CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- linux, linux kernel +1 morenet: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()5.5 Medium
- linux, linux kernel +1 moretcp: fix mptcp DSS corruption due to large pmtu xmit7.5 High
- linux, linux kernel +1 moreblk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race7.8 High
- linux, linux kernel +1 moreblk-mq: setup queue ->tag_set before initializing hctx5.5 Medium
- linux, linux kernel +1 moreublk: don't allow user copy for unprivileged device5.5 Medium
- linux, linux kernel +1 moreio_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work5.5 Medium
- linux, linux kernel +1 moreBluetooth: Call iso_exit() on module unload7.8 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix multiple init when debugfs is disabled7.8 High
- linux, linux kernel +1 morevt: prevent kernel-infoleak in con_font_get()6.5 Medium
- linux, linux kernel +1 morexhci: tegra: fix checked USB2 port number8.0 High
- linux, linux kernel, redhat enterprise linux +2 moreparport: Proper fix for array out-of-bounds access7.8 High
- linux, linux kernel +1 moretty: n_gsm: Fix use-after-free in gsm_cleanup_mux7.8 High
- linux, linux kernel +1 morex86/bugs: Use code segment selector for VERW operand5.5 Medium
- linux, linux kernel +1 morepinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()7.8 High
- linux, linux kernel +1 morepinctrl: stm32: check devm_kasprintf() returned value5.5 Medium
- linux, linux kernel +1 morepinctrl: apple: check devm_kasprintf() returned value5.5 Medium
- linux, linux kernel +1 moremm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()5.5 Medium
- ibm flexible service processor, ess 5000 \(5105-22e\) firmware, power system e1080 \(9080-hex\) firmware +26 more +28 moreIBM Flexible Service Processor hard coded credentials9.8 Critical
- linzhaoguan pb-cmsLinZhaoguan pb-cms Edit Article edit cross site scripting5.1 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Permission Management Page admin#permissions cross site scripting5.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability7.8 High
- cyber panel panel, cyberpanel +1 moreCyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the...10.0 Critical
- cyberpanelupgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows...10.0 Critical
- cyberpanelgetresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb...10.0 Critical
- phpgurukul ifsc code finderA Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/admin/profile.php...6.1 Medium
- phpgurukul ifsc code finderA Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/index.php in...6.1 Medium
- phpgurukul online dj booking management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/booking-search.php...6.1 Medium
- phpgurukul online dj booking management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/user-search.php in...6.1 Medium
- netadminIn NetAdmin 4.0.30319, an attacker can steal a valid session cookie and inject it into another...8.1 High
- aquila cms, aquila-cms aquilacms +1 moreA NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers...9.8 Critical
- aquila cms, aquila-cms aquilacms +1 moreA User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers...5.3 Medium
- telsalogger admin panelCross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote...4.8 Medium
- chainerA Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of...9.8 Critical
- pluxmlA remote code execution (RCE) vulnerability in the component /PluXml/core/admin...9.8 Critical
- linuxfoundation pytorchIn PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.9.8 Critical
- 8x8 jitsi meet, jitsi meet +1 moreIn Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an...9.8 Critical
- 8x8 jitsi meet, jitsi meet +1 moreIn Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in...7.5 High
- asio cplusplus libraryAsio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with...7.5 High
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerability3.5 Low
- apple macos, mac os +1 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13...4.4 Medium
- apple macos, mac os +1 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...5.5 Medium
- apple macos, mac os +1 moreThis issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +3 more +5 moreThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...6.1 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and...5.5 Medium
- apple ipados, ios and ipados, ipad os +1 more +3 moreA permissions issue was addressed by removing vulnerable code and adding additional checks. This...9.1 Critical
- apple macos, mac os +1 moreThe issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13...8.6 High
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...3.3 Low
- Show moreLoading…