# CVEs published 2024-09-03

69 CVEs were published on September 3, 2024: 12 critical, 29 high. Days are UTC.

- [CVE-2024-7970](https://cve.now/CVE-2024-7970.md): Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a cr (CVSS 8.8, Google Chrome)
- [CVE-2024-8362](https://cve.now/CVE-2024-8362.md): Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a c (CVSS 8.8, Google Chrome)
- [CVE-2024-45620](https://cve.now/CVE-2024-45620.md): Libopensc: incorrect handling of the length of buffers or files in pkcs15init (CVSS 3.9, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45619](https://cve.now/CVE-2024-45619.md): Libopensc: incorrect handling length of buffers or files in libopensc (CVSS 4.3, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45618](https://cve.now/CVE-2024-45618.md): Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init (CVSS 3.9, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45617](https://cve.now/CVE-2024-45617.md): Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc (CVSS 3.9, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45616](https://cve.now/CVE-2024-45616.md): Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc (CVSS 3.9, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45615](https://cve.now/CVE-2024-45615.md): Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init (CVSS 3.9, libopensc · Red Hat Enterprise Linux)
- [CVE-2024-45394](https://cve.now/CVE-2024-45394.md): Secret encryption vulnerable to brute-force attacks (CVSS 8.8, Authenticator-Extension Authenticator)
- [CVE-2024-8399](https://cve.now/CVE-2024-8399.md): Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Focus for iOS \< 130. (CVSS 4.7, Mozilla Focus for iOS)
- [CVE-2024-45391](https://cve.now/CVE-2024-45391.md): Tina search token leak via lock file in TinaCMS (CVSS 7.5, tinacms · @tinacms/cli)
- [CVE-2024-4629](https://cve.now/CVE-2024-4629.md): Keycloak: potential bypass of brute force protection (CVSS 6.5, keycloak · Red Hat Build of Keycloak +4)
- [CVE-2024-45390](https://cve.now/CVE-2024-45390.md): @blakeembrey/template vulnerable to code injection when attacker controls template input (CVSS 7.3, blakeembrey js-template · @blakeembrey/template)
- [CVE-2024-45389](https://cve.now/CVE-2024-45389.md): Pagefind DOM clobbering could escalate to Cross-site Scripting (XSS) (CVSS 6.4, CloudCannon pagefind · pagefind +2)
- [CVE-2024-45310](https://cve.now/CVE-2024-45310.md): runc can be confused to create empty files/directories on the host (CVSS 3.6, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2024-45307](https://cve.now/CVE-2024-45307.md): SudoBot missing authorization check in \`-config\` command (CVSS 8.8, onesoft-sudo sudobot)
- [CVE-2024-43803](https://cve.now/CVE-2024-43803.md): BMO can expose particularly named secrets from other namespaces via BMH CRD (CVSS 4.9, metal3-io baremetal-operator · github.com/metal3-io/baremet…)
- [CVE-2024-43413](https://cve.now/CVE-2024-43413.md): Xibo CMS XSS vulnerability using DataSet HTML columns (CVSS 3.5, xibosignage xibo-cms)
- [CVE-2024-43412](https://cve.now/CVE-2024-43412.md): Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS (CVSS 4.6, xibosignage xibo-cms)
- [CVE-2024-6119](https://cve.now/CVE-2024-6119.md): Possible denial of service in X.509 name checks (CVSS 7.5, OpenSSL)
- [CVE-2024-7346](https://cve.now/CVE-2024-7346.md): Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation (CVSS 7.2, Progress OpenEdge)
- [CVE-2024-7345](https://cve.now/CVE-2024-7345.md): Direct local client connections to MS Agents can bypass authentication (CVSS 8.3, Progress OpenEdge)
- [CVE-2024-7654](https://cve.now/CVE-2024-7654.md): Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service (CVSS 8.3, Progress OpenEdge)
- [CVE-2024-4259](https://cve.now/CVE-2024-4259.md): Sensetive Data Exposure in SAMPAS's AKOS (CVSS 6.9, SAMPAŞ Holding AKOS)
- [CVE-2024-8389](https://cve.now/CVE-2024-8389.md): Memory safety bugs present in Firefox 129. (CVSS 9.8, Mozilla Firefox)
- [CVE-2024-8388](https://cve.now/CVE-2024-8388.md): Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to full (CVSS 4.3, Mozilla Firefox)
- [CVE-2024-8387](https://cve.now/CVE-2024-8387.md): Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-8386](https://cve.now/CVE-2024-8386.md): If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform (CVSS 6.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-8385](https://cve.now/CVE-2024-8385.md): A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-8384](https://cve.now/CVE-2024-8384.md): The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two pa (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-8383](https://cve.now/CVE-2024-8383.md): Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does no (CVSS 7.5, Mozilla Firefox)
- [CVE-2024-8382](https://cve.now/CVE-2024-8382.md): Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-8381](https://cve.now/CVE-2024-8381.md): A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the \`with\` environmen (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-6232](https://cve.now/CVE-2024-6232.md): Regular-expression DoS when parsing TarFile headers (CVSS 7.5, Python Software Foundation CPython)
- [CVE-2024-6473](https://cve.now/CVE-2024-6473.md): DLL Hijacking in Yandex Browser (CVSS 8.4, Yandex Browser)
- [CVE-2024-45588](https://cve.now/CVE-2024-45588.md): Information Disclosure Vulnerability (CVSS 9.1, Symphony Fintech XTS Web Trader)
- [CVE-2024-45587](https://cve.now/CVE-2024-45587.md): Unauthorized Modification Vulnerability (CVSS 9.1, Symphony Fintech XTS Web Trader)
- [CVE-2024-45586](https://cve.now/CVE-2024-45586.md): Account Take Over Vulnerability (CVSS 9.2, Symphony Fintech XTS Web Trader · Symphony Fintech XTS Mobi…)
- [CVE-2024-8374](https://cve.now/CVE-2024-8374.md): Arbitrary Code Injection in Cura (CVSS 7.8, Ultimaker Cura)
- [CVE-2024-38811](https://cve.now/CVE-2024-38811.md): Code-execution vulnerability (CVSS 8.8, Fusion)
- [CVE-2024-3655](https://cve.now/CVE-2024-3655.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8, Arm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1)
- [CVE-2024-37136](https://cve.now/CVE-2024-37136.md): Dell Path to PowerProtect, versions 1.1, 1.2, contains an Exposure of Private Personal Information to an Unauthorized Actor vulnerability. (CVSS 6.8, Dell Path to Power)
- [CVE-2024-7261](https://cve.now/CVE-2024-7261.md): The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4 (CVSS 9.8, Zyxel NWA1123ACv3 firmware · Zyxel WAC500 firmware +3)
- [CVE-2024-42061](https://cve.now/CVE-2024-42061.md): A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic\_script.cgi" of Zyxel ATP series firmware versions from V4.3 (CVSS 6.1, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-42060](https://cve.now/CVE-2024-42060.md): A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmwa (CVSS 7.2, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-42059](https://cve.now/CVE-2024-42059.md): A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmwa (CVSS 7.2, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-42058](https://cve.now/CVE-2024-42058.md): A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions f (CVSS 7.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-42057](https://cve.now/CVE-2024-42057.md): A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series f (CVSS 8.1, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-7203](https://cve.now/CVE-2024-7203.md): A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series fir (CVSS 7.2, Zyxel ATP series firmware · Zyxel USG FLEX series firmware)
- [CVE-2024-6343](https://cve.now/CVE-2024-6343.md): A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware (CVSS 4.9, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2024-5412](https://cve.now/CVE-2024-5412.md): A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthen (CVSS 7.5, Zyxel VMG8825-T50K firmware)
- [CVE-2024-8380](https://cve.now/CVE-2024-8380.md): SourceCodester Contact Manager with Export to VCF Delete Contact delete-account.php sql injection (CVSS 5.3, SourceCodester Contact Manager with Export to VCF)
- [CVE-2023-49233](https://cve.now/CVE-2023-49233.md): Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative V (CVSS 8.8)
- [CVE-2024-34463](https://cve.now/CVE-2024-34463.md): BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (CVSS 5.1)
- [CVE-2024-38456](https://cve.now/CVE-2024-38456.md): HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vul (CVSS 7.8)
- [CVE-2024-41433](https://cve.now/CVE-2024-41433.md): PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. (CVSS 9.8)
- [CVE-2024-41434](https://cve.now/CVE-2024-41434.md): PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (\*Column).GetDecimal. (CVSS 4.3)
- [CVE-2024-41435](https://cve.now/CVE-2024-41435.md): YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter. (CVSS 7.5)
- [CVE-2024-41436](https://cve.now/CVE-2024-41436.md): ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl. (CVSS 7.5)
- [CVE-2024-42901](https://cve.now/CVE-2024-42901.md): A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted CSV file. (CVSS 4.8)
- [CVE-2024-42902](https://cve.now/CVE-2024-42902.md): An issue in the js\_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted (CVSS 8.8)
- [CVE-2024-42903](https://cve.now/CVE-2024-42903.md): A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users (CVSS 6.5)
- [CVE-2024-42904](https://cve.now/CVE-2024-42904.md): A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML via injecting a crafte (CVSS 6.1)
- [CVE-2024-42991](https://cve.now/CVE-2024-42991.md): MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. (CVSS 8.1)
- [CVE-2024-44809](https://cve.now/CVE-2024-44809.md): A remote code execution (RCE) vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. (CVSS 9.8)
- [CVE-2024-44920](https://cve.now/CVE-2024-44920.md): A cross-site scripting (XSS) vulnerability in the component admin\_collect\_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web (CVSS 6.1)
- [CVE-2024-44921](https://cve.now/CVE-2024-44921.md): SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del. (CVSS 9.8)
- [CVE-2024-45180](https://cve.now/CVE-2024-45180.md): SquaredUp DS for SCOM 6.2.1.11104 allows XSS. (CVSS 5.4)
- [CVE-2024-45678](https://cve.now/CVE-2024-45678.md): Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extrac (CVSS 4.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.