# CVEs published 2024-08-14

204 CVEs were published on August 14, 2024: 11 critical, 70 high. Days are UTC.

- [CVE-2024-7800](https://cve.now/CVE-2024-7800.md): SourceCodester Simple Online Bidding System ajax.php sql injection (CVSS 5.3, SourceCodester Simple Online Bidding System)
- [CVE-2024-7799](https://cve.now/CVE-2024-7799.md): SourceCodester Simple Online Bidding System users.php improper authorization (CVSS 6.9, SourceCodester Simple Online Bidding System)
- [CVE-2024-7625](https://cve.now/CVE-2024-7625.md): Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking (CVSS 5.8, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2024-7798](https://cve.now/CVE-2024-7798.md): SourceCodester Simple Online Bidding System ajax.php sql injection (CVSS 6.9, SourceCodester Simple Online Bidding System)
- [CVE-2024-7797](https://cve.now/CVE-2024-7797.md): SourceCodester Simple Online Bidding System ajax.php sql injection (CVSS 6.9, SourceCodester Simple Online Bidding System)
- [CVE-2024-43368](https://cve.now/CVE-2024-43368.md): Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste (CVSS 6.5, basecamp trix · trix)
- [CVE-2024-7794](https://cve.now/CVE-2024-7794.md): itsourcecode Vehicle Management System mybill.php sql injection (CVSS 5.3, itsourcecode Vehicle Management System)
- [CVE-2024-7793](https://cve.now/CVE-2024-7793.md): SourceCodester Task Progress Tracker add-task.php cross site scripting (CVSS 5.3, SourceCodester Task Progress Tracker)
- [CVE-2024-42353](https://cve.now/CVE-2024-42353.md): WebOb's location header normalization during redirect leads to open redirect (CVSS 6.1, Pylons webob · webob)
- [CVE-2024-40620](https://cve.now/CVE-2024-40620.md): Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol (CVSS 5.3, Rockwell Automation Pavilion8®)
- [CVE-2024-27120](https://cve.now/CVE-2024-27120.md): Local File Inclusion in ComfortKey before version 24.1.2 (CVSS 7.7, Celsius Benelux ComfortKey)
- [CVE-2024-40619](https://cve.now/CVE-2024-40619.md): Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling (CVSS 8.7, Rockwell Automation ControlLogix® · Rockwell Automation Gua…)
- [CVE-2024-42360](https://cve.now/CVE-2024-42360.md): Command Injection in sequenceserver (CVSS 9.8, wurmlab sequenceserver · sequenceserver)
- [CVE-2024-7513](https://cve.now/CVE-2024-7513.md): Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions (CVSS 8.5, Rockwell Automation FactoryTalk View Site Edition)
- [CVE-2024-6078](https://cve.now/CVE-2024-6078.md): Rockwell Automation Authentication Bypass Vulnerability in DataMosaix™ (CVSS 8.6, Rockwell Automation DataMosaix™)
- [CVE-2024-7515](https://cve.now/CVE-2024-7515.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation (CVSS 8.7, Rockwell Automation CompactLogix · Rockwell Automation C… +2)
- [CVE-2024-7507](https://cve.now/CVE-2024-7507.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation (CVSS 8.7, Rockwell Automation CompactLogix · Rockwell Automation C… +2)
- [CVE-2024-7792](https://cve.now/CVE-2024-7792.md): SourceCodester Task Progress Tracker delete-task.php sql injection (CVSS 5.3, SourceCodester Task Progress Tracker)
- [CVE-2024-31882](https://cve.now/CVE-2024-31882.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2024-37529](https://cve.now/CVE-2024-37529.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2024-35152](https://cve.now/CVE-2024-35152.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2024-35136](https://cve.now/CVE-2024-35136.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-50314](https://cve.now/CVE-2023-50314.md): IBM WebSphere Application Server Libery information disclosure (CVSS 5.3, IBM WebSphere Application Liberty)
- [CVE-2023-50315](https://cve.now/CVE-2023-50315.md): IBM WebSphere Application Server information disclosure (CVSS 5.3, IBM WebSphere Application Server)
- [CVE-2024-42441](https://cve.now/CVE-2024-42441.md): Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment (CVSS 6.2, Zoom Communications Zoom Workplace Desktop App for macOS, Z…)
- [CVE-2024-42440](https://cve.now/CVE-2024-42440.md): Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management (CVSS 6.2, Zoom Communications Zoom Workplace Desktop App for macOS, Z…)
- [CVE-2024-42439](https://cve.now/CVE-2024-42439.md): Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path (CVSS 6.5, Zoom Communications Zoom Workplace Desktop App for macOS an…)
- [CVE-2024-42438](https://cve.now/CVE-2024-42438.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-5916](https://cve.now/CVE-2024-5916.md): PAN-OS: Cleartext Exposure of External System Secrets (CVSS 6.0, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-42437](https://cve.now/CVE-2024-42437.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-42436](https://cve.now/CVE-2024-42436.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow (CVSS 6.5, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-5915](https://cve.now/CVE-2024-5915.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2024-5914](https://cve.now/CVE-2024-5914.md): Cortex XSOAR: Command Injection in CommonScripts Pack (CVSS 7.0, Palo Alto Networks Cortex XSOAR CommonScripts)
- [CVE-2024-42435](https://cve.now/CVE-2024-42435.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure (CVSS 4.9, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-42434](https://cve.now/CVE-2024-42434.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-39824](https://cve.now/CVE-2024-39824.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-39823](https://cve.now/CVE-2024-39823.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization (CVSS 4.9, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-39822](https://cve.now/CVE-2024-39822.md): Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure (CVSS 6.5, Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…)
- [CVE-2024-39818](https://cve.now/CVE-2024-39818.md): Zoom Workplace Apps and SDKs - Protection Mechanism Failure (CVSS 7.5, Zoom Communications Zoom Workplace Apps and SDKs)
- [CVE-2024-39825](https://cve.now/CVE-2024-39825.md): Zoom Workplace Apps and Rooms Clients - Buffer Overflow (CVSS 8.5, Zoom Communications Zoom Workplace Apps and Rooms Clients)
- [CVE-2024-27267](https://cve.now/CVE-2024-27267.md): IBM SDK, Java Technology Edition denial of service (CVSS 5.9, IBM SDK, Java Technology Edition)
- [CVE-2024-28799](https://cve.now/CVE-2024-28799.md): IBM QRadar Suite Software information disclosure (CVSS 5.6, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2024-41832](https://cve.now/CVE-2024-41832.md): TALOS-2024-2002 | Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2024-39426](https://cve.now/CVE-2024-39426.md): ZDI-CAN-24312: Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-39422](https://cve.now/CVE-2024-39422.md): ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DC (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-41831](https://cve.now/CVE-2024-41831.md): ZDI-CAN-24569: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-39423](https://cve.now/CVE-2024-39423.md): ZDI-CAN-24182: New Vulnerability Report - Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-39420](https://cve.now/CVE-2024-39420.md): Acrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) (CVSS 7.0, Adobe Acrobat Reader)
- [CVE-2024-41834](https://cve.now/CVE-2024-41834.md): ZDI-CAN-24311: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2024-41835](https://cve.now/CVE-2024-41835.md): TALOS-2024-2003 | Adobe Acrobat Reader Font Packed Point Numbers Out-Of-Bounds Read Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2024-39424](https://cve.now/CVE-2024-39424.md): ZDI-CAN-24309: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-41830](https://cve.now/CVE-2024-41830.md): Talos Security Advisory for Adobe (TALOS-2024-2009) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-39383](https://cve.now/CVE-2024-39383.md): PoC sample of unknown vulnerability detected by EXPMON system (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2024-39425](https://cve.now/CVE-2024-39425.md): Security vulnerability in AdobeARMHelper (CVSS 7.0, Adobe Acrobat Reader)
- [CVE-2024-41833](https://cve.now/CVE-2024-41833.md): ZDI-CAN-24310: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2024-34127](https://cve.now/CVE-2024-34127.md): Adobe Indesign TIF File Parsing Out Of Bound Read (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2024-41850](https://cve.now/CVE-2024-41850.md): Adobe Indesign 2024 TIF File Parsing Heap Memory Corruption (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-41854](https://cve.now/CVE-2024-41854.md): Adobe Indesign 2024 PDF File parsing memory corruption (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2024-39391](https://cve.now/CVE-2024-39391.md): Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-39390](https://cve.now/CVE-2024-39390.md): Adobe Indesign 2024 DOC File Parsing Memory Corruption (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-41866](https://cve.now/CVE-2024-41866.md): Adobe Indesign 2024 DOC File Parsing Null Pointer Dereference (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2024-41852](https://cve.now/CVE-2024-41852.md): Adobe Indesign 2024 AVI File Parsing Stack Based Buffer Overflow (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-41853](https://cve.now/CVE-2024-41853.md): Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-41851](https://cve.now/CVE-2024-41851.md): Adobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG file (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-39393](https://cve.now/CVE-2024-39393.md): Adobe Indesign 2024 PCT File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-39389](https://cve.now/CVE-2024-39389.md): Adobe Indesign PDF File Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-39395](https://cve.now/CVE-2024-39395.md): Adobe Indesign 2024 DOC File Parsing Null Pointer Dereference (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2024-39394](https://cve.now/CVE-2024-39394.md): Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-25157](https://cve.now/CVE-2024-25157.md): Authentication bypass in GoAnywhere MFT prior to 7.6.0 (CVSS 6.5, Fortra GoAnywhere MFT)
- [CVE-2024-39388](https://cve.now/CVE-2024-39388.md): ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-39387](https://cve.now/CVE-2024-39387.md): ZDI-CAN-24047: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2024-41840](https://cve.now/CVE-2024-41840.md): ZDI-CAN-24607: Adobe Bridge JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2024-39386](https://cve.now/CVE-2024-39386.md): ZDI-CAN-24057: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2024-34117](https://cve.now/CVE-2024-34117.md): Adobe Photoshop 2024 MPO File Parsing Use-After-Free vulnerability (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2024-34134](https://cve.now/CVE-2024-34134.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-34136](https://cve.now/CVE-2024-34136.md): Adobe Illustrator PSD File Parsing Null Pointer dereference (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-34118](https://cve.now/CVE-2024-34118.md): Adobe illustrator 2024 TIF File parsing Division by zero denial of service (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-41856](https://cve.now/CVE-2024-41856.md): Illustrator | Improper Input Validation (CWE-20) (CVSS 7.8, Adobe Illustrator)
- [CVE-2024-34133](https://cve.now/CVE-2024-34133.md): Adobe Illustrator CC 2023 v27.9 Vulnerability I (CVSS 7.8, Adobe Illustrator)
- [CVE-2024-34138](https://cve.now/CVE-2024-34138.md): Adobe Illustrator CGM File Parsing Division By zero (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-34137](https://cve.now/CVE-2024-34137.md): Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-34135](https://cve.now/CVE-2024-34135.md): Adobe Illustrator CC 2023 v27.9 Vulnerability II (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-34125](https://cve.now/CVE-2024-34125.md): ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2024-41865](https://cve.now/CVE-2024-41865.md): Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll (CVSS 7.8, Adobe Dimension)
- [CVE-2024-34126](https://cve.now/CVE-2024-34126.md): ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2024-20789](https://cve.now/CVE-2024-20789.md): ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2024-34124](https://cve.now/CVE-2024-34124.md): ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2024-20790](https://cve.now/CVE-2024-20790.md): Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX file (CVSS 5.5, Adobe Dimension)
- [CVE-2024-42259](https://cve.now/CVE-2024-42259.md): drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVSS 7.8, Linux)
- [CVE-2024-7347](https://cve.now/CVE-2024-7347.md): NGINX MP4 module vulnerability (CVSS 4.7, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-39792](https://cve.now/CVE-2024-39792.md): NGINX Plus MQTT vulnerability (CVSS 7.5, F5 NGINX Plus)
- [CVE-2024-37028](https://cve.now/CVE-2024-37028.md): BIG-IP Next Central Manager vulnerability (CVSS 5.3, F5 BIG-IP Next Central Manager)
- [CVE-2024-39809](https://cve.now/CVE-2024-39809.md): BIG-IP Next Central Manager vulnerability (CVSS 7.5, F5 BIG-IP Next Central Manager)
- [CVE-2024-41719](https://cve.now/CVE-2024-41719.md): BIG-IP Next Central Manager vulnerability (CVSS 4.2, F5 BIG-IP Next Central Manager)
- [CVE-2024-41727](https://cve.now/CVE-2024-41727.md): BIG-IP TMM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-41164](https://cve.now/CVE-2024-41164.md): BIG-IP MPTCP vulnerability (CVSS 5.9, F5 BIG-IP)
- [CVE-2024-39778](https://cve.now/CVE-2024-39778.md): BIG-IP HSB vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-41723](https://cve.now/CVE-2024-41723.md): BIG-IP iControl REST vulnerability (CVSS 4.3, F5 BIG-IP)
- [CVE-2024-7790](https://cve.now/CVE-2024-7790.md): DevikaAI Stored Cross-Site Scripting (CVSS 6.5, Devikia DevikaAI)
- [CVE-2024-21787](https://cve.now/CVE-2024-21787.md): Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation (CVSS 7.1, BMRA software)
- [CVE-2024-21806](https://cve.now/CVE-2024-21806.md): Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version (CVSS 6.8, Intel(R) Ethernet Network Controllers and Adapters E810 Ser…)
- [CVE-2024-21807](https://cve.now/CVE-2024-21807.md): Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may (CVSS 9.3, Intel(R) Ethernet Network Controllers and Adapters)
- [CVE-2024-23499](https://cve.now/CVE-2024-23499.md): Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before vers (CVSS 7.0, Intel(R) Ethernet Network Controllers and Adapters E810 Ser…)
- [CVE-2024-24986](https://cve.now/CVE-2024-24986.md): Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allo (CVSS 9.3, Intel(R) Ethernet Network Controllers and Adapters)
- [CVE-2024-23981](https://cve.now/CVE-2024-23981.md): Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an a (CVSS 9.3, Intel(R) Ethernet Network Controllers and Adapters)
- [CVE-2024-21769](https://cve.now/CVE-2024-21769.md): Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable (CVSS 5.4, Intel(R) Ethernet Connection I219-LM install software)
- [CVE-2024-23497](https://cve.now/CVE-2024-23497.md): Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an (CVSS 9.3, Intel(R) Ethernet Network Controllers and Adapters)
- [CVE-2024-24983](https://cve.now/CVE-2024-24983.md): Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allo (CVSS 7.0, Intel(R) Ethernet Network Controllers and Adapters E810 Ser…)
- [CVE-2024-21810](https://cve.now/CVE-2024-21810.md): Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 ma (CVSS 9.3, Intel(R) Ethernet Network Controllers and Adapters)
- [CVE-2023-38655](https://cve.now/CVE-2023-38655.md): Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentiall (CVSS 6.9, Intel(R) AMT and Intel(R) Standard Manageability)
- [CVE-2023-34424](https://cve.now/CVE-2023-34424.md): Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local a (CVSS 6.7, Intel(R) CSME)
- [CVE-2024-21844](https://cve.now/CVE-2024-21844.md): Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent a (CVSS 5.3, Intel(R) CSME)
- [CVE-2023-48361](https://cve.now/CVE-2023-48361.md): Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via loca (CVSS 4.6, Intel(R) CSME)
- [CVE-2023-40067](https://cve.now/CVE-2023-40067.md): Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege vi (CVSS 5.7, Intel(R) CSME)
- [CVE-2024-39283](https://cve.now/CVE-2024-39283.md): Incomplete filtering of special elements in Intel(R) TDX module software before version TDX\_1.5.01.00.592 may allow an authenticated user to (CVSS 8.5, Intel(R) TDX module software)
- [CVE-2024-34163](https://cve.now/CVE-2024-34163.md): Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via loc (CVSS 8.7, Intel(R) NUC)
- [CVE-2023-42667](https://cve.now/CVE-2023-42667.md): Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable esc (CVSS 7.3, Intel(R) Core(TM) Ultra Processor stream cache mechanism)
- [CVE-2023-49141](https://cve.now/CVE-2023-49141.md): Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of pr (CVSS 7.3, Intel(R) Processors stream cache mechanism)
- [CVE-2024-21857](https://cve.now/CVE-2024-21857.md): Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially ena (CVSS 5.4, Intel(R) oneAPI Compiler software)
- [CVE-2024-21801](https://cve.now/CVE-2024-21801.md): Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potent (CVSS 8.3, Intel(R) TDX module software)
- [CVE-2024-21766](https://cve.now/CVE-2024-21766.md): Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to pote (CVSS 5.4, Intel(R) oneAPI Math Kernel Library software)
- [CVE-2024-22374](https://cve.now/CVE-2024-22374.md): Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of servi (CVSS 6.8, Intel(R) Xeon Processors)
- [CVE-2024-23495](https://cve.now/CVE-2024-23495.md): Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to pote (CVSS 5.4, Intel(R) Distribution for GDB software)
- [CVE-2024-24973](https://cve.now/CVE-2024-24973.md): Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potenti (CVSS 1.0, Intel(R) Distribution for GDB software)
- [CVE-2024-23491](https://cve.now/CVE-2024-23491.md): Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potential (CVSS 5.4, Intel(R) Distribution for GDB software)
- [CVE-2024-25562](https://cve.now/CVE-2024-25562.md): Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to poten (CVSS 5.8, Intel(R) Distribution for GDB software)
- [CVE-2023-49144](https://cve.now/CVE-2023-49144.md): Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user t (CVSS 8.1, Intel(R) Server Platforms)
- [CVE-2023-35123](https://cve.now/CVE-2023-35123.md): Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow an authenticated us (CVSS 5.9, Intel(R) Server Platforms)
- [CVE-2024-24853](https://cve.now/CVE-2024-24853.md): Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privi (CVSS 7.3, Intel(R) Processor)
- [CVE-2024-25576](https://cve.now/CVE-2024-25576.md): improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of (CVSS 8.5, Intel(R) FPGA products)
- [CVE-2024-23974](https://cve.now/CVE-2024-23974.md): Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of p (CVSS 5.4, Intel(R) ISH software installers)
- [CVE-2024-25561](https://cve.now/CVE-2024-25561.md): Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user (CVSS 5.4, Intel(R) HID Event Filter software installers)
- [CVE-2024-24580](https://cve.now/CVE-2024-24580.md): Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enab (CVSS 6.8, Intel(R) Data Center GPU Max Series 1100 and 1550 products)
- [CVE-2024-22378](https://cve.now/CVE-2024-22378.md): Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allow (CVSS 5.4, Intel Unite(R) Client Extended Display Plugin software inst…)
- [CVE-2024-24980](https://cve.now/CVE-2024-24980.md): Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially ena (CVSS 6.9, 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors)
- [CVE-2023-43747](https://cve.now/CVE-2023-43747.md): Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 may allow an authentic (CVSS 5.4, Intel(R) Connectivity Performance Suite software installers)
- [CVE-2024-23909](https://cve.now/CVE-2024-23909.md): Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable (CVSS 5.4, Intel(R) FPGA SDK for OpenCL(TM) software technology)
- [CVE-2024-28046](https://cve.now/CVE-2024-28046.md): Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalatio (CVSS 5.4, Intel(R) GPA software)
- [CVE-2024-22376](https://cve.now/CVE-2024-22376.md): Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an au (CVSS 5.4, installation software for Intel(R) Ethernet Adapter Driver…)
- [CVE-2024-23908](https://cve.now/CVE-2024-23908.md): Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticate (CVSS 5.4, Flexlm License Daemons for Intel(R) FPGA software)
- [CVE-2024-26025](https://cve.now/CVE-2024-26025.md): Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable (CVSS 5.4, Intel(R) Advisor software)
- [CVE-2023-43489](https://cve.now/CVE-2023-43489.md): Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial (CVSS 6.8, Intel(R) CIP software)
- [CVE-2024-23907](https://cve.now/CVE-2024-23907.md): Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to pote (CVSS 5.4, Intel(R) High Level Synthesis Compiler software)
- [CVE-2024-21784](https://cve.now/CVE-2024-21784.md): Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially e (CVSS 5.4, Intel(R) IPP Cryptography software)
- [CVE-2024-28876](https://cve.now/CVE-2024-28876.md): Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable (CVSS 5.4, Intel(R) MPI Library software)
- [CVE-2024-26027](https://cve.now/CVE-2024-26027.md): Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potential (CVSS 5.4, Intel(R) Simics Package Manager software)
- [CVE-2024-28172](https://cve.now/CVE-2024-28172.md): Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to po (CVSS 5.4, Intel(R) Trace Analyzer and Collector software)
- [CVE-2024-25939](https://cve.now/CVE-2024-25939.md): Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially ena (CVSS 6.7, 3rd Generation Intel(R) Xeon(R) Scalable Processors)
- [CVE-2024-28947](https://cve.now/CVE-2024-28947.md): Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a (CVSS 7.1, Intel(R) Server Board S2600ST Family firmware)
- [CVE-2024-29015](https://cve.now/CVE-2024-29015.md): Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially (CVSS 5.4, Intel(R) VTune(TM) Profiler software)
- [CVE-2024-28953](https://cve.now/CVE-2024-28953.md): Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of priv (CVSS 5.4, EMON software)
- [CVE-2024-24977](https://cve.now/CVE-2024-24977.md): Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated u (CVSS 5.4, Intel(R) License Manager for FLEXlm product software)
- [CVE-2024-22184](https://cve.now/CVE-2024-22184.md): Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user (CVSS 5.4, Intel(R) Quartus(R) Prime Pro Edition Design Software)
- [CVE-2024-23489](https://cve.now/CVE-2024-23489.md): Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable esc (CVSS 5.4, Intel(R) VROC software)
- [CVE-2024-28887](https://cve.now/CVE-2024-28887.md): Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalati (CVSS 5.4, Intel(R) IPP software)
- [CVE-2024-28050](https://cve.now/CVE-2024-28050.md): Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user (CVSS 5.1, Intel(R) Arc(TM) & Iris(R) Xe Graphics software)
- [CVE-2024-27461](https://cve.now/CVE-2024-27461.md): Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of s (CVSS 4.3, Intel(R) MAS)
- [CVE-2024-26022](https://cve.now/CVE-2024-26022.md): Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially en (CVSS 8.5, Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC)
- [CVE-2024-39419](https://cve.now/CVE-2024-39419.md): A user without ship permissions can ship the orders (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39403](https://cve.now/CVE-2024-39403.md): Stored XSS through Webhook module public key configuration (CVSS 7.6, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39418](https://cve.now/CVE-2024-39418.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 5.4, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39413](https://cve.now/CVE-2024-39413.md): An unauthorized user can export the Invoiced Sales Report (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39399](https://cve.now/CVE-2024-39399.md): \[Paris\] Path Traversal lead to local file read (CVSS 7.7, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39408](https://cve.now/CVE-2024-39408.md): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (CVSS 4.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-39417](https://cve.now/CVE-2024-39417.md): An unauthorized user can export the Shipping Report (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39410](https://cve.now/CVE-2024-39410.md): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (CVSS 4.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-39407](https://cve.now/CVE-2024-39407.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39398](https://cve.now/CVE-2024-39398.md): OTP 2FA can be bruteforced (CVSS 7.4, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39401](https://cve.now/CVE-2024-39401.md): Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 8.4, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39397](https://cve.now/CVE-2024-39397.md): Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) (CVSS 9.0, Adobe Commerce)
- [CVE-2024-39409](https://cve.now/CVE-2024-39409.md): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (CVSS 4.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-39411](https://cve.now/CVE-2024-39411.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39416](https://cve.now/CVE-2024-39416.md): Unauthorized user can export Orders Sale Report (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39414](https://cve.now/CVE-2024-39414.md): Being able to import/export tax rates without proper privileges (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39412](https://cve.now/CVE-2024-39412.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · magento/community-edition)
- [CVE-2024-39402](https://cve.now/CVE-2024-39402.md): Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 8.4, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39406](https://cve.now/CVE-2024-39406.md): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 6.8, Adobe Commerce · magento/community-edition)
- [CVE-2024-39400](https://cve.now/CVE-2024-39400.md): DOM XSS through integrations can impact other admins (CVSS 8.1, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39404](https://cve.now/CVE-2024-39404.md): A user without Shop Policy Parameters section privilege can alter the shop policy parameters section (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39415](https://cve.now/CVE-2024-39415.md): An unauthorized user can export the Tax Sales Report (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-39405](https://cve.now/CVE-2024-39405.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2024-6532](https://cve.now/CVE-2024-6532.md): Sheet to Table Live Sync for Google Sheet \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT\_Sheet\_Table Shortcode (CVSS 6.4, codersaiful Sheet to Table Live Sync for Google Sheet)
- [CVE-2024-38483](https://cve.now/CVE-2024-38483.md): Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. (CVSS 5.8, Dell Client Platform BIOS)
- [CVE-2024-4389](https://cve.now/CVE-2024-4389.md): Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel \<= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8, averta Depicter — Popup & Slider Builder)
- [CVE-2024-41864](https://cve.now/CVE-2024-41864.md): Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability (CVSS 7.8, Adobe Substance3D - Designer)
- [CVE-2024-41862](https://cve.now/CVE-2024-41862.md): Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD file (CVSS 5.5, Adobe Substance3D - Sampler)
- [CVE-2024-41861](https://cve.now/CVE-2024-41861.md): Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file (CVSS 5.5, Adobe Substance3D - Sampler)
- [CVE-2024-41860](https://cve.now/CVE-2024-41860.md): Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file (CVSS 5.5, Adobe Substance3D - Sampler)
- [CVE-2024-41863](https://cve.now/CVE-2024-41863.md): Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file (CVSS 5.5, Adobe Substance3D - Sampler)
- [CVE-2024-41858](https://cve.now/CVE-2024-41858.md): Adobe InCopy has an integer overflow vulnerability when parsing SVG file (CVSS 7.8, Adobe InCopy)
- [CVE-2024-7732](https://cve.now/CVE-2024-7732.md): SECOM Dr.ID Attendance system - Unrestricted File Upload (CVSS 9.8, SECOM Dr.ID Attendance system)
- [CVE-2024-7731](https://cve.now/CVE-2024-7731.md): SECOM Dr.ID Access control system - SQL injection (CVSS 9.8, SECOM Dr.ID Access control system)
- [CVE-2024-7588](https://cve.now/CVE-2024-7588.md): Gutenberg Blocks, Page Builder – ComboBlocks \<= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block (CVSS 6.4, pickplugins Post Grid)
- [CVE-2024-7729](https://cve.now/CVE-2024-7729.md): CAYIN Technology CMS - Sensitive File Download (CVSS 7.5, CAYIN Technology SMP-2100 · CAYIN Technology SMP-2200 +11)
- [CVE-2024-7728](https://cve.now/CVE-2024-7728.md): CAYIN Technology CMS - OS Command Injection (CVSS 7.2, CAYIN Technology CMS-SE)
- [CVE-2024-20083](https://cve.now/CVE-2024-20083.md): In venc, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, MediaTek MT6765, MT6768, MT6779, MT6785, MT8321, MT8385, MT…)
- [CVE-2024-20082](https://cve.now/CVE-2024-20082.md): In Modem, there is a possible memory corruption due to a missing bounds check. (CVSS 9.8, MediaTek MT2735, MT2737, MT6833, MT6835, MT6835T, MT6853, M…)
- [CVE-2024-38652](https://cve.now/CVE-2024-38652.md): Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of serv (CVSS 8.2, Ivanti Avalanche)
- [CVE-2024-37373](https://cve.now/CVE-2024-37373.md): Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to ach (CVSS 7.2, Ivanti Avalanche)
- [CVE-2024-37399](https://cve.now/CVE-2024-37399.md): A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, re (CVSS 7.5, Ivanti Avalanche)
- [CVE-2024-38653](https://cve.now/CVE-2024-38653.md): XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. (CVSS 8.2, Ivanti Avalanche)
- [CVE-2024-36136](https://cve.now/CVE-2024-36136.md): An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting (CVSS 7.5, Ivanti Avalanche)
- [CVE-2024-7754](https://cve.now/CVE-2024-7754.md): SourceCodester Clinics Patient Management System check\_medicine\_name.php sql injection (CVSS 5.3, SourceCodester Clinics Patient Management System)
- [CVE-2024-7753](https://cve.now/CVE-2024-7753.md): SourceCodester Clinics Patient Management System user\_images direct request (CVSS 6.9, SourceCodester Clinics Patient Management System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.