CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- samsung sound assistantUse of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1...7.5 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1...7.5 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1...7.5 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR...7.5 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1...7.5 High
- google android, samsung mobile devices +1 moreImproper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows...4.1 Medium
- google android, samsung mobile devices +1 moreInteger overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12,...6.2 Medium
- ewelink zigbee bridge proFirmware extraction and Hardware SSL Pinning Bypass7.0 High
- mikkosaari relevanssiRelevanssi < 4.23.1 - Contributor+ Stored XSS5.4 Medium
- smashballoon custom twitter feedsCustom Twitter Feeds < 2.2.3 - Admin+ Stored XSS4.8 Medium
- notfound bridge coreBridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bahmutov ggitggit is vulnerable to Arbitrary Argument Injection via the clone() API6.5 Medium
- bahmutov ggitggit is vulnerable to Command Injection via the fetchTags(branch) API7.3 High
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)5.4 Medium
- sap s\/4 hana, sap se s/4 hana (manage bank statements) +1 moreHTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)4.3 Medium
- sap commerce backofficeCross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice5.4 Medium
- sap se hana client, sap hana-client +1 morePrototype Pollution vulnerability in SAP HANA Client4.3 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence) +1 moreInsecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)7.7 High
- openatom openharmonyLiteos_a has an Out-of-bounds Write vulnerability3.3 Low
- openatom openharmonyLiteos_a has an Improper Input Validation vulnerability3.3 Low
- openatom openharmonyLiteos_a has an Memory Leak vulnerability3.3 Low
- openatom openharmonyAccessTokenManager has an use after free vulnerability4.4 Medium
- openatom openharmonyLiteos_a has an out-of-bounds Read vulnerability5.5 Medium
fluent-bitOSS-FuzzUNKNOWN READ in cfl_sds_lenNo scoreapache2Debianapache2 - regression updateNo score- fire-boltt artillery smartwatch firmwareInsecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart...8.2 High
- publiccmsPublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via...4.8 Medium
- kirisun command and dispatch platformFujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL...9.8 Critical
- motorola cx2l firmwareA command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The...8.0 High
- anteeowmsA SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated...9.8 Critical
- microsoft .net, .net 6.0, .net 8.0 +8 more +10 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net 8.0, visual studio 2022 version 17.10 +4 more +6 more.NET and Visual Studio Remote Code Execution Vulnerability8.1 High
- adguard homeAdguard Home arbitrary file read vulnerability4.9 Medium
- xhtml2pdfxhtml2pdf Denial of Service via crafted string7.5 High
- solidigm d5-p4320, dc p4510, p4326 +11 more +13 moreImproper resource management in firmware of some Solidigm DC Products may allow an attacker to...6.2 Medium
- miraheze createwikiCross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki5.3 Medium
- miraheze wikidiscoverCross-site Scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover7.6 High
- solidigm d5-p4320, d5-p4326, dc p4510 +2 more +4 moreImproper resource shutdown in middle of certain operations on some Solidigm DC Products may allow...4.4 Medium
- vim, netapp bootstrap os +1 moreuse-after-free when closing buffers in Vim3.9 Low
- solidigm d7-p5500, d7-p5510, d7-p5520 +2 more +4 moreImproper resource initialization handling in firmware of some Solidigm DC Products may allow an...4.4 Medium
- discourseCross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse6.5 Medium
- solidigm d7-p5500, d7-p5510, d7-p5520 +2 more +4 moreRace condition during resource shutdown in some Solidigm DC Products may allow an attacker to...4.4 Medium
- inventreeStored Cross-site Scripting Vulnerability in Markdown Editor7.3 High
- solidigm d3-s4510, d3-s4520, d3-s4610 +4 more +6 moreIn some Solidigm DC Products, a defect in device overprovisioning may provide information...5.1 Medium
- cactiRemote code execution via Log Poisoning in Cacti7.2 High
- cactiStored Cross-site Scripting (XSS) when creating external links in Cacti5.7 Medium
- Show moreLoading…