CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- automatic systems maintenance slimlaneAn issue in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7...7.5 High
- automatic systems maintenance slimlaneLocal file inclusion in Automatic Systems Maintenance SlimLane...9.8 Critical
- automatic systems maintenance slimlanePrivilege escalation in Automatic Systems Maintenance SlimLane...8.8 High
- automatic systems maintenance slimlaneCross Site Scripting vulnerability in Automatic Systems Maintenance SlimLane...6.1 Medium
- No product listedAn issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to...7.5 High
- hubble connected connectedAn issue in Hubble Connected (com.hubbleconnected.vervelife) 2.00.81 allows a remote attacker to...7.5 High
- pcs engineering preston cinemaAn issue in PCS Engineering Preston Cinema (com.prestoncinema.app) 0.2.0 allows a remote attacker...7.5 High
- equesAn issue in EQUES com.eques.plug 1.0.1 allows a remote attacker to obtain sensitive information...7.5 High
- creative labs pte ltd com creative apps xficonnectAn issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker...5.3 Medium
- inatronic drivedeckAn issue in INATRONIC com.inatronic.bmw 2.7.1 allows a remote attacker to obtain sensitive...5.9 Medium
- hideez com.hideez firmwareAn issue in Hideez com.hideez 2.7.8.3 allows a remote attacker to obtain sensitive information...7.5 High
- plug n play camera n play cameraAn issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to...7.5 High
- ilife com ilife home globalAn issue in ILIFE com.ilife.home.global 1.8.7 allows a remote attacker to obtain sensitive...5.3 Medium
- inatronic drivedeckAn issue in INATRONIC com.inatronic.drivedeck.home 2.6.23 allows a remote attacker to obtain...7.5 High
- magicbug cloudlogCloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.7.3 High
- wavelogWavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.9.8 Critical
- magicbug cloudlogCloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.9.8 Critical
- magicbug cloudlogCloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.9.8 Critical
- wavelogWavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat,...9.8 Critical
- wavelogWavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat,...7.3 High
- d-link dcs 960l, dlink dcs-960l firmware +1 moreA stack overflow vulnerability exists in the sub_402280 function of the HNAP service of D-Link...9.8 Critical
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...9.8 Critical
- d-link dir-820l, dlink dir-820l firmware +1 moreD-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.9.8 Critical
- x2engine x2crmX2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An...5.4 Medium
- vtiger crmVtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users...5.4 Medium
- ketr jepaas, jepass +1 moreJepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter...9.8 Critical
- kubesphereKubeSphere IDOR vulnerability4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17.6, visionOS 1.3,...5.5 Medium
- warp terminal terminalAn issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A...6.6 Medium
- netgear r7000 firmwareNetgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2...8.4 High
- netgear ex3700, ex6100, ex6120 +3 more +5 moreNetgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable...8.4 High
- netgear ex6120, ex6120 firmware +1 moreNetgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the...8.4 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7...7.8 High
- nagios xiNagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly...9.1 Critical
- netease qanything, netease-youdao netease-youdao/qanything +1 moreSQL Injection in netease-youdao/qanything9.8 Critical
- huangdou utcms, usualtool usualtoolcms +1 moreHuangDou UTCMS sql.php RunSql sql injection5.1 Medium
- schneider electric evlink home smart, charge +1 moreCWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test...8.5 High
- huangdou utcms, usualtool usualtoolcms +1 moreHuangDou UTCMS template_creat.php deserialization5.3 Medium
- huangdou utcms, usualtool usualtoolcms +1 moreHuangDou UTCMS cli.php os command injection6.9 Medium
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formVirtualServ buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetWizardSelectMode buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetRoute buffer overflow8.7 High
- d-link dir-619l b1, 202l, dlink dir-619l firmware +2 moreD-Link DIR-619L B1 formSetQoS buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetPortTr buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetPassword buffer overflow8.7 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetMuti buffer overflow8.7 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreDenial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui7.1 High
- d-link dir-619l b1, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 formSetMACFilter buffer overflow5.1 Medium
- qilecmsQileCMS Verification Code Forget.php sendEmail password recovery6.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop cross site scripting5.3 Medium
- Show moreLoading…