CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- funadminFunadmin Cross-site Scripting vulnerability6.1 Medium
- funadminLogic flaw in Funadmin4.9 Medium
- funadminSQL injection in funadmin7.2 High
- funadminSQL injection in funadmin6.5 Medium
- funadminSQL injection in funadmin4.9 Medium
- funadminSQL injection in funadmin7.2 High
- funadminSQL injection in funadmin7.2 High
- funadminSQL injection in funadmin7.2 High
- hanzhou haboo network management systemSQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote...9.8 Critical
- radix iot mango api, radixiot mango, radix iot mango os +1 more +3 moreAn arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows...8.8 High
- radixiot mango, radix iot mango os +1 moreMangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI)...4.6 Medium
- radixiot mango, radix iot mango os +1 moreMangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE)...7.2 High
- radixiot mango, radix iot mango os +1 moreA stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to...5.4 Medium
- kademila dhtContent Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse5.3 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET...5.3 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II)...6.4 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET...4.3 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request...8.8 High
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request...8.8 High
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST...4.7 Medium
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request...9.8 Critical
- ovaledgeOvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET...7.5 High
- oretnom23 online exam systemSourceCodester Online Exam System admin-dashboard access control5.3 Medium
- tenda rx9 pro, rx9 pro firmware +1 moreTenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow8.7 High
- code-projects hospital management systemcode-projects Hospital Management System add-doctor.php sql injection5.1 Medium
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Connector for Python has sensitive data in logs5.5 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System ajax.php delete_tenant sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System Manage Tenant Details index.php cross site scripting5.3 Medium
- icewhaletech zimaosZimaOS vulnerable to Directory Listing via Parameter Manipulation7.5 High
- icewhaletech zimaosZimaOS vulnerable to Username Enumeration via API Responses5.3 Medium
- icewhaletech zimaosZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak7.5 High
- icewhaletech zimaosZimaOS Unauthenticated API Discloses Usernames5.3 Medium
- icewhaletech zimaosZimaOS Arbitrary File Read via Parameter Manipulation7.5 High
- okta verify for ios, verify +1 moreA vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows...8.1 High
- progress whatsup goldWhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability9.8 Critical
- convoypanel panelPterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled4.6 Medium
sigs.k8s.io/aws-load-balancer-controllerGoAWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load BalancersNo score- openrefineOpenRefine has a path traversal in LoadLanguageCommand7.1 High
org.openrefine:openrefineMavenOpenRefine leaks Google API credentials in releasesNo scoreorg.openrefine.dependencies:butterflyMavenButterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)No score- openrefine butterfly, simile-butterfly, similie butterfly +2 moreButterfly has path/URL confusion in resource handling leading to multiple weaknesses9.1 Critical
- openrefineOpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project5.9 Medium
- openrefineOpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)8.1 High
- clothes recommendation system project recommendation system, sourcecodehero clothes recommendation system +1 moreSourceCodeHero Clothes Recommendation System home.php sql injection5.1 Medium
- openrefineOpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand8.1 High
- clothes recommendation system project recommendation system, sourcecodehero clothes recommendation system +1 moreSourceCodeHero Clothes Recommendation System home.php sql injection5.1 Medium
- openrefineOpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)7.6 High
- red hat 3scale api management platform 2, redhat 3scale api management +1 moreGateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request7.5 High
- openrefineReflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)8.1 High
- aimeos ai-admin-graphqlAimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups5.5 Medium
- Show moreLoading…