CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- rittal cmc iii processing units firmware, iot interface firmware, rittal gmbh & co. kg iot interface & cmc iii processing unit +1 more +3 morePredictable Session ID9.8 Critical
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop POST Request Master.php sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Report Viewing Page page sql injection5.3 Medium
- rittal gmbh & co. kg iot interface & cmc iii processing unit, rittal gmbh and co.kg iot interface and cmc iii processing unit +1 moreMissing Protection Mechanism for Alternate Hardware Interface6.8 Medium
- rittal gmbh & co. kg iot interface & cmc iii processing unitImproper signature verification of firmware upgrade files9.8 Critical
- tai smart factory qplant sfSQL injection in QPLANT by TAI Smart Factory9.8 Critical
- elbanyaoui smart online order for cloverSmart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode6.4 Medium
- ragic enterprise cloud databaseRagic Enterprise Cloud Database - Arbitrary File Upload10.0 Critical
- ragic enterprise cloud databaseRagic Enterprise Cloud Database - Missing Authentication9.8 Critical
- ragic enterprise cloud databaseRagic Enterprise Cloud Database - Arbitrary File Read through Path Traversal7.5 High
- esi technology aim line marketing platformESi Technology AIM LINE Marketing Platform - SQL Injection9.8 Critical
- formosasoft ee-class, ee class +1 moreFormosaSoft ee-class - Local File Inclusion8.8 High
- formosasoft ee-class, ee class +1 moreFormosaSoft ee-class - SQL Injection8.8 High
- numanrki aadmy – add auto date month year into posts, aadmy add auto date month year into posts +1 moreAADMY – Add Auto Date Month Year Into Posts <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- changate property management systemChanGate Property Management System - SQL Injection9.8 Critical
- shirasagi project shirasagiSHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path...8.6 High
- nvidia nemoNVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path...6.3 Medium
- automattic woocommerceWooCommerce <= 9.0.2 - Unauthenticated HTML Injection5.3 Medium
- markdown-to-jsxCross site scripting in markdown-to-jsx6.1 Medium
- new type flowmaster bpm plusNewType FlowMaster BPM Plus - SQL Injection8.8 High
- new type flowmaster bpm plusNewType FlowMaster BPM Plus - Privilege Escalation8.8 High
- newtype webeipNewType WebEIP v3.0 - Reflected XSS5.4 Medium
- new type webeipNewType WebEIP v3.0 - SQL injection8.8 High
- dueclic wp 2fa with telegram, authpress +1 moreWP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass6.5 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function4.3 Medium
- dueclic wp 2fa with telegram, authpress +1 moreWP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass8.8 High
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting5.1 Medium
- trustedfirmware mbed tls, mbed mbedtls +1 moreMbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque...9.8 Critical
- indutny ellipticValid ECDSA signatures erroneously rejected in Elliptic4.8 Medium
- ruijie nbr3000d-e firmwareAn issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information...7.5 High
- dycmsFile Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to...9.8 Critical
- wanxingtechnology yitu project management kirin editionAn issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote...9.8 Critical
- wanxingtechnology yitu project management softwareAn issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker...9.8 Critical
- tp-link tl-wdr7660 firmwareIn TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name...6.5 Medium
- tp-link tl-wdr7660 firmwareIn TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name...6.5 Medium
- tp-link tl-wdr7660 firmwareIn TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without...6.5 Medium
- tp-link tl-wdr7660 firmwareIn TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name...6.5 Medium
- domainmodIn segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be...5.3 Medium
- domainmodIn queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET...5.3 Medium
- domainmodA cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject...6.6 Medium
- online tours and travels management system project tours and travels management system, mayurik online tours \& travels management system +1 moreitsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI...9.8 Critical
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 morePhpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL...9.8 Critical
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreA SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration...7.6 High
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreA SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration &...7.6 High
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreA HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration &...7.6 High
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 morePhpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site...5.5 Medium
- davidepianca98 kmqttAn issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service(DoS) via a crafted request.7.5 High
github.com/gomarkdown/markdownGo,cri-oAzure Linux,fqopenSUSE +2 more +4 moreInfinite loop in github.com/gomarkdown/markdown5.1 MediumpdshopenSUSE,slurmopenSUSE,slurm_24_11openSUSE +4 more +6 moreFeature update for slurm and pdshNo score- codeigniterA Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change...7.5 High
- Show moreLoading…