CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()9.1 Critical
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: check skb is non-NULL in tcp_rto_delta_us()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Skip Recompute DSC Params if no Stream on Link5.5 Medium
- linux, linux kernel +1 morescsi: sd: Fix off-by-one error in sd_read_block_characteristics()8.6 High
- linux, linux kernel +1 morewifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he5.5 Medium
- linux, linux kernel +1 moref2fs: check discard support for conventional zones5.5 Medium
- linux, linux kernel +1 morevfs: fix race between evice_inodes() and find_inode()&iput()7.8 High
- linux, linux kernel +1 moreicmp: change the order of rate limits9.4 Critical
- linux, linux kernel +1 moreexfat: resolve memory leak from exfat_create_upcase_table()5.5 Medium
- linux, linux kernel +1 moremm/hugetlb.c: fix UAF of vma in hugetlb fault pathway7.8 High
- linux, linux kernel +1 morebpf: Fix use-after-free in bpf_uprobe_multi_link_attach()7.8 High
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rextheme wp vrWordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability4.3 Medium
- colorlib simple custom post orderWordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability4.3 Medium
- latepointWordPress LatePoint plugin <= 4.9.91 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- aman funnelkit automations, funnelkit automations +1 moreWordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability7.6 High
- pollbytotalsoft ts pollTS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection7.2 High
- wellchoose administrative management systemWellchoose Administrative Management System - OS Command Injection8.8 High
- wellchoose administrative management systemWellchoose Administrative Management System - Arbitrary File Upload8.8 High
- wellchoose administrative management systemWellchoose Administrative Management System - Arbitrary File Read through Path Traversal7.5 High
- bdtask pharmacy management system, code-projects pharmacy management +1 morecode-projects Pharmacy Management System Manage Medicines Page manage_medicine.php cross site scripting5.1 Medium
- elecom co.,ltd. wab-i1750-ps, wab-s1167-ps, elecom wab-i1750-ps firmware +4 more +6 moreStack-based buffer overflow vulnerability exists in WAB-I1750-PS and WAB-S1167-PS. By processing...8.8 High
- bdtask pharmacy management system, code-projects pharmacy management +1 morecode-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting5.1 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System Manage Supplier Page manage_supplier.php cross site scripting5.1 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System add_new_invoice.php sql injection5.3 Medium
python-sqlDebian,python-python-sqlopenSUSE +1 morePython-sql: python-sql unary operators does not escape non-expression6.5 Medium- codeastro membership management systemCodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the...5.4 Medium
- dcnetworks dcme-320-l firmwareAn issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- arm32x command block ideIn Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization ...7.5 High
- angeljudesuarez online clinic management system, online clinic management system project clinic management system +1 moreOnline Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via...8.1 High
- lang-learn-guy learning with texts, learning with texts with texts +1 moreLearning with Texts (LWT) 2.0.3 is vulnerable to SQL Injection. This occurs when the application...9.8 Critical
- funadminSQL injection in funadmin7.2 High
- mitel micollabA vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab...8.2 High
- mitel micollabA vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab...6.5 Medium
- mitel micollabA vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab...9.4 Critical
- mitel micollabThe API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab...7.7 High
- pkp pkb-libPublic Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack...6.1 Medium
- phpgurukul hospital management systemMultiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0...5.9 Medium
- phpgurukul hospital management systemMultiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management...5.9 Medium
- codeastro membership management systemCodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the...5.4 Medium
- mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 moreA vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and...8.8 High
- mitel micollabA vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8...9.1 Critical
- mitel micollabA vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow...6.6 Medium
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreVilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows...5.3 Medium
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreVilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak...4.3 Medium
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreA Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote,...9.1 Critical
- vilo 5 mesh wifi system, viloliving vilo 5 firmware +1 moreA Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33...5.3 Medium
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreVilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of...9.6 Critical
- viloliving vilo 5 mesh wifi system firmwareA Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh...9.6 Critical
- viloliving vilo 5 mesh wifi system firmwareA Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi...9.6 Critical
- Show moreLoading…