CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- palo alto networks cortex xsoarCortex XSOAR: Information Disclosure Vulnerability5.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the Agent5.7 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet8.2 High
- palo alto networks expeditionExpedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure7.0 High
- palo alto networks expeditionExpedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure8.2 High
- palo alto networks expeditionExpedition: SQL Injection Leads to Firewall Admin Credential Disclosure9.2 Critical
- palo alto networks expeditionExpedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure9.3 Critical
- palo alto networks expeditionExpedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure9.9 Critical
- drupal wkhtmltopdfwkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-0499.8 Critical
- microsoft copilot studioCopilot Studio Information Disclosure Vulnerability7.4 High
- drupal gutenbergGutenberg - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-0488.8 High
- drupal facetsFacets - Critical - Cross Site Scripting - SA-CONTRIB-2024-0476.1 Medium
- block permissions project permissions, drupal block permissions +1 moreBlock permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-0468.8 High
- drupal monster menus, monster menus project menus +1 moreMonster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-0459.1 Critical
- progress telerik report server, progress software telerik reporting +1 moreTelerik Report Server Insecure Type Resolution9.1 Critical
- linux, linux kernel +1 morewifi: iwlwifi: mvm: pause TCM when the firmware is stopped5.5 Medium
- linux, linux kernel +1 moreUSB: usbtmc: prevent kernel-usb-infoleak5.5 Medium
- linux, linux kernel +1 moreocfs2: add bounds checking to ocfs2_xattr_find_entry()7.8 High
- progress telerik report serverAccount Controller allows high count of login attempts7.5 High
- progress telerik report server, telerik reporting +1 moreUncontrolled resource consumption of anonymous endpoints7.5 High
- progress telerik report server, telerik reporting +1 morePassword policy for new users is not strong enough7.5 High
- progress telerik reportingImproper neutralization special element in hyperlinks7.8 High
- red hat 3scale api management platform 2, redhat 3scale api management platform +1 moreSystem: pdf invoices of the developer users can be seen if the url is known5.3 Medium
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Unrestricted Upload of File with Dangerous Type (CWE-434)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Read (CWE-125)7.8 High
- adobe framemakerAdobe Framemaker | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe framemakerAdobe Framemaker | Untrusted Search Path (CWE-426)7.8 High
- progress telerik reportingTelerik Reporting Insecure Expression Evaluation7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434)7.8 High
- progress telerik reportingTelerik Reporting EntityDataSource Insecure Type Resolution8.8 High
- linux, linux kernel +1 morenilfs2: fix state management in error path of log writing function7.3 High
- linux, linux kernel +1 morelib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()7.8 High
- linux, linux kernel +1 morePCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)7.3 High
- linux, linux kernel +1 morescsi: pm80xx: Set phy->enable_completion only when we wait for it5.5 Medium
- linux, linux kernel +1 morei3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup5.5 Medium
- linux, linux kernel +1 morespi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware5.5 Medium
- linux, linux kernel +1 morestaging: iio: frequency: ad9834: Validate frequency parameter value5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Remove register from DCN35 DMCUB diagnostic collection5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Avoid overflow from uint32_t to uint8_t5.5 Medium
- adobe incopyInCopy | Unrestricted Upload of File with Dangerous Type (CWE-434)7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morefsnotify: clear PARENT_WATCHED flags lazily4.7 Medium
- linux, linux kernel +1 moresmack: tcp: ipv4, fix incorrect labeling9.1 Critical
- linux, linux kernel +1 morecrypto: stm32/cryp - call finalize with bh disabled7.5 High
- debian linux, linux kernel +1 moredrm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX7.8 High
- linux, linux kernel +1 moredrm/amd/display: Disable DMCUB timeout for DCN354.7 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Write-what-where Condition (CWE-123)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- Show moreLoading…