CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- servmask all-in-one wp migration and backup, yaniiliev all in one wp migration and backup +1 moreAll-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection7.2 High
- kubell co., ltd. chatwork desktop application (windows)Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows)...5.5 Medium
- sun.net ehrd ctmsSunnet eHRD CTMS - SQL Injection9.8 Critical
- sun.net ehrd ctmsSunnet eHRD CTMS - Insecure Direct Object Reference5.3 Medium
- sun.net ehrd ctmsSunnet eHRD CTMS - Authentication Bypass7.5 High
- genians genian nac lts v5.0, genian nac v5.0 +1 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...2.2 Low
- debian linux, linux kernel +1 moreuprobe: avoid out-of-bounds memory access of fetching args7.8 High
- didi super-jacoco, super jacoco +1 moredidi Super-Jacoco triggerEnvCov command injection5.3 Medium
- tenda ac1206, ac1206 firmware +1 moreTenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow8.7 High
- project worlds simple web-based chat application, projectworlds simple web based chat application +1 moreProject Worlds Simple Web-Based Chat Application index.php cross site scripting5.3 Medium
- tikiTiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki...4.8 Medium
- tikiTiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External...4.8 Medium
- tikiTiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External...4.8 Medium
- tikiTiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages"...4.8 Medium
- schedmd slurmSchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in...5.0 Medium
- tenda ac7 firmwareTenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote...8.8 High
- tenda ac7 firmwareTenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote...8.8 High
- fast5 prison management systemFile Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute...8.8 High
- mrbsThe MRBS version 1.5.0 has an SQL injection vulnerability in the edit_entry_handler.php file,...9.8 Critical
- lylme spageLyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.9.8 Critical
- lylme spageLyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.9.8 Critical
- timgreen dingfanzu cms, dingfangzu +1 moredingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin...6.3 Medium
- eyoucmsAn issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a...7.5 High
- eyoucmsCross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain...6.1 Medium
- timgreen dingfanzu cms, dingfangzu +1 moredingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...6.3 Medium
- newbee-mall project newbee-mallnewbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg...8.1 High
- mrcmsMRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete...8.8 High
- sparkshopSparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows...6.5 Medium
- draytek vigor2960 firmwareAn authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an...8.0 High
- pbootcmsPbootCMS 3.2.8 is vulnerable to URL Redirect.6.1 Medium
- spotify appThe Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat.7.5 High
- project worlds simple web-based chat application, projectworlds simple web based chat application +1 moreProject Worlds Simple Web-Based Chat Application index.php sql injection6.9 Medium
- codezips pet shop management systemCodezips Pet Shop Management System deletebird.php sql injection6.9 Medium
- codezips pet shop management systemCodezips Pet Shop Management System animalsupdate.php sql injection6.9 Medium
- wavlink wn530h4, wn530hg4, wn572hg3 +3 more +5 moreWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection8.6 High
- wavlink wn530h4, wn530hg4, wn572hg3 +3 more +5 moreWAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection8.6 High
- codezips pet shop management systemCodezips Pet Shop Management System deleteanimal.php sql injection5.3 Medium
- codezips pet shop management systemCodezips Pet Shop Management System animalsadd.php sql injection5.3 Medium
- project worlds student project allocation systemProject Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injection5.3 Medium
- project worlds student project allocation systemProject Worlds Student Project Allocation System Project Selection Page remove_project.php sql injection5.3 Medium
- project worlds student project allocation systemProject Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection5.3 Medium
- nurhodelta17 attendance and payroll systemSourceCodester Attendance and Payroll System overtime_add.php sql injection5.3 Medium
- nurhodelta17 attendance and payroll systemSourceCodester Attendance and Payroll System overtime_row.php sql injection5.3 Medium
- nurhodelta17 attendance and payroll systemSourceCodester Attendance and Payroll System update.php upload unrestricted upload5.3 Medium
- code-projects blood bank management system, code projects blood bank management systems +1 morecode-projects Blood Bank Management System bloodrequest.php cross site scripting5.3 Medium
- code-projects blood bank management system, code projects blood bank management systems +1 morecode-projects Blood Bank Management System infoAdd.php sql injection5.3 Medium
- code-projects blood bank management system, code projects blood bank management systems +1 morecode-projects Blood Bank Management System delete.php sql injection5.3 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System cancel.php sql injection5.3 Medium
- blood bank management system project bank management system, code-projects blood bank management system +1 morecode-projects Blood Bank Management System accept.php sql injection5.3 Medium
- phpgurukul vehicle record systemPHPGurukul Vehicle Record System edit-brand.php cross site scripting5.1 Medium
- Show moreLoading…