CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- payara, payara platform server +1 morePayload Injection Attack via Management REST interface8.7 High
- typo3Information Disclosure in TYPO3 Page Tree3.1 Low
- fortinet fortianalyzer, fortianalyzer cloud +1 moreA use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4...6.8 Medium
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...3.1 Low
- robosoft robo gallery – photo & image sliderPhoto Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosure4.3 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget6.4 Medium
- boonebgorges buddypress docsBuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scripting6.1 Medium
- ays pro survey makerSurvey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- schneider electric system monitor application in harmony industrial pc hmibmo/hmibmi/hmipso/hmibmp/hmibmu/hmipsp/hmipep series, system monitor application in pro-face industrial pc ps5000 series, system monitor application in harmony industrial pc hmibmo hmibmi hmipso hmibmp hmibmu hmipsp hmipep series +2 moreCWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...9.8 Critical
- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power monitoring expert +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...7.3 High
- schneider electric zelio soft 2CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft...3.3 Low
- schneider electric zelio soft 2CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of...7.8 High
- milestone systems xprotect vmsCamera Driver possible Buffer Overflow7.3 High
- themehunk easy mega menu for wordpress – themehunkEasy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- amirhelzer wpml multilingual & multicurrency for woocommerceWooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scripting6.1 Medium
- siemens sinec security monitorA vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0)....5.3 Medium
- siemens sinec security monitorA vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0)....6.9 Medium
- siemens sinec security monitorA vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0)....9.3 Critical
- siemens sinec security monitorA vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0)....9.4 Critical
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- siemens simcenter femap v2306, simcenter femap v2401, simcenter femap v2406 +1 more +3 moreA vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran...7.3 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +84 more +86 moreThe web server of affected devices do not properly authenticate user request to the '/ClientArea...6.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +123 more +125 moreThe web server of affected devices does not properly validate input that is used for a user...5.1 Medium
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...4.8 Medium
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens teamcenter visualization v14.2, teamcenter visualization v14.3, teamcenter visualization v2312 +3 more +5 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- siemens simcenter femap v2306, simcenter femap v2401, simcenter femap v2406 +1 more +3 moreA vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran...7.3 High
- siemens jt2goA vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected...7.3 High
- siemens sentron 7km pac3200, sentron pac3200 +1 moreA vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only...9.3 Critical
- siemens himed cockpit 12 pro, himed cockpit 14 pro+, himed cockpit 18 pro +1 more +3 moreA vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >=...9.3 Critical
- latepoint, latepoint plugin +1 moreLatePoint <= 5.0.12 - Authentication Bypass9.8 Critical
- latepoint, latepoint plugin +1 moreLatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection9.8 Critical
- wp-buy limit login attempts (spam protection), limit login attempts +1 moreLimit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass5.3 Medium
- follet school solutions destinyReflected Cross-Site Scripting in Follet School Solutions Destiny5.1 Medium
- sirv image optimizer, resizer and cdn – sirv, sirv +1 moreImage Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- samsung mobile samsungvideoplayer, samsung video player +1 moreImproper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36...5.5 Medium
- samsung internetUse of implicit intent for sensitive communication in translation혻in Samsung Internet prior to...3.3 Low
- Show moreLoading…