CVEs published September 1, 2024
9 CVEs were published on September 1, 2024: 3 critical, 0 high.
- Published
- 9
- Critical
- 3
- High
- 0
- Medium
- 6
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Sayful Islam Carousel Slider
- 2
- code-projects Hospital Management System
- 1
- Grocy
- 1
- HM Courts & Tribunals Service Probate Back Office
- 1
- techjewel Fluent Forms – Customizable Contact Forms, Survey…
- 1
Critical 3
- CVE-2024-45508HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a w
- CVE-2024-45509In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the us
- CVE-2024-45522Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password.
Medium, low and unrated 6
- CVE-2024-45270WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection featSayful Islam Carousel Slider
- CVE-2024-45269WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection Sayful Islam Carousel Slider
- CVE-2024-8370Grocy SVG File Upload recipepictures cross site scriptingGrocy
- CVE-2024-5053Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modificationtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-8368code-projects Hospital Management System Login index.php sql injectioncode-projects Hospital Management System
- CVE-2024-8367HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injectionHM Courts & Tribunals Service Probate Back Office