CVEs published August 28, 2024
75 CVEs were published on August 28, 2024: 5 critical, 31 high.
- Published
- 75
- Critical
- 5
- High
- 31
- Medium
- 37
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 24
Most affected products
- Cisco NX-OS Software
- 6
- OpenText NetIQ Advance Authentication
- 6
- Google Chrome
- 3
- Interactive Contact Form and Multi Step Form Builder with D…
- 3
- portabilis i-educar
- 3
- Tenda O6
- 3
- Xiaomi GetApps application
- 3
- Cisco Application Policy Infrastructure Controller
- 2
- HyperView Geoportal Toolkit
- 2
- in2code/powermail
- 2
Critical 5
- CVE-2024-8030Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injectionbdthemes Ultimate Store Kit – Addon For WooCommerce, EDD an…
- CVE-2024-34198TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow.
- CVE-2024-42905Beijing Digital China Cloud Technology Co., Ltd.
- CVE-2024-44760Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allow
- CVE-2024-44761An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests.
High 31
- CVE-2024-8250Expired Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2024-8198Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2024-8194Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2024-8193Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2024-45048XML External Entity Reference (XXE) in PHPSpreadsheetPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet +1
- CVE-2024-45059Authenticated SQL Injection in i-Educarportabilis i-educar
- CVE-2024-45058Privilege escalation in i-Educarportabilis i-educar
- CVE-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobberingjupyterlab · notebook
- CVE-2024-20446Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2024-7269Stored XSS in ConnX ESP HR ManagementConnX ESP HR Management
- CVE-2024-5546SQL InjectionManageEngine Password Manager Pro · ManageEngine PAM360
- CVE-2023-26322GetApps application has code execution vulnerabilityXiaomi GetApps application
- CVE-2023-26323Xiaomi App Market has a code execution vulnerabilityXiaomi App Market
- CVE-2023-26324GetApps application has code execution vulnerabilityXiaomi GetApps application
- CVE-2024-45346GetApps application has code execution vulnerabilityXiaomi GetApps application
- CVE-2024-6311Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File UploadInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2021-22509Handling of sensitive data in process memory in NetIQ Advance AuthenticationOpenText NetIQ Advance Authentication
- CVE-2021-22530Improper account management vulnerability in NetIQ Advance AuthenticationOpenText NetIQ Advance Authentication
- CVE-2021-38121Weak communication protocol identified in Advance Authentication client applicationOpenText NetIQ Advance Authentication
- CVE-2024-4554Multiple xss vulnerability in NetIQ Access ManagerOpenText Access Manager
- CVE-2024-4555User impersonation with MFA when configure in specific wayOpenText NetIQ Access Manager
- CVE-2024-39584Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.Dell Client Platform BIOS
- CVE-2024-8231Tenda O6 setPortForward fromVirtualSet stack-based overflowTenda O6
- CVE-2024-8230Tenda O6 setMacFilterList fromSafeSetMacFilter stack-based overflowTenda O6
- CVE-2024-8229Tenda O6 operateMacFilter frommacFilterModify stack-based overflowTenda O6
- CVE-2024-8228Tenda O5 setMacFilterList fromSafeSetMacFilter stack-based overflowTenda O5
- CVE-2024-8227Tenda O1 DhcpSetSer fromDhcpSetSer stack-based overflowTenda O1
- CVE-2023-45896ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Li
- CVE-2024-34195TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow.
- CVE-2024-45232An issue was discovered in powermail extension through 12.3.5 for TYPO3.in2code/powermail
- CVE-2024-45233An issue was discovered in powermail extension through 12.3.5 for TYPO3.in2code/powermail
Medium, low and unrated 39
- CVE-2024-45046PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style informationPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet +1
- CVE-2024-45057Reflected Cross-Site Scripting in i-Educarportabilis i-educar
- CVE-2024-45043OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerabilityopen-telemetry opentelemetry-collector-contrib · github.com…
- CVE-2024-45054Potential Permission Leakage of Cluster Level in hwameistorhwameistor · github.com/hwameistor/hwameistor
- CVE-2024-20284Cisco NX-OS Software Python Parser Escape VulnerabilityCisco NX-OS Software
- CVE-2024-20285Cisco NX-OS Software Python Parser Escape VulnerabilityCisco NX-OS Software
- CVE-2024-20286Cisco NX-OS Software Python Parser Escape VulnerabilityCisco NX-OS Software
- CVE-2024-20289Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software · Cisco NX-OS System Software in ACI M…
- CVE-2024-7745Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2024-6053Improper access control in the clipboard synchronization featureTeamViewer Meeting · TeamViewer Remote Full Client
- CVE-2024-7744Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2024-20478Cisco Application Policy Infrastructure Controller App Privilege Escalation VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2024-20411Cisco NX-OS Bash Arbitrary Code Execution VulnerabilityCisco NX-OS Software
- CVE-2024-20413Cisco NX-OS Bash Privilege Escalation VulnerabilityCisco NX-OS Software
- CVE-2024-20279Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2024-8195Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposurembis Permalink Manager Lite
- CVE-2024-6450Reflected XSS in HyperView Geoportal ToolkitHyperView Geoportal Toolkit
- CVE-2024-6449Arbitrary cross-domain file inclusion in HyperView Geoportal ToolkitHyperView Geoportal Toolkit
- CVE-2024-7447Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media UploadInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2023-26321The international version of Xiaomi File Manager has a path traversal vulnerabilityXiaomi File Manager App International Version
- CVE-2024-44943mm: gup: stop abusing try_grab_folioLinux
- CVE-2024-6312Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File DeletionInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2021-22529Sensitive Data Exposure leaks potential information in NetIQ Advance AuthenticationOpenText NetIQ Advance Authentication
- CVE-2021-38120Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance AuthenticationOpenText NetIQ Advance Authentication
- CVE-2021-38122Cross-Site Scripting (XSS) in Advance AuthenticationOpenText NetIQ Advance Authentication
- CVE-2024-4556Directory traversal vulnerability in NetIQ Access ManagerOpenText NetIQ Access Manager
- CVE-2024-39771QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacSafie QBiC CLOUD CC-2L · Safie One
- CVE-2023-43078Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folDell Client Platform, Dell Dock Firmware
- CVE-2024-6448Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosuremollieintegration Mollie Payments for WooCommerce
- CVE-2024-7573Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injectioncomesio Relevanssi Live Ajax Search
- CVE-2024-41236A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute
- CVE-2024-41564EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.
- CVE-2024-41565JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.
- CVE-2024-42698Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerabil
- CVE-2024-42793A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/aj
- CVE-2024-42900Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the sql parameter of the createTable() func
- CVE-2024-44913An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file.
- CVE-2024-44914An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file.
- CVE-2024-44915An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file.