CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- linux, linux kernel +1 moremedia: pci: cx23885: check cx23885_vdev_init() return5.5 Medium
- blazethemes news kit elementor addons, news kit addons for elementor +1 moreNews Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template4.3 Medium
- aftabhusain category and taxonomy imageCategory and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- aftabhusain category and taxonomy meta fieldsCategory and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- aftabhusain category and taxonomy meta fieldsCategory and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- aftabhusain category and taxonomy meta fieldsCategory and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete5.4 Medium
- te-st teplobot, gsuvorov teplobot – telegram bot for wp, te-st teplobot telegram bot for wp +2 moreTeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure8.6 High
- servmask all-in-one wp migration and backup, all-in-one wp migration +1 moreAll-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs5.3 Medium
- roveridx rover idxRover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions6.3 Medium
- roveridx rover idxRover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator8.8 High
- zyxel uos, usg flex h series uos firmware, usg flex 700h firmware +2 moreThe insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H...5.5 Medium
pcre2OSS-FuzzUse-of-uninitialized-value in jit_compileNo score- archerirm archerReflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6...5.2 Medium
- archerirm archerReflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x...5.2 Medium
- archerirm archerArcher Platform 2024.03 before version 2024.09 is affected by an API authorization bypass...6.5 Medium
- archerirm archerArcher Platform 2024.03 before version 2024.08 is affected by an authorization bypass...5.9 Medium
- o-dyn collabtiveCollabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file...5.4 Medium
- o-dyn collabtiveCollabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a)...5.4 Medium
- o-dyn collabtiveCollabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action...5.4 Medium
- itsourcecode hospital management systemSQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows...7.2 High
- angeljudesuarez student management systemCross Site Scripting vulnerability in student management system in php with source code v.1.0.0...4.8 Medium
- tuzitio camaleon cmscamaleon_cms affected by cross site scripting4.8 Medium
- reolink duo 2 wifi camera firmwareAccounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware...5.3 Medium
- helakuruAn issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code...7.8 High
- client management system management system, phpgurukul client management system +1 moreClient Management System 1.0 was discovered to contain a SQL injection vulnerability via the...7.5 High
- itsourcecode loan management systemitsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a...5.0 Medium
- netgate pfsenseA cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute...4.8 Medium
- xlightftpd xlight ftp serverXlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of...9.8 Critical
- ladybirdweb faveo helpdeskAn arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution...8.2 High
- collabtiveCollabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action...4.8 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9,...8.8 High
- janobe online complaint siteSQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate...9.8 Critical
- gstreamer project gst-rtsp-serverIncorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows...7.5 High
- smartdns project smartdnsInteger Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial...7.5 High
- keith-cullen freecoapBuffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or...9.8 Critical
- keith-cullen freecoapNull Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1...9.8 Critical
- keith-cullen freecoapAn issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP...8.2 High
- casa systems ntc-221 firmwareAn issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute...9.0 Critical
- ysoft safeqA Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX...7.8 High
- ysoft safeqMultiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53....5.4 Medium
- amazon amazon.applicationloadbalancer.identity.aspnetcore middlewareLack of JWT issuer and signer validation6.9 Medium
- amazon aws alb route directive adapter for istioLack of JWT issuer and signer validation6.9 Medium
- linux, linux kernel +1 morebtrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()5.5 Medium
- linux, linux kernel +1 moreiio: health: afe4404: Fix oob read in afe4404_[read|write]_raw7.1 High
- linux, linux kernel +1 moreiio: health: afe4403: Fix oob read in afe4403_read_raw7.1 High
- linux, linux kernel +1 morelibbpf: Handle size overflow for ringbuf mmap7.8 High
- linux, linux kernel +1 morehwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails7.8 High
- linux, linux kernel +1 moreiavf: Fix error handling in iavf_init_module()5.5 Medium
- linux, linux kernel +1 moree100: Fix possible use after free in e100_xmit_prepare7.8 High
- linux, linux kernel +1 morenet/mlx5e: Fix use-after-free when reverting termination table7.8 High
- Show moreLoading…