CVEs published August 24, 2024
28 CVEs were published on August 24, 2024: 2 critical, 8 high.
- Published
- 28
- Critical
- 2
- High
- 8
- Medium
- 18
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- D-Link DNS-120 · D-Link DNR-202L +18
- 8
- ImageRecycle pdf & image compression
- 2
- SourceCodester Record Management System
- 2
- brandondove Favicon Generator
- 1
- Go-Tribe gotribe
- 1
- IBM App Connect Enterprise Certified Container
- 1
- instawp String locator
- 1
- levantoan Image Hotspot by DevVN
- 1
- maxfoundry MaxButtons – Create buttons
- 1
- presstigers Simple Job Board
- 1
Critical 2
High 8
- CVE-2024-7656Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injectionlevantoan Image Hotspot by DevVN
- CVE-2024-7351Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injectionpresstigers Simple Job Board
- CVE-2024-45234An issue was discovered in Fort before 1.6.3.
- CVE-2024-45235An issue was discovered in Fort before 1.6.3.
- CVE-2024-45236An issue was discovered in Fort before 1.6.3.
- CVE-2024-45238An issue was discovered in Fort before 1.6.3.
- CVE-2024-45239An issue was discovered in Fort before 1.6.3.
- CVE-2024-45240The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via de
Medium, low and unrated 18
- CVE-2024-8137SourceCodester Record Management System search_user.php cross site scriptingSourceCodester Record Management System
- CVE-2024-8136SourceCodester Record Management System sort1_user.php cross site scriptingSourceCodester Record Management System
- CVE-2024-8135Go-Tribe gotribe token.go Sign hard-coded credentialsGo-Tribe gotribe
- CVE-2024-8134D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8133D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8132D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8131D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8130D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8129D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-8128D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2022-43915IBM App Connect Enterprise Certified ContainerIBM App Connect Enterprise Certified Container
- CVE-2024-8127D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injectionD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2024-6499WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosuremaxfoundry MaxButtons – Create buttons
- CVE-2024-6631ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX ActionsImageRecycle pdf & image compression
- CVE-2024-2254RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scriptingrisetheme RT Easy Builder – Advanced addons for Elementor
- CVE-2024-8120ImageRecycle pdf & image compression <= 3.1.14 - Cross-Site Request in Several AJAX ActionsImageRecycle pdf & image compression
- CVE-2023-0926Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scriptingsasiddiqui Custom Permalinks
- CVE-2023-6987String Locator <= 2.6.5 - Reflected Cross-Site Scriptinginstawp String locator