# CVEs published 2024-08-22

129 CVEs were published on August 22, 2024: 10 critical, 33 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-8089](https://cve.now/CVE-2024-8089.md): SourceCodester E-Commerce System controller.php unrestricted upload (CVSS 5.3, SourceCodester E-Commerce System)
- [CVE-2024-38210](https://cve.now/CVE-2024-38210.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Edge)
- [CVE-2024-38208](https://cve.now/CVE-2024-38208.md): Microsoft Edge for Android Spoofing Vulnerability (CVSS 6.1, Microsoft Edge for Android)
- [CVE-2024-38209](https://cve.now/CVE-2024-38209.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Edge)
- [CVE-2024-8087](https://cve.now/CVE-2024-8087.md): SourceCodester E-Commerce System popup\_Item.php sql injection (CVSS 5.3, SourceCodester E-Commerce System)
- [CVE-2024-8086](https://cve.now/CVE-2024-8086.md): SourceCodester E-Commerce System Admin Login login.php sql injection (CVSS 6.9, SourceCodester E-Commerce System)
- [CVE-2024-8084](https://cve.now/CVE-2024-8084.md): SourceCodester Online Computer and Laptop Store Setting SystemSettings.php cross site scripting (CVSS 5.1, SourceCodester Online Computer and Laptop Store)
- [CVE-2024-8083](https://cve.now/CVE-2024-8083.md): SourceCodester Online Computer and Laptop Store Master.php sql injection (CVSS 5.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2024-8081](https://cve.now/CVE-2024-8081.md): itsourcecode Payroll Management System login.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2024-43790](https://cve.now/CVE-2024-43790.md): heap-buffer-overflow in do\_search() in Vim \< 9.1.0689 (CVSS 4.5, vim)
- [CVE-2024-8080](https://cve.now/CVE-2024-8080.md): SourceCodester Online Health Care System search.php sql injection (CVSS 5.3, SourceCodester Online Health Care System)
- [CVE-2024-8079](https://cve.now/CVE-2024-8079.md): TOTOLINK AC1200 T8 exportOvpn buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2023-7260](https://cve.now/CVE-2023-7260.md): A path traversal vulnerability has been discovered in OpenText™ CX-E Voice. (CVSS 6.9, OpenText™ CX-E Voice)
- [CVE-2024-8078](https://cve.now/CVE-2024-8078.md): TOTOLINK AC1200 T8 setTracerouteCfg buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2024-8077](https://cve.now/CVE-2024-8077.md): TOTOLINK AC1200 T8 setTracerouteCfg os command injection (CVSS 5.3, TOTOLINK AC1200 T8)
- [CVE-2024-8076](https://cve.now/CVE-2024-8076.md): TOTOLINK AC1200 T8 setDiagnosisCfg buffer overflow (CVSS 8.7, TOTOLINK AC1200 T8)
- [CVE-2024-42418](https://cve.now/CVE-2024-42418.md): Avtec Outpost Use of Hard-coded Cryptographic Key (CVSS 7.5, Avtec Outpost)
- [CVE-2024-39776](https://cve.now/CVE-2024-39776.md): Avtec Outpost Storage of File with Sensitive Data Under Web Root (CVSS 7.5, Avtec Outpost)
- [CVE-2024-8075](https://cve.now/CVE-2024-8075.md): TOTOLINK AC1200 T8 setDiagnosisCfg os command injection (CVSS 5.3, TOTOLINK AC1200 T8)
- [CVE-2024-39717](https://cve.now/CVE-2024-39717.md): The Versa Director GUI provides an option to customize the look and feel of the user interface. (CVSS 6.6, KEV, Versa Director)
- [CVE-2024-8088](https://cve.now/CVE-2024-8088.md): Infinite loop when iterating over zip archive entry names from zipfile.Path (CVSS 8.7, Python Software Foundation CPython)
- [CVE-2024-7634](https://cve.now/CVE-2024-7634.md): NGINX Agent Vulnerability (CVSS 4.9, F5 NGINX Agent)
- [CVE-2024-42490](https://cve.now/CVE-2024-42490.md): authentik has Insufficient Authorization for several API endpoints (CVSS 7.5, goauthentik authentik · goauthentik.io)
- [CVE-2024-3127](https://cve.now/CVE-2024-3127.md): Improper Access Control in GitLab (CVSS 4.3, GitLab)
- [CVE-2024-6502](https://cve.now/CVE-2024-6502.md): Incorrect Provision of Specified Functionality in GitLab (CVSS 5.7, GitLab)
- [CVE-2024-7110](https://cve.now/CVE-2024-7110.md): Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 6.4, GitLab)
- [CVE-2024-8041](https://cve.now/CVE-2024-8041.md): Uncontrolled Resource Consumption in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-6452](https://cve.now/CVE-2023-6452.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction V (CVSS 9.6, Forcepoint Web Security)
- [CVE-2024-43780](https://cve.now/CVE-2024-43780.md): Unauthorized channel file upload (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2024-42497](https://cve.now/CVE-2024-42497.md): Insufficient permissions checks on teams (CVSS 6.0, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2024-40884](https://cve.now/CVE-2024-40884.md): Unauthorized disabling of invite URL (CVSS 2.7, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2024-43787](https://cve.now/CVE-2024-43787.md): Hono CSRF middleware can be bypassed using crafted Content-Type header (CVSS 5.0, honojs hono · hono)
- [CVE-2024-43785](https://cve.now/CVE-2024-43785.md): gitoxide-core does not neutralize special characters for terminals (CVSS 2.5, Byron gitoxide · gitoxide-core +1)
- [CVE-2024-43398](https://cve.now/CVE-2024-43398.md): REXML denial of service vulnerability (CVSS 5.9, ruby rexml · rexml)
- [CVE-2024-43331](https://cve.now/CVE-2024-43331.md): WordPress WP SMS plugin \<= 6.9.3 - Broken Access Control vulnerability (CVSS 5.3, VeronaLabs WP SMS)
- [CVE-2024-39745](https://cve.now/CVE-2024-39745.md): IBM Sterling Connect:Direct Web Services information disclosure (CVSS 5.9, IBM Sterling Connect:Direct Web Services)
- [CVE-2024-7848](https://cve.now/CVE-2024-7848.md): User Private Files \<= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access (CVSS 4.3, deepakkite File Sharing & Download Manager – User Private F…)
- [CVE-2024-39744](https://cve.now/CVE-2024-39744.md): IBM Sterling Connect:Direct Web Services cross-site request forgery (CVSS 4.3, IBM Sterling Connect:Direct Web Services)
- [CVE-2024-39746](https://cve.now/CVE-2024-39746.md): IBM Sterling Connect:Direct Web Services information disclosure (CVSS 5.9, IBM Sterling Connect:Direct Web Services)
- [CVE-2024-35151](https://cve.now/CVE-2024-35151.md): IBM OpenPages information disclosure (CVSS 6.5, IBM OpenPages with Watson)
- [CVE-2024-6870](https://cve.now/CVE-2024-6870.md): Responsive Lightbox & Gallery \<= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload (CVSS 6.4, dfactory Responsive Lightbox & Gallery)
- [CVE-2024-7778](https://cve.now/CVE-2024-7778.md): Orbit Fox by ThemeIsle \<= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, themeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Suppor…)
- [CVE-2024-8072](https://cve.now/CVE-2024-8072.md): Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users (CVSS 5.3, mage-ai)
- [CVE-2024-8071](https://cve.now/CVE-2024-8071.md): System Role with edit access to permissions can elevate themselves to system admin (CVSS 4.7, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2024-42411](https://cve.now/CVE-2024-42411.md): User creation date manipulation in POST /api/v4/users (CVSS 5.3, Mattermost)
- [CVE-2024-40886](https://cve.now/CVE-2024-40886.md): One-click Client-Side Path Traversal Leading to CSRF in User Management admin page (CVSS 4.6, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2024-43813](https://cve.now/CVE-2024-43813.md): IDOR when marking read a user's channel (CVSS 4.3, Mattermost)
- [CVE-2024-39810](https://cve.now/CVE-2024-39810.md): Server crash via Elasticsearch certificate file (CVSS 4.9, Mattermost)
- [CVE-2024-32939](https://cve.now/CVE-2024-32939.md): Email addresses of remote users visible in props regardless of server settings (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2024-39836](https://cve.now/CVE-2024-39836.md): Munged email address used for password resets and notifications (CVSS 4.8, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2022-48941](https://cve.now/CVE-2022-48941.md): ice: fix concurrent reset and removal of VFs (CVSS 8.8, Linux)
- [CVE-2022-48940](https://cve.now/CVE-2022-48940.md): bpf: Fix crash due to incorrect copy\_map\_value (CVSS 7.8, Linux)
- [CVE-2022-48939](https://cve.now/CVE-2022-48939.md): bpf: Add schedule points in batch ops (no CVSS, Linux)
- [CVE-2022-48938](https://cve.now/CVE-2022-48938.md): CDC-NCM: avoid overflow in sanity checking (no CVSS, Linux)
- [CVE-2022-48937](https://cve.now/CVE-2022-48937.md): io\_uring: add a schedule point in io\_add\_buffers() (no CVSS, Linux)
- [CVE-2022-48935](https://cve.now/CVE-2022-48935.md): netfilter: nf\_tables: unregister flowtable hooks on netns exit (CVSS 7.8, Linux)
- [CVE-2022-48934](https://cve.now/CVE-2022-48934.md): nfp: flower: Fix a potential leak in nfp\_tunnel\_add\_shared\_mac() (no CVSS, Linux)
- [CVE-2022-48933](https://cve.now/CVE-2022-48933.md): netfilter: nf\_tables: fix memory leak during stateful obj update (no CVSS, Linux)
- [CVE-2022-48932](https://cve.now/CVE-2022-48932.md): net/mlx5: DR, Fix slab-out-of-bounds in mlx5\_cmd\_dr\_create\_fte (CVSS 7.8, Linux)
- [CVE-2022-48931](https://cve.now/CVE-2022-48931.md): configfs: fix a race in configfs\_{,un}register\_subsystem() (no CVSS, Linux)
- [CVE-2022-48930](https://cve.now/CVE-2022-48930.md): RDMA/ib\_srp: Fix a deadlock (no CVSS, Linux)
- [CVE-2022-48929](https://cve.now/CVE-2022-48929.md): bpf: Fix crash due to out of bounds access into reg2btf\_ids. (no CVSS, Linux)
- [CVE-2022-48928](https://cve.now/CVE-2022-48928.md): iio: adc: men\_z188\_adc: Fix a resource leak in an error handling path (no CVSS, Linux)
- [CVE-2022-48927](https://cve.now/CVE-2022-48927.md): iio: adc: tsc2046: fix memory corruption by preventing array overflow (CVSS 7.8, Linux)
- [CVE-2022-48926](https://cve.now/CVE-2022-48926.md): usb: gadget: rndis: add spinlock for rndis response list (no CVSS, Linux)
- [CVE-2022-48943](https://cve.now/CVE-2022-48943.md): KVM: x86/mmu: make apf token non-zero to fix bug (CVSS 7.1, Linux)
- [CVE-2022-48942](https://cve.now/CVE-2022-48942.md): hwmon: Handle failure to register sensor with thermal zone correctly (no CVSS, Linux)
- [CVE-2024-39576](https://cve.now/CVE-2024-39576.md): Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. (CVSS 8.8, Dell Power Manager)
- [CVE-2024-5583](https://cve.now/CVE-2024-5583.md): The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce \<= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings (CVSS 6.4, posimyththemes The Plus Addons for Elementor – Addons for E…)
- [CVE-2024-7836](https://cve.now/CVE-2024-7836.md): Themify Builder \<= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication (CVSS 4.3, themifyme Themify Builder)
- [CVE-2024-7384](https://cve.now/CVE-2024-7384.md): AcyMailing \<= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym\_extractArchive Function (CVSS 7.5, acyba AcyMailing – An Ultimate Newsletter Plugin and Market…)
- [CVE-2022-48925](https://cve.now/CVE-2022-48925.md): RDMA/cma: Do not change route.addr.src\_addr outside state checks (CVSS 7.8, Linux)
- [CVE-2022-48924](https://cve.now/CVE-2022-48924.md): thermal: int340x: fix memory leak in int3400\_notify() (no CVSS, Linux)
- [CVE-2022-48923](https://cve.now/CVE-2022-48923.md): btrfs: prevent copying too big compressed lzo segment (CVSS 7.8, Linux)
- [CVE-2022-48922](https://cve.now/CVE-2022-48922.md): riscv: fix oops caused by irqsoff latency tracer (no CVSS, Linux)
- [CVE-2022-48921](https://cve.now/CVE-2022-48921.md): sched/fair: Fix fault in reweight\_entity (no CVSS, Linux)
- [CVE-2022-48920](https://cve.now/CVE-2022-48920.md): btrfs: get rid of warning on transaction commit when using flushoncommit (no CVSS, Linux)
- [CVE-2022-48919](https://cve.now/CVE-2022-48919.md): cifs: fix double free race when mount fails in cifs\_get\_root() (CVSS 8.8, Linux)
- [CVE-2022-48918](https://cve.now/CVE-2022-48918.md): iwlwifi: mvm: check debugfs\_dir ptr before use (no CVSS, Linux)
- [CVE-2022-48916](https://cve.now/CVE-2022-48916.md): iommu/vt-d: Fix double list\_add when enabling VMD in scalable mode (no CVSS, Linux)
- [CVE-2022-48915](https://cve.now/CVE-2022-48915.md): thermal: core: Fix TZ\_GET\_TRIP NULL pointer dereference (no CVSS, Linux)
- [CVE-2022-48914](https://cve.now/CVE-2022-48914.md): xen/netfront: destroy queues before real\_num\_tx\_queues is zeroed (no CVSS, Linux)
- [CVE-2022-48913](https://cve.now/CVE-2022-48913.md): blktrace: fix use after free for struct blk\_trace (CVSS 7.8, Linux)
- [CVE-2022-48912](https://cve.now/CVE-2022-48912.md): netfilter: fix use-after-free in \_\_nf\_register\_net\_hook() (CVSS 7.8, Linux)
- [CVE-2022-48911](https://cve.now/CVE-2022-48911.md): netfilter: nf\_queue: fix possible use-after-free (CVSS 7.8, Linux)
- [CVE-2022-48910](https://cve.now/CVE-2022-48910.md): net: ipv6: ensure we call ipv6\_mc\_down() at most once (no CVSS, Linux)
- [CVE-2022-48909](https://cve.now/CVE-2022-48909.md): net/smc: fix connection leak (no CVSS, Linux)
- [CVE-2022-48908](https://cve.now/CVE-2022-48908.md): net: arcnet: com20020: Fix null-ptr-deref in com20020pci\_probe() (CVSS 5.5, Linux)
- [CVE-2022-48907](https://cve.now/CVE-2022-48907.md): auxdisplay: lcd2s: Fix memory leak in -\>remove() (no CVSS, Linux)
- [CVE-2022-48906](https://cve.now/CVE-2022-48906.md): mptcp: Correctly set DATA\_FIN timeout when number of retransmits is large (no CVSS, Linux)
- [CVE-2022-48905](https://cve.now/CVE-2022-48905.md): ibmvnic: free reset-work-item when flushing (no CVSS, Linux)
- [CVE-2022-48904](https://cve.now/CVE-2022-48904.md): iommu/amd: Fix I/O page table memory leak (no CVSS, Linux)
- [CVE-2022-48903](https://cve.now/CVE-2022-48903.md): btrfs: fix relocation crash due to premature return from btrfs\_commit\_transaction() (no CVSS, Linux)
- [CVE-2022-48902](https://cve.now/CVE-2022-48902.md): btrfs: do not WARN\_ON() if we have PageError set (no CVSS, Linux)
- [CVE-2022-48901](https://cve.now/CVE-2022-48901.md): btrfs: do not start relocation until in progress drops are done (no CVSS, Linux)
- [CVE-2021-4441](https://cve.now/CVE-2021-4441.md): spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq\_qspi\_exec\_mem\_op() (no CVSS, Linux)
- [CVE-2024-36439](https://cve.now/CVE-2024-36439.md): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash (CVSS 9.4)
- [CVE-2024-36440](https://cve.now/CVE-2024-36440.md): An issue was discovered on Swissphone DiCal-RED 4009 devices. (CVSS 6.8)
- [CVE-2024-36441](https://cve.now/CVE-2024-36441.md): Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that (CVSS 5.4)
- [CVE-2024-36442](https://cve.now/CVE-2024-36442.md): cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the devic (CVSS 8.8)
- [CVE-2024-36443](https://cve.now/CVE-2024-36443.md): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP. (CVSS 7.6)
- [CVE-2024-36444](https://cve.now/CVE-2024-36444.md): cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs. (CVSS 8.1)
- [CVE-2024-36445](https://cve.now/CVE-2024-36445.md): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication. (CVSS 9.8)
- [CVE-2024-42056](https://cve.now/CVE-2024-42056.md): Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. (CVSS 6.5)
- [CVE-2024-42599](https://cve.now/CVE-2024-42599.md): SeaCMS 13.0 has a remote code execution vulnerability. (CVSS 8.8)
- [CVE-2024-42761](https://cve.now/CVE-2024-42761.md): A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin\_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which (CVSS 6.1)
- [CVE-2024-42762](https://cve.now/CVE-2024-42762.md): A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows (CVSS 5.4)
- [CVE-2024-42763](https://cve.now/CVE-2024-42763.md): A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1 (CVSS 5.4)
- [CVE-2024-42767](https://cve.now/CVE-2024-42767.md): Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add\_room\_controller.php. (CVSS 7.2)
- [CVE-2024-42768](https://cve.now/CVE-2024-42768.md): A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete\_room.php. (CVSS 6.8)
- [CVE-2024-42769](https://cve.now/CVE-2024-42769.md): A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup\_user.php " of Kashipara Hotel Management System v1.0, which (CVSS 6.1)
- [CVE-2024-42770](https://cve.now/CVE-2024-42770.md): A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup\_user.php" of Kashipara Hotel Management System v1.0, which allo (CVSS 4.7)
- [CVE-2024-42771](https://cve.now/CVE-2024-42771.md): A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit\_room\_controller.php" of the Kashipara Hotel Management System v (CVSS 4.8)
- [CVE-2024-42772](https://cve.now/CVE-2024-42772.md): An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthent (CVSS 7.5)
- [CVE-2024-42773](https://cve.now/CVE-2024-42773.md): An Incorrect Access Control vulnerability was found in /admin/edit\_room\_controller.php in Kashipara Hotel Management System v1.0, which allo (CVSS 9.1)
- [CVE-2024-42774](https://cve.now/CVE-2024-42774.md): An Incorrect Access Control vulnerability was found in /admin/delete\_room.php in Kashipara Hotel Management System v1.0, which allows an una (CVSS 7.5)
- [CVE-2024-42775](https://cve.now/CVE-2024-42775.md): An Incorrect Access Control vulnerability was found in /admin/add\_room\_controller.php in Kashipara Hotel Management System v1.0, which allow (CVSS 9.1)
- [CVE-2024-42776](https://cve.now/CVE-2024-42776.md): Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php. (CVSS 7.2)
- [CVE-2024-43033](https://cve.now/CVE-2024-43033.md): JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to Attachme (CVSS 8.8)
- [CVE-2024-45163](https://cve.now/CVE-2024-45163.md): The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. (CVSS 9.1)
- [CVE-2024-45165](https://cve.now/CVE-2024-45165.md): An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. (CVSS 5.3)
- [CVE-2024-45166](https://cve.now/CVE-2024-45166.md): An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. (CVSS 9.8)
- [CVE-2024-45167](https://cve.now/CVE-2024-45167.md): An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. (CVSS 9.8)
- [CVE-2024-45168](https://cve.now/CVE-2024-45168.md): An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. (CVSS 9.1)
- [CVE-2024-45169](https://cve.now/CVE-2024-45169.md): An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. (CVSS 9.8)
- [CVE-2024-45191](https://cve.now/CVE-2024-45191.md): An issue was discovered in Matrix libolm through 3.2.16. (CVSS 5.3)
- [CVE-2024-45192](https://cve.now/CVE-2024-45192.md): An issue was discovered in Matrix libolm through 3.2.16. (CVSS 5.3)
- [CVE-2024-45193](https://cve.now/CVE-2024-45193.md): An issue was discovered in Matrix libolm through 3.2.16. (CVSS 4.3)
- [CVE-2024-45201](https://cve.now/CVE-2024-45201.md): An issue was discovered in llama\_index before 0.10.38. (CVSS 8.8, llama-index-core · llama-index)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.