CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- delta electronics cncsoft-g2Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G28.4 High
- delta electronics cncsoft-g2Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G28.4 High
- code-projects blood bank management system, blood bank system +1 morecode-projects Blood Bank Management System blooddetails.php cross site scripting5.3 Medium
- btcd project btcdbtcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality7.4 High
- sourcecodester profile registration without reload refresh, rems profile registration without reload\/refresh +1 moreSourceCodester Profile Registration without Reload Refresh add.php cross site scripting5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System register.php sql injection6.9 Medium
- campcodes online shopping portal, online shopping portal project shopping portal +1 moreCodezips Online Shopping Portal update-image1.php unrestricted upload5.3 Medium
- pac4jDeserialization of untrusted data in InternalAttributeHandler in pac4j9.2 Critical
- tenda ac1206, ac1206 firmware +1 moreTenda AC1206 ate ate_ifconfig_set command injection5.3 Medium
- d-link dsl-2750u, dlink dsl-2750u firmware +1 moreD-Link DSL-2750U Port Forwarding Page cross site scripting5.1 Medium
- lylme spageLyLme_spage sou.php sql injection5.1 Medium
- lylme spageLyLme_spage apply.php sql injection5.1 Medium
- lylme spageLyLme_spage tag.php sql injection5.1 Medium
- canonical authdAuthd allows attacker-controlled usernames to yield controllable UIDs7.5 High
- te informatics nova cmsSQLi in TE Informatics' Nova CMS6.9 Medium
- contemporary control system basrouter bacnet basrt-b, ccontrols basrouter bacnet basrt-b firmware +1 moreContemporary Control System BASrouter BACnet BASRT-B UDP Packet denial of service6.9 Medium
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetLog buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetDDNS buffer overflow8.7 High
- abb robotware 6An attacker who successfully exploited these vulnerabilities could cause the robot to stop. A...5.1 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab7.3 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formResetStatistic buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formLogDnsquery buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formEasySetupWWConfig buffer overflow8.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project...5.4 Medium
- seur, seur plugin, seur oficial project oficial +2 moreSQL injection vulnerability in SEUR plugin9.4 Critical
- gitlabServer-Side Request Forgery (SSRF) in GitLab8.2 High
- gitlabInclusion of Sensitive Information in Source Code in GitLab3.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)4.8 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)5.4 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)2.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)6.1 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authentication (CWE-287)9.8 Critical
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)7.6 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)8.1 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)4.9 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)2.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.1 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)6.5 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)5.4 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authentication (CWE-287)8.8 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Information Exposure (CWE-200)2.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)6.5 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)2.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Medium
- gitlabIncorrect Authorization in GitLab4.9 Medium
- Show moreLoading…