CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- ledvance sylvania smart home firmwareIncorrect access control in the firmware update and download processes of Sylvania Smart Home v3...8.4 High
- yamaha headphones controller firmwareIncorrect access control in the firmware update and download processes of Yamaha Headphones...8.4 High
- ruochan smart firmwareIncorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7...8.4 High
- shenzhen xiaohe lejia technology co xiaohesmart firmwareIncorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information...6.2 Medium
- netdvr neye3cNeye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update...9.8 Critical
- netdvr neye3cIncorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows...9.8 Critical
- maestroerror php-heic-to-jpgRemote code execution in php-heic-to-jpg9.8 Critical
- oretnom23 purchase order management system, purchase order management system project order management system +1 moreAn issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to...7.2 High
- tuoshi 5g cpe router nr500-ea firmwareIncorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA...6.5 Medium
- whtyglobal tianyu cpe router firmwareWuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router CommonCPExCPETS_v3.2.468.11.04_P4...8.8 High
- tuoshi 5g cpe router nr500-ea firmwareShenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543...8.8 High
- oretnom23 packers and movers management systemA SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows...8.8 High
- assimpA segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the...6.2 Medium
- assimpA segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle:...5.5 Medium
- assimpA heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure...5.5 Medium
- assimpAn issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the...7.8 High
- pureftpd pure-ftpdpure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the...8.6 High
- netangular chatnet aiA prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1...9.1 Critical
- fusionchat chat ai assistantA prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything...9.1 Critical
- digitory multi-channel integrated posA lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS...9.1 Critical
- butterflyeffectpte monicaA prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI...7.5 High
- zhipu ai codegeexA prompt injection vulnerability in the chatbox of Zhipu AI CodeGeeX v2.17.0 allows attackers to...7.5 High
- butterflyeffectpte monicaA prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI...7.5 High
- blackbox ai aiA prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access...7.5 High
- htmldoc project htmldocHTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.9.8 Critical
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...8.8 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...8.8 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...8.0 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...8.0 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...6.5 Medium
- engeniustech enh1350ext firmwareEnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command...7.8 High
- moneymanagerex money manager ex webappMoney Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the ...9.8 Critical
- moneymanagerex money manager ex webappMoney Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control....9.8 Critical
- oneidentity safeguard for privileged sessionsAn authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged...5.3 Medium
- hcl sametimeHCL Sametime is impacted by generation of error messages containing sensitive information3.6 Low
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System Search search-medicalcard.php sql injection5.1 Medium
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System View Enquiry Page view-enquiry.php sql injection5.1 Medium
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System Managecard View Detail Page view-card-detail.php sql injection5.1 Medium
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System Managecard Edit Card Detail Page edit-card-detail.php sql injection5.1 Medium
- snyk cli, php plugin +1 moreOS Command Injection in Snyk php plugin7.5 High
- snyk cli, gradle plugin +1 moreOS Command Injection in Snyk gradle plugin7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software +1 moreA vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow...5.3 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA)...8.6 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA)...8.6 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of...5.3 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and...6.0 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center ...6.5 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd), adaptive security appliance software +2 more +4 moreA vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance ...5.8 Medium
- cisco secure firewall management center, firepower management center +1 moreA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center ...6.5 Medium
- cisco secure firewall management center, firepower management center +1 moreA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center ...6.5 Medium
- Show moreLoading…