CVEs published September 22, 2024
20 CVEs were published on September 22, 2024: 1 critical, 2 high.
- Published
- 20
- Critical
- 1
- High
- 2
- Medium
- 17
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- code-projects Student Record System
- 3
- code-projects Restaurant Reservation System
- 2
- SourceCodester Modern Loan Management System
- 2
- SourceCodester Online Eyewear Shop
- 2
- code-projects Blood Bank System
- 1
- code-projects Vehicle Management
- 1
- DedeCMS
- 1
- dingfangzu
- 1
- Firsh Justified Image Grid
- 1
- github.com/vesoft-inc/nebula
- 1
Critical 1
High 2
Medium, low and unrated 17
- CVE-2024-9090SourceCodester Modern Loan Management System search_member.php sql injectionSourceCodester Modern Loan Management System
- CVE-2024-9089SourceCodester Modern Loan Management System update_loan_record.php cross site scriptingSourceCodester Modern Loan Management System
- CVE-2024-9088SourceCodester Telecom Billing Management System login buffer overflowSourceCodester Telecom Billing Management System
- CVE-2024-9087code-projects Vehicle Management edit1.php sql injectioncode-projects Vehicle Management
- CVE-2024-9086code-projects Restaurant Reservation System filter.php sql injectioncode-projects Restaurant Reservation System
- CVE-2024-40703IBM Cognos Analytics information disclosureIBM Cognos Analytics
- CVE-2024-9084code-projects Blood Bank System bbms.php cross site scriptingcode-projects Blood Bank System
- CVE-2024-9083SourceCodester Employee Management System add-admin.php cross site scriptingSourceCodester Employee Management System
- CVE-2024-9082SourceCodester Online Eyewear Shop User Creation Users.php improper authorizationSourceCodester Online Eyewear Shop
- CVE-2024-9085code-projects Restaurant Reservation System index.php sql injectioncode-projects Restaurant Reservation System
- CVE-2024-9081SourceCodester Online Eyewear Shop view_category.php sql injectionSourceCodester Online Eyewear Shop
- CVE-2024-9080code-projects Student Record System pincode-verification.php sql injectioncode-projects Student Record System
- CVE-2024-9079code-projects Student Record System marks.php sql injectioncode-projects Student Record System
- CVE-2024-9078code-projects Student Record System course.php sql injectioncode-projects Student Record System
- CVE-2024-9077dingfangzu Order Checkout order.js cross site scriptingdingfangzu
- CVE-2024-9076DedeCMS article_string_mix.php os command injectionDedeCMS
- CVE-2024-47226A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel viapynetbox