CVEs published September 28, 2024
29 CVEs were published on September 28, 2024: 1 critical, 6 high.
- Published
- 29
- Critical
- 1
- High
- 6
- Medium
- 22
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Alpine Halo9
- 5
- Autel MaxiCharger AC Elite Business C50
- 4
- SourceCodester Online Railway Reservation System
- 4
- SourceCodester Advocate Office Management System
- 3
- wpcodefactory EU/UK VAT Validation Manager for WooCommerce
- 2
- axton WP-WebAuthn
- 1
- clifgriffin Simple LDAP Login
- 1
- code-projects Blood Bank Management System
- 1
- grimmdude Simple Popup Plugin
- 1
- gtmserver Stape Conversion Tracking
- 1
Critical 1
High 6
- CVE-2024-23923Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution VulnerabilityAlpine Halo9
- CVE-2024-23959Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution VulnerabilityAutel MaxiCharger AC Elite Business C50
- CVE-2024-23935Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine Halo9
- CVE-2024-23967Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution VulnerabilityAutel MaxiCharger AC Elite Business C50
- CVE-2024-23957Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution VulnerabilityAutel MaxiCharger AC Elite Business C50
- CVE-2024-23938Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution VulnerabilitySilicon Labs Gecko OS
Medium, low and unrated 22
- CVE-2024-9319SourceCodester Online Timesheet App delete-timesheet.php sql injectionSourceCodester Online Timesheet App
- CVE-2024-9318SourceCodester Advocate Office Management System activate.php sql injectionSourceCodester Advocate Office Management System
- CVE-2024-9317SourceCodester Online Eyewear Shop Master.php delete_category sql injectionSourceCodester Online Eyewear Shop
- CVE-2024-9316code-projects Blood Bank Management System B+.php sql injectioncode-projects Blood Bank Management System
- CVE-2024-9315SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injectionSourceCodester Employee and Visitor Gate Pass Logging System
- CVE-2024-9300SourceCodester Online Railway Reservation System Message Us Form contact_us.php cross site scriptingSourceCodester Online Railway Reservation System
- CVE-2024-9299SourceCodester Online Railway Reservation System ?page=reserve cross site scriptingSourceCodester Online Railway Reservation System
- CVE-2024-9298SourceCodester Online Railway Reservation System Ticket ?page=tickets access controlSourceCodester Online Railway Reservation System
- CVE-2024-8189WP MultiTasking - WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scriptingthangnv27 WP MultiTasking – WP Utilities
- CVE-2024-9297SourceCodester Online Railway Reservation System admin improper authorizationSourceCodester Online Railway Reservation System
- CVE-2024-9296SourceCodester Advocate Office Management System forgot_pass.php sql injectionSourceCodester Advocate Office Management System
- CVE-2024-8712GTM Server Side <= 2.1.19 - Reflected Cross-Site Scriptinggtmserver Stape Conversion Tracking
- CVE-2024-9295SourceCodester Advocate Office Management System login.php sql injectionSourceCodester Advocate Office Management System
- CVE-2024-23960Alpine Halo9 Improper Verification of Cryptographic Signature VulnerabilityAlpine Halo9
- CVE-2024-23924Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution VulnerabilityAlpine Halo9
- CVE-2024-23961Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution VulnerabilityAlpine Halo9
- CVE-2024-23958Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass VulnerabilityAutel MaxiCharger AC Elite Business C50
- CVE-2024-8715Simple LDAP Login <= 1.6.0 - Reflected Cross-Site Scriptingclifgriffin Simple LDAP Login
- CVE-2024-9189EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorizationwpcodefactory EU/UK VAT Validation Manager for WooCommerce
- CVE-2024-9023WP-WebAuthn <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcodeaxton WP-WebAuthn
- CVE-2024-8788EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scriptingwpcodefactory EU/UK VAT Validation Manager for WooCommerce
- CVE-2024-8547Simple Popup Plugin <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scriptinggrimmdude Simple Popup Plugin