CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...9.8 Critical
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...9.8 Critical
- draytek vigor3900 firmwareDrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and...8.8 High
- phpgurukul beauty parlour management systemAn Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul...7.5 High
- phpgurukul beauty parlour management systemPhpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index...9.8 Critical
- phpgurukul teachers record management systemPhpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid...9.8 Critical
- phpgurukul teachers record management systemPhpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher...9.1 Critical
- online admission system project admission system, projectworlds online admission system +1 moreProjectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the ...9.1 Critical
- abantecartA SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in...6.0 Medium
- abantecartA SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in...6.0 Medium
- qualitorQualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component ...7.5 High
- qualitorQualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- piwigoPiwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album...8.8 High
- jeecg boot, jeecgboot +1 moreJeecgBoot SQL Injection vulnerability9.8 Critical
- mobatek mobaxtermAn issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary...8.4 High
- langflowlangflow has vulnerability in PythonCodeTool component9.8 Critical
- pebbleroad glossarizerGlossarizer Cross-site Scripting vulnerability9.9 Critical
- ollamaAn issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on...7.5 High
- ollamaAn issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to...7.5 High
- ollamaOllama Out-of-bounds Read8.2 High
- ollamaAn issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api...7.5 High
- webswingWebswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path...9.8 Critical
- std42 elfinderStudio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross...6.1 Medium
- std42 elfinderStudio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction...9.8 Critical
- hashicorp consul, consul enterprise +1 moreConsul Vulnerable To Reflected XSS On Content-Type Error Manipulation6.1 Medium
- hashicorp consul, consul enterprise +1 moreConsul L7 Intentions Vulnerable To Headers Bypass8.3 High
- hashicorp consul, consul enterprise +1 moreConsul L7 Intentions Vulnerable To URL Path Bypass8.1 High
- open-scratch teaching 在线教学平台, shanghai gedan network technology teaching +1 moreopen-scratch Teaching 在线教学平台 URL getDictItemsByTable sql injection5.3 Medium
- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master Deserialization of Untrusted Data9.3 Critical
- hp smart universal printing driver, hp, inc. hp smart universal printing driver +1 moreCertain HP Print Products–Potential Remote Code Execution and/or Elevation of Privilege with the HP Smart Universal Printing Driver7.8 High
- drupal ohdear integration, ohdear integration +1 moreOhDear Integration - Moderately critical - Access bypass - SA-CONTRIB-2024-0565.3 Medium
- drupal cookiebot + gtm, usercentrics cookiebot \+ gtm +1 moreCookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-0555.4 Medium
- beyondtrust privileged identityCross-Site Scripting In Privileged Identity6.4 Medium
- mkucej i-librarian-freeI, Librarian has a Stored XSS vulnerability in Supplemental Files4.6 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- wpsoul greenshift, greenshiftwp greenshift - animation and page builder blocks +1 moreWordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability5.4 Medium
microcode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scorekrb5-develTuxCare,krb5-libsTuxCare,krb5-pkinitTuxCare +4 more +6 moreUpdate of krb5No score- iowacomputergurus aspnetcore.utilities.cloudstorage, iowa computer gurus aspnetcore.utilites.cloudstorage +1 moreICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected5.3 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows...8.1 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows...8.1 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of...8.8 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation...5.3 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0...9.9 Critical
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive...5.9 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router contains a vulnerability within its web application that allows...5.3 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router has an information disclosure vulnerability in its web application,...5.3 Medium
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreThe LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in...9.0 Critical
- Show moreLoading…