CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- tophive ultimate aiUltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check5.6 Medium
- elbanyaoui smart online order for cloverSmart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting6.1 Medium
- flycart discount rules for woocommerceDiscount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting4.7 Medium
- india-web-developer seo managerSEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta6.4 Medium
apache2Debianapache2 - regression updateNo score- dingfanzu cms, timgreen dingfanzu cms +1 moredingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro...6.1 Medium
- phpgurukul teachers record management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in...6.1 Medium
- classcmsClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which...9.8 Critical
- piwigoA cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5...5.4 Medium
- piwigoA cross-site scripting (XSS) vulnerability in the component /admin.php?page=album of Piwigo v14.5...6.1 Medium
- redaxoREDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability.7.2 High
- redaxoPath traversal in redaxo4.9 Medium
- webmin userminA discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows...5.3 Medium
- ibm watson studio localIBM Watson Studio Local cross-site request forgery4.3 Medium
- railsAction Mailer has possible ReDoS vulnerability in block_format6.6 Medium
- railsAction Text has possible ReDoS vulnerability in plain_text_for_blockquote_node6.6 Medium
- railsAction Controller has possible ReDoS vulnerability in HTTP Token authentication6.6 Medium
- railsAction Dispatch has possible ReDoS vulnerability in query parameter filtering6.6 Medium
- microsoft power platformPower Platform Information Disclosure Vulnerability8.6 High
- microsoft azure functionsImagine Cup site Information Disclosure Vulnerability7.5 High
- microsoft dataverseMicrosoft Dataverse Elevation of Privilege Vulnerability8.7 High
- mozilla firefox, firefox for ios +1 moreOpening an external link to an HTTP website when Firefox iOS was previously closed and had an...9.1 Critical
- ibm websphere application serverIBM WebSphere Application Server denial of service5.9 Medium
- kubernetes image builderVM images built with Image Builder with some providers use default credentials during builds6.3 Medium
- kubernetes image builderVM images built with Image Builder and Proxmox provider use default credentials9.8 Critical
- google chromeInappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a...5.3 Medium
- google chromeInsufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58...8.8 High
- google chromeInappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote...4.3 Medium
- google chromeInsufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a...4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a...4.3 Medium
- google chromeUse after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to...7.5 High
- google chromeUse after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who...8.8 High
- google chromeInappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed...4.3 Medium
- google chromeUse after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who...8.8 High
- google chromeInappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723...7.8 High
- google chromeUse after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote...8.8 High
- google chromeUse after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to...8.8 High
- oracle peoplesoft enterprise, oracle corporation peoplesoft enterprise elm enterprise learning management +1 moreVulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle...5.4 Medium
- oracle banking liquidity managementVulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services...7.1 High
- oracle banking liquidity managementVulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services...7.1 High
- oracle peoplesoft enterprise, oracle corporation peoplesoft enterprise hcm global payroll core +1 moreVulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft ...8.1 High
- oracle e-business suite, oracle corporation financials +1 moreVulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common...8.1 High
- oracle banking liquidity managementVulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services...5.3 Medium
- oracle service contractsVulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component:...8.1 High
- oracle e-business suite, oracle corporation sourcing +1 moreVulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Auctions). ...8.1 High
- oracle e-business suite, oracle corporation contract lifecycle management for public sector +1 moreVulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E...8.1 High
- oracle e-business suite, oracle corporation mes for process manufacturing +1 moreVulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite ...8.1 High
- oracle e-business suite, oracle corporation work in process +1 moreVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component:...8.1 High
- oracle e-business suite, oracle corporation quoting +1 moreVulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface...8.1 High
- Show moreLoading…