CVEs published August 31, 2024
18 CVEs were published on August 31, 2024: 0 critical, 5 high.
- Published
- 18
- Critical
- 0
- High
- 5
- Medium
- 12
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- NVIDIA CUDA Toolkit
- 3
- Dell PowerScale OneFS
- 2
- Linux
- 2
- tagDiv Composer
- 2
- code-projects Pharmacy Management System
- 1
- cyberlord92 Web Application Firewall – website security
- 1
- gioni WP Cerber Security, Anti-spam & Malware Scan
- 1
- IBM Sterling Connect:Direct Web Services
- 1
- mihail-barinov Share This Image
- 1
- shafayat-alam Attire
- 1
High 5
- CVE-2024-44946kcm: Serialise kcm_sendmsg() for the same socket.Linux
- CVE-2024-7717WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injectionthimpress WP Events Manager
- CVE-2024-44945netfilter: nfnetlink: Initialise extack before use in ACKsLinux
- CVE-2024-7435Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injectionshafayat-alam Attire
- CVE-2024-39747IBM Sterling Connect:Direct Web Services information disclosureIBM Sterling Connect:Direct Web Services
Medium, low and unrated 13
- CVE-2024-8366code-projects Pharmacy Management System Update My Profile Page index.php cross site scriptingcode-projects Pharmacy Management System
- CVE-2022-4539Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypasscyberlord92 Web Application Firewall – website security
- CVE-2022-4536IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypassyoutag Two-factor authentication
- CVE-2024-8108Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parametermihail-barinov Share This Image
- CVE-2022-4100WP Cerber Security <= 9.4 - IP Protection Bypassgioni WP Cerber Security, Anti-spam & Malware Scan
- CVE-2024-0111NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a NVIDIA CUDA Toolkit
- CVE-2024-0110NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ENVIDIA CUDA Toolkit
- CVE-2024-0109NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file.NVIDIA CUDA Toolkit
- CVE-2024-39579Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability.Dell PowerScale OneFS
- CVE-2024-8276WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align AttributeWPZOOM Portfolio Lite – Filterable Portfolio Plugin
- CVE-2024-39578Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability.Dell PowerScale OneFS
- CVE-2024-3886tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv Composer
- CVE-2024-5212tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]tagDiv Composer