path Traversal7.6 High
- xerox freeflow corePre-Auth RCE via Path Traversal8.3 High
- xerox freeflow corePre-Auth RCE via Path Traversal8.3 High
- xerox freeflow coreMissing Authentication - User & System Configuration8.3 High
- hp, inc. hp hotkey support, hp elite dragonfly max firmware +1 moreHP Hotkey Support – Escalation of Privilege8.8 High
- phpoffice phpspreadsheetXML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks5.4 Medium
- phpoffice phpspreadsheetPath traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet6.3 Medium
- phpoffice phpspreadsheetPath traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet7.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formEasySetTimezone buffer overflow8.7 High
@saltcorn/servernpmSaltcorn Server Stored Cross-Site Scripting (XSS) in event logs page5.1 Medium- saltcornLogged-in users with any role can delete arbitrary files in @saltcorn/server6.5 Medium
- winhexA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This...7.3 High
- winhexA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This...7.3 High
- d-link dir-619l b1, dlink dir-619l, dir-619l firmware +2 moreD-Link DIR-619L B1 formEasySetPassword buffer overflow8.7 High
- lara zeus dynamic dashboard, lara-zeus dynamic-dashboard +1 moreUnvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus5.3 Medium
- soplanningSQL Injection vulnerability in SOPlanning9.8 Critical
- soplanningSQL Injection vulnerability in SOPlanning6.3 Medium
- soplanningCross-Site Scripting vulnerability in SOPlanning6.3 Medium
- soplanningCross-Site Scripting vulnerability in SOPlanning6.3 Medium
- phpoffice phpspreadsheetUnauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet7.1 High
- d-link dir-619l b1, dlink dir-619l, dir-619l firmware +2 moreD-Link DIR-619L B1 formAdvNetwork buffer overflow8.7 High
- linux workbooth workboothImproper access control in Linux Workbooth Distro7.0 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formAdvFirewall buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formDeviceReboot buffer overflow8.7 High
- qualcomm fastconnect 6700 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +74 more +76 moreUse After Free in DSP Service7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sm7435 firmware +22 more +24 moreImproper Authorization in Performance6.1 Medium
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +114 more +116 moreBuffer Over-read in WLAN Host Communication7.5 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6700 firmware +157 more +159 moreBuffer Over-read in WLAN Host Communication8.2 High
- qualcomm mdm9628 firmware, qca6564a firmware, qca6564au firmware +3 more +5 moreBuffer Over-read in WLAN Host Communication7.5 High
- qualcomm mdm9628 firmware, qca6564a firmware, qca6564au firmware +3 more +5 moreBuffer Over-read in WLAN Host Communication7.5 High
- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +69 more +71 moreImproper Input Validation in WLAN Resource Manager9.8 Critical
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 moreImproper Input Validation in Camera8.4 High
- qualcomm mdm9628 firmware, qca6564a firmware, qca6564au firmware +3 more +5 moreBuffer Over-read in WLAN Host Communication8.2 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qam8255p firmware +32 more +34 moreDouble Free in DSP Services6.7 Medium
- qualcomm qam8255p firmware, qam8650p firmware, qam8775p firmware +16 more +18 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio6.7 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca6174a firmware +19 more +21 moreUse After Free in ComputerVision6.7 Medium
- qualcomm sa4150p firmware, sa4155p firmware, sa6155p firmware +12 more +14 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL6.7 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca6174a firmware +24 more +26 moreStack-based Buffer Overflow in Power Management IC6.7 Medium
- Show moreLoading…