CVEs published October 27, 2024
35 CVEs were published on October 27, 2024: 1 critical, 4 high. 1 is now in CISA KEV.
- Published
- 35
- Critical
- 1
- High
- 4
- Medium
- 29
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- code-projects Blood Bank Management System
- 5
- Codezips Pet Shop Management System
- 4
- Project Worlds Student Project Allocation System
- 3
- SourceCodester Attendance and Payroll System
- 3
- SourceCodester Online Hotel Reservation System
- 3
- code-projects Blood Bank Management
- 2
- WAVLINK WN530H4 · WAVLINK WN530HG4 +1
- 2
- @cyclonedx/cdxgen
- 1
- libpython · python +1
- 1
- PHPGurukul Vehicle Record System
- 1
Critical 1
High 4
- CVE-2024-10429WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injectionWAVLINK WN530H4 · WAVLINK WN530HG4 +1
- CVE-2024-10428WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injectionWAVLINK WN530H4 · WAVLINK WN530HG4 +1
- CVE-2024-50611CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as buil@cyclonedx/cdxgen
- CVE-2024-50616Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information.
Medium, low and unrated 30
- CVE-2024-10432Project Worlds Simple Web-Based Chat Application index.php sql injectionProject Worlds Simple Web-Based Chat Application
- CVE-2024-10431Codezips Pet Shop Management System deletebird.php sql injectionCodezips Pet Shop Management System
- CVE-2024-10430Codezips Pet Shop Management System animalsupdate.php sql injectionCodezips Pet Shop Management System
- CVE-2024-10427Codezips Pet Shop Management System deleteanimal.php sql injectionCodezips Pet Shop Management System
- CVE-2024-10426Codezips Pet Shop Management System animalsadd.php sql injectionCodezips Pet Shop Management System
- CVE-2024-10425Project Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injectionProject Worlds Student Project Allocation System
- CVE-2024-10424Project Worlds Student Project Allocation System Project Selection Page remove_project.php sql injectionProject Worlds Student Project Allocation System
- CVE-2024-10423Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injectionProject Worlds Student Project Allocation System
- CVE-2024-10422SourceCodester Attendance and Payroll System overtime_add.php sql injectionSourceCodester Attendance and Payroll System
- CVE-2024-10421SourceCodester Attendance and Payroll System overtime_row.php sql injectionSourceCodester Attendance and Payroll System
- CVE-2024-10420SourceCodester Attendance and Payroll System update.php upload unrestricted uploadSourceCodester Attendance and Payroll System
- CVE-2024-10419code-projects Blood Bank Management System bloodrequest.php cross site scriptingcode-projects Blood Bank Management System
- CVE-2024-10418code-projects Blood Bank Management System infoAdd.php sql injectioncode-projects Blood Bank Management System
- CVE-2024-10417code-projects Blood Bank Management System delete.php sql injectioncode-projects Blood Bank Management System
- CVE-2024-10416code-projects Blood Bank Management System cancel.php sql injectioncode-projects Blood Bank Management System
- CVE-2024-10415code-projects Blood Bank Management System accept.php sql injectioncode-projects Blood Bank Management System
- CVE-2024-10414PHPGurukul Vehicle Record System edit-brand.php cross site scriptingPHPGurukul Vehicle Record System
- CVE-2024-10413SourceCodester Online Hotel Reservation System update.php upload unrestricted uploadSourceCodester Online Hotel Reservation System
- CVE-2024-10412Poco-z Guns-Medical File Upload upload cross site scriptingPoco-z Guns-Medical
- CVE-2024-10411SourceCodester Online Hotel Reservation System controller.php doCheckout sql injectionSourceCodester Online Hotel Reservation System
- CVE-2024-10410SourceCodester Online Hotel Reservation System controller.php upload unrestricted uploadSourceCodester Online Hotel Reservation System
- CVE-2024-10409code-projects Blood Bank Management accept.php sql injectioncode-projects Blood Bank Management
- CVE-2024-10408code-projects Blood Bank Management abs.php sql injectioncode-projects Blood Bank Management
- CVE-2024-50602An issue was discovered in libexpat before 2.6.4.libpython · python +1
- CVE-2024-50610GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c.
- CVE-2024-50612libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
- CVE-2024-50613libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
- CVE-2024-50614TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterR
- CVE-2024-50615TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharact
- CVE-2024-50624ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because c