CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- trtek software distant education platformSQLi in TRtek Software's Distant Education Platform8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker was able to achieve code execution in the content process by exploiting a use-after...9.8 Critical
- apache subversionApache Subversion: Command line argument injection on Windows platforms8.2 High
- apache xml graphics fop, formatting objects processor +1 moreApache XML Graphics FOP: XML External Entity (XXE) Processing7.5 High
- zoho flow flowWordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability7.6 High
- adobe lightroom, lightroom desktop +1 moreLightroom Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- rami.io gmbh pretix widget wordpress plugin, pretiix widget wordpress plugin +1 moreLocal File Inclusion in pretix-widget WordPress plugin8.5 High
- adobe animateAnimate | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe animateAnimate | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe animateAnimate | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
seamonkeyopenSUSESecurity update for seamonkeyNo score- adobe dimensionDimension | Use After Free (CWE-416)7.8 High
- adobe dimensionDimension | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Read (CWE-125)5.5 Medium
- afragen embed pdf viewerEmbed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters6.4 Medium
- dell appsync, emc appsync +1 moreDell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection...2.9 Low
- gregross auto iframeAuto iFrame <= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter6.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn DRM service, there is a possible system crash due to null pointer dereference. This could lead...6.2 Medium
- google android, unisoc (shanghai) technologies co., ltd. t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn DRM service, there is a possible out of bounds write due to a missing bounds check. This could...6.2 Medium
- google android, unisoc s8000, sc7731e +12 more +14 moreIn linkturbonative service, there is a possible command injection due to improper input...6.5 Medium
- google android, unisoc t820, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +2 moreIn linkturbonative service, there is a possible command injection due to improper input...6.5 Medium
- google android, unisoc t820, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +2 moreIn linkturbonative service, there is a possible command injection due to improper input...6.5 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS4.8 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mount7.8 High
- cmsmasters content composerCMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- syracom secure loginThe Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows...5.9 Medium
- syracom secure loginThe Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows...5.4 Medium
- lemonldap-ng, lemonldap-ng lemonldap\ +1 moreA cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers...6.1 Medium
- draytek vigor3900 firmwareDrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the...8.0 High
- nanjing xingyuantu technology sparkshopA loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the...7.5 High
- libcoapA Buffer Overflow vulnerability in libcoap v4.3.5-rc2 and below allows a remote attacker to cause...7.5 High
- modsecurityA buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via...7.5 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the...5.4 Medium
- trustedfirmware trusted firmware-mAn issue was discovered in Trusted Firmware-M through 2.1.0. User provided (and controlled)...9.8 Critical
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to...7.2 High
- lemonldap-ngIncorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers...9.1 Critical
- No product listedLack of access control in ChallengeSolves (/api/v1/challenges/<challenge id>/solves) of CTFd v2.0...4.3 Medium
- gonitro nitro pdf proNitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in...7.8 High
- Show moreLoading…