CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are...3.7 Low
- oracle mysql, oracle corporation mysql client +1 moreVulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ...2.0 Low
- oracle graalvm, graalvm for jdk, jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle enterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business...4.3 Medium
- oracle fusion middleware, oracle corporation service bus +1 moreVulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core...6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, mysql cluster +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...4.9 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.1 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). ...6.5 Medium
- oracle bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates...7.6 High
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...4.9 Medium
- oracle fusion middleware, oracle corporation enterprise manager for fusion middleware +1 moreVulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion...4.4 Medium
- oracle fusion middleware, oracle corporation enterprise manager fusion middleware control +1 moreVulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion...7.6 High
- oracle fusion middleware, oracle corporation global lifecycle management fmw installer +1 moreVulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion...7.5 High
- oracle hospitality opera 5Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications ...9.0 Critical
- hp inc. certain hp designjet products, hp 1jl02b firmware, designjet t730 firmware +15 more +17 moreCertain HP DesignJet products – Credential reflection7.5 High
- astroxnetwork agent dartAgent Dart missing certificate verification checks8.7 High
- vendureVendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy9.1 Critical
- honoHono vulnerable to bypass of CSRF Middleware by a request without Content-Type header.5.9 Medium
- encode starletteStarlette Denial of service (DoS) via multipart/form-data8.7 High
- matrix-org matrix-react-sdkMalicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room8.7 High
- @clerk vueRegular Expression Denial of Service (ReDoS)3.7 Low
- element-hq element-webElement Web vulnerable to potential exposure of access token via authenticated media7.0 High
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 Medium
- element-hq element-desktopElement Desktop vulnerable to potential exposure of access token via authenticated media7.0 High
- matrix-org matrix-js-sdkmatrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver8.7 High
- sakailms sakaiSakai: Kernel users created with type roleview can login as a normal user8.7 High
- code-projects blood bank management systemcode-projects Blood Bank Management System member_register.php sql injection6.9 Medium
- mitrastar gpt-2541gnacMitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection5.1 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System manage_customer.php sql injection5.3 Medium
- rems drag and drop image uploadSourceCodester Drag and Drop Image Upload upload.php unrestricted upload5.3 Medium
- linux, linux kernel +1 moremm: avoid leaving partial pfn mappings around in error case7.8 High
- acronis cyber protect 16, cyber protect +1 moreSensitive information manipulation due to improper authorization. The following products are...3.1 Low
- acronis cyber protect 16, cyber protect +1 moreCleartext transmission of sensitive information in acep-collector service. The following products...5.4 Medium
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-collector service due to binding to an unrestricted IP address....3.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-importer service due to binding to an unrestricted IP address....3.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in archive-server service due to binding to an unrestricted IP address....3.5 Low
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: tmp directory exposed via webservice7.5 High
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords9.8 Critical
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Remote code execution via confnet service9.8 Critical
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +24 more +26 moreMB connect line/Helmholz: Weak encryption of configuration file8.4 High
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +12 more +14 moreMB connect line/Helmholz: Generation of weak passwords vulnerability7.5 High
- rex100 helmholz, helmholz rex100, rex 100 firmware +2 more +4 moreMB connect line/Helmholz: Remote code execution due to improper input validation8.4 High
- Show moreLoading…