# CVEs published 2024-08-31

18 CVEs were published on August 31, 2024: 0 critical, 5 high. Days are UTC.

- [CVE-2024-8366](https://cve.now/CVE-2024-8366.md): code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting (CVSS 6.9, code-projects Pharmacy Management System)
- [CVE-2024-44946](https://cve.now/CVE-2024-44946.md): kcm: Serialise kcm\_sendmsg() for the same socket. (CVSS 7.8, Linux)
- [CVE-2022-4539](https://cve.now/CVE-2022-4539.md): Web Application Firewall \<= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 5.3, cyberlord92 Web Application Firewall – website security)
- [CVE-2024-7717](https://cve.now/CVE-2024-7717.md): WP Events Manager \<= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection (CVSS 8.8, thimpress WP Events Manager)
- [CVE-2022-4536](https://cve.now/CVE-2022-4536.md): IP Vault – WP Firewall \<= 1.1 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 5.3, youtag Two-factor authentication)
- [CVE-2024-8108](https://cve.now/CVE-2024-8108.md): Share This Image \<= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter (CVSS 6.4, mihail-barinov Share This Image)
- [CVE-2022-4100](https://cve.now/CVE-2022-4100.md): WP Cerber Security \<= 9.4 - IP Protection Bypass (CVSS 5.3, gioni WP Cerber Security, Anti-spam & Malware Scan)
- [CVE-2024-0111](https://cve.now/CVE-2024-0111.md): NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a (CVSS 4.4, NVIDIA CUDA Toolkit)
- [CVE-2024-0110](https://cve.now/CVE-2024-0110.md): NVIDIA CUDA Toolkit contains a vulnerability in command \`cuobjdump\` where a user may cause an out-of-bound write by passing in a malformed E (CVSS 4.4, NVIDIA CUDA Toolkit)
- [CVE-2024-0109](https://cve.now/CVE-2024-0109.md): NVIDIA CUDA Toolkit contains a vulnerability in command \`cuobjdump\` where a user may cause a crash by passing in a malformed ELF file. (CVSS 3.3, NVIDIA CUDA Toolkit)
- [CVE-2024-39579](https://cve.now/CVE-2024-39579.md): Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. (CVSS 6.7, Dell PowerScale OneFS)
- [CVE-2024-8276](https://cve.now/CVE-2024-8276.md): WPZOOM Portfolio Lite – Filterable Portfolio Plugin \<= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute (CVSS 6.4, WPZOOM Portfolio Lite – Filterable Portfolio Plugin)
- [CVE-2024-39578](https://cve.now/CVE-2024-39578.md): Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. (CVSS 6.3, Dell PowerScale OneFS)
- [CVE-2024-44945](https://cve.now/CVE-2024-44945.md): netfilter: nfnetlink: Initialise extack before use in ACKs (CVSS 7.1, Linux)
- [CVE-2024-3886](https://cve.now/CVE-2024-3886.md): tagDiv Composer \<= 5.0 - Reflected Cross-Site Scripting via envato\_code\[\] (CVSS 6.1, tagDiv Composer)
- [CVE-2024-5212](https://cve.now/CVE-2024-5212.md): tagDiv Composer \<= 5.0 - Reflected Cross-Site Scripting via envato\_code\[\] (CVSS 6.1, tagDiv Composer)
- [CVE-2024-7435](https://cve.now/CVE-2024-7435.md): Attire \<= 2.0.6 - Authenticated (Contributor+) PHP Object Injection (CVSS 8.8, shafayat-alam Attire)
- [CVE-2024-39747](https://cve.now/CVE-2024-39747.md): IBM Sterling Connect:Direct Web Services information disclosure (CVSS 8.1, IBM Sterling Connect:Direct Web Services)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.