CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The PFE will crash on running specific command6.8 Medium
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.8.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash7.1 High
- juniper junos, junos os evolved, juniper networks junos os +1 more +3 moreJunos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash8.2 High
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted7.7 High
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE6.9 Medium
- juniper junos spaceJunos Space: Remote Command Execution (RCE) vulnerability in web application6.9 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 more +4 moreJunos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization8.7 High
- eclipse mosquittoMemory leak7.2 High
- juniper junos os evolvedJunos OS Evolved: Low privileged local user able to view NETCONF traceoptions files5.1 Medium
- juniper junos os evolvedJunos OS Evolved: Connections to the network and broadcast address accepted5.3 Medium
- lenovo service frameworkA DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local...7.8 High
- lenovo pc manager ai intelligent scenario, pcmanager +1 moreA DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Low privileged user able to access sensitive information on file system6.8 Medium
- lenovo personal cloudA DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local...7.8 High
- lenovo baiyingA DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to...7.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets7.1 High
- lenovo leyunA DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to...7.8 High
- lenovo starstudioA DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to...7.8 High
- lenovo lock screenA DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker...7.8 High
- lenovo emulatorA DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to...7.8 High
- lenovo app storeA DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to...7.8 High
- lenovo superfileA DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to...7.8 High
- lenovo dolby vision provisioning software, dolby vision provisioning +1 moreA potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby...5.5 Medium
- makeplane planePlane allows server side request forgery via /_next/image endpoint9.3 Critical
- dataeaseDataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability9.3 Critical
- dena picotlsPicotls double free8.6 High
- dena quiclyQuicly assertion failures7.5 High
- dena h2oH2O assertion failure when HTTP/3 requests are cancelled3.7 Low
- dena h2oH2O alllows bypassing address-based access control with 0-RTT5.9 Medium
- dena h2oH2O ignores headers configuration directives3.1 Low
- kemptechnologies loadmasterImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- schneider electric data center expertCWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...5.9 Medium
- silabs.com efr32 ble sdkBLE peripheral DoS after few cycles of connect/disconnects6.5 Medium
- schneider electric data center expertCWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could...7.2 High
- schneider electric easergy studioCWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access,...7.8 High
- 07fly 07fly-cms, 07flycms, customer relationship management +2 more07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting5.1 Medium
- 07fly 07fly-cms, 07flycms, customer relationship management +2 more07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload5.1 Medium
- gitlabIncorrect Authorization in GitLab8.2 High
- lollms lollms-webui, parisneo lollms, parisneo/lollms +2 morePath Traversal in parisneo/lollms-webui3.4 Low
- paxtechnology paydroid, pax pos terminals +1 morePAX Android based POS devices allow for escalation of privilege via improperly configured scripts...6.7 Medium
hashbrowncrates.ioBorsh serialization of HashMap is non-canonical8.9 High- gitlabIncorrect Provision of Specified Functionality in GitLab4.3 Medium
- gitlabMissing Authentication for Critical Function in GitLab9.6 Critical
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template4.3 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template4.3 Medium
- webtoffee comments import & exportWordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal6.5 Medium
- sonicwall sma1000A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3...7.5 High
- sonicwall connect tunnelThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall...7.8 High
- Show moreLoading…