CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...8.8 High
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...8.8 High
- eladminThe eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control...7.2 High
- eladminA Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier...6.5 Medium
- phpgurukul doctor appointment management systemCross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0...5.4 Medium
- sas studioDirectory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS...7.7 High
- sas studio*Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS...8.8 High
- sas studioSQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4...8.8 High
- sage frp 1000A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. This...6.1 Medium
- sage 1000, frp 1000 +1 moreA file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote...7.2 High
- sage 1000, frp 1000 +1 moreAn Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized...8.1 High
- aci worldwide proactive risk managerProactive Risk Manager version 9.1.1.0 is affected by multiple Cross-Site Scripting (XSS)...5.4 Medium
- xtreme1-io xtreme1xtreme1 <= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data...6.1 Medium
- dlink dsl-6740c firmware, dsl6740c firmware +1 moreD-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password,...6.5 Medium
- dlink dsl-6740c firmware, dsl6740c firmware +1 moreD-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for...8.8 High
- radare radare2An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service...5.5 Medium
- keruistore kerui hd 3mp 1080p tuya camera firmwareKERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that...8.4 High
- thecosy icecmsicecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.9.8 Critical
- thinkphpThinkPHP deserialization vulnerability9.8 Critical
- operatelyUnrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to...8.0 High
- phpgurukul vehicle record management system, vehicle record system +1 morephpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection...6.3 Medium
- snowflake jdbcSnowflake JDBC Security Advisory5.9 Medium
- apptool-browser-video video downloaderThe com.videodownload.browser.videodownloader (aka AppTool-Browser-Video All Video Downloader)...8.1 High
- talkatoneThe Talkatone com.talkatone.android application 8.4.6 for Android enables any installed...8.4 High
- engeniustech enstation5-ac firmwareEnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell...8.8 High
- engeniustech ews356-fit firmwareEnGenius ESR580 devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via...4.8 Medium
- hitrontech coda-4582u firmwareHitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi...5.2 Medium
- No product listedEnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that...4.3 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreMpg123: buffer overflow when writing decoded pcm samples6.7 Medium
- karlseguin http.zighttp.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url...7.2 High
- instantcms, instantcms icms2 +1 moreInstantCMS has a Cross Site Scripting Vulnerability5.4 Medium
- google chromeUse after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to...8.8 High
- google chromeOut of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to...8.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DWG Stack-Based Buffer Overflow Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DWG Out-of-Bounds Write Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DWG File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DWG File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreAutodesk AutoCAD CATPART File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- wp overnight woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability5.3 Medium
- cloudways breezeWordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability5.3 Medium
- wpdeveloper templatelyWordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability5.4 Medium
- wpdeveloper templatelyWordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability6.5 Medium
- roland murg wp booking systemWordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability6.5 Medium
- hashicorp vagrant, vagrant vmware utility +1 moreVagrant VMWare Utility installation files vulnerable to modification by unprivileged user3.8 Low
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD ACTranslators CATPART File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD ACTranslators 3DM File Parsing Use-After-Free Code Execution Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreA maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force...7.8 High
- autodesk autocad, advance steel, autocad architecture +8 more +10 moreAutodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution Vulnerability7.8 High
- Show moreLoading…