CVEs published August 25, 2024
24 CVEs were published on August 25, 2024: 1 critical, 2 high.
- Published
- 24
- Critical
- 1
- High
- 2
- Medium
- 20
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- CyberArk Identity Management
- 4
- code-projects Pharmacy Management System
- 3
- SourceCodester QR Code Bookmark System
- 3
- ClassCMS
- 2
- ContiNew Admin
- 2
- SourceCodester Daily Calories Monitoring Tool
- 2
- 9front
- 1
- github.com/hyperledger/fabric
- 1
- github.com/imroc/req · github.com/imroc/req/v2 +1
- 1
- itsourcecode E-Commerce Website
- 1
Critical 1
High 2
Medium, low and unrated 21
- CVE-2024-8155ContiNew Admin tree sql injectionContiNew Admin
- CVE-2024-8154SourceCodester QR Code Bookmark System Parameter update-bookmark.php cross site scriptingSourceCodester QR Code Bookmark System
- CVE-2024-8153SourceCodester QR Code Bookmark System delete-bookmark.php cross site scriptingSourceCodester QR Code Bookmark System
- CVE-2024-8152SourceCodester QR Code Bookmark System Parameter add-bookmark.php cross site scriptingSourceCodester QR Code Bookmark System
- CVE-2024-8151SourceCodester Interactive Map with Marker delete-mark.php cross site scriptingSourceCodester Interactive Map with Marker
- CVE-2024-8150ContiNew Admin user sql injectionContiNew Admin
- CVE-2024-8011Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granteLogitech Options+
- CVE-2024-8147code-projects Pharmacy Management System index.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-8146code-projects Pharmacy Management System index.php sql injectioncode-projects Pharmacy Management System
- CVE-2024-42339CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCyberArk Identity Management
- CVE-2024-42338CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCyberArk Identity Management
- CVE-2024-42337CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCyberArk Identity Management
- CVE-2024-8145ClassCMS Article admin cross site scriptingClassCMS
- CVE-2024-8144ClassCMS Logo admin cross site scriptingClassCMS
- CVE-2024-8142SourceCodester Daily Calories Monitoring Tool delete-calorie.php cross site scriptingSourceCodester Daily Calories Monitoring Tool
- CVE-2024-8141SourceCodester Daily Calories Monitoring Tool add-calorie.php cross site scriptingSourceCodester Daily Calories Monitoring Tool
- CVE-2024-8140SourceCodester Task Progress Tracker update-task.php cross site scriptingSourceCodester Task Progress Tracker
- CVE-2024-8139itsourcecode E-Commerce Website search_list.php sql injectionitsourcecode E-Commerce Website
- CVE-2024-8138code-projects Pharmacy Management System Parameter index.php editManager sql injectioncode-projects Pharmacy Management System
- CVE-2023-48957PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to
- CVE-2024-45244Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.github.com/hyperledger/fabric