CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- centreonAn issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before...7.2 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +15 more +17 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset...6.2 Medium
- d-zero burgereditor, burgereditor limited edition +1 moreA directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and...5.3 Medium
- mirotalk p2pIncorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change...7.5 High
- No product listedMirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS)...4.7 Medium
- mirotalk p2pIncorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before...9.1 Critical
- mirotalk p2pIncorrect access control in the component app/src/server.js of Mirotalk before commit 9de226...7.5 High
- dlink di-8200 firmwareA vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp...6.5 Medium
- wayos fbm 292w firmwareA vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This...8.8 High
- dlink di-8200 firmwareA vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This...8.8 High
- angular-base64-upload-project angular-base64-uploadangular-base64-upload vulnerable to unauthenticated remote code execution9.8 Critical
- No product listedAn issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes,...7.7 High
- netgear ex3700 ac750, ex3700 firmware +1 moreNetgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an...8.4 High
- netgear xr1000, xr1000 firmware +1 moreNetgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the...8.4 High
- oretnom23 online veterinary appointment systemSourceCodester Online Veterinary Appointment System manage_category.php sql injection6.9 Medium
- blood bank system project bank system, code-projects blood bank system +1 morecode-projects Blood Bank System update.php sql injection5.3 Medium
gradioPyPIGradio's dropdown component pre-process step does not limit the values to those in the dropdown list2.7 Low- gradio-app gradioCross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files6.9 Medium
- gradio-app gradioInsecure communication between the FRP client and server in Gradio8.2 High
- gradio-app gradioRace condition in update_root_in_config may redirect user traffic in Gradio7.1 High
- gradio-app gradioNon-constant-time comparison when comparing hashes in Gradio2.3 Low
- gradio-app gradioSeveral components’ post-process steps may allow arbitrary file leaks in Gradio6.3 Medium
- gradio-app gradioLack of integrity check on the downloaded FRP client in Gradio2.1 Low
- codezips tourist management systemCodezips Tourist Management System change-image.php unrestricted upload5.1 Medium
- gradio-app gradioSSRF in the path parameter of /queue/join in Gradio6.9 Medium
- gradio-app gradioThe `enable_monitoring` flag set to `False` does not disable monitoring in Gradio2.3 Low
- gradio-app gradioOne-level read path traversal in `/custom_component` in Gradio2.3 Low
- gradio-app gradioCORS origin validation accepts the null origin in Gradio6.9 Medium
- codezips tourist management systemCodezips Tourist Management System create-package.php unrestricted upload5.1 Medium
- bdtask pharmacy management systemCodezips Pharmacy Management System update.php sql injection6.9 Medium
- gradio-app gradioThe `is_in_or_equal` function may be bypassed in Gradio2.3 Low
- gradio-app gradioCORS origin validation is not performed when the request has a cookie in Gradio6.9 Medium
- github enterprise serverAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature w…9.5 Critical
- bdtask pharmacy management systemCodezips Pharmacy Management System register.php sql injection6.9 Medium
- code-projects crud operation systemcode-projects Crud Operation System delete.php sql injection6.9 Medium
- hashicorp vault, vault enterprise, openbao +2 moreVault Operators in Root Namespace May Elevate Their Privileges7.2 High
- code-projects restaurant reservation system, restaurant reservation system project reservation system +1 morecode-projects Restaurant Reservation System filter3.php sql injection6.9 Medium
- jkev record management systemSourceCodester Record Management System sort2_user.php cross site scripting5.3 Medium
- online eyewear shop project eyewear shop, oretnom23 online eyewear shop +1 moreSourceCodester Online Eyewear Shop Master.php delete_product sql injection5.3 Medium
- online eyewear shop project eyewear shop, oretnom23 online eyewear shop +1 moreSourceCodester Online Eyewear Shop sql injection5.3 Medium
- classroombookingsCraig Rodway Classroombookings Session Page sessions cross site scripting5.1 Medium
- classroombookingsCraig Rodway Classroombookings Room Page fields cross site scripting5.3 Medium
- smp7, wp.insider simple membership after login redirectionWordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability4.7 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 4.0.4.5 - Open Redirection vulnerability4.7 Medium
- eyecix jobsearch, jobsearch wp job board +1 moreWordPress WP JobSearch plugin <= 2.5.9 - PHP Object Injection vulnerability9.8 Critical
- code-projects blood bank systemcode-projects Blood Bank System campsdetails.php cross site scripting5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System campsdetails.php sql injection5.1 Medium
- delta electronics cncsoft-g2Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G28.4 High
- delta electronics cncsoft-g2Out-of-bounds Read vulnerability in Delta Electronics CNCSoft-G28.4 High
- delta electronics cncsoft-g2Heap-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G28.4 High
- Show moreLoading…