CVEs published September 4, 2024
173 CVEs were published on September 4, 2024: 16 critical, 46 high. 2 are now in CISA KEV.
- Published
- 173
- Critical
- 16
- High
- 46
- Medium
- 71
- Low
- 5
- Unrated
- 35
- Now in CISA KEV
- 2
- Fix available
- 35
Most affected products
- Linux
- 58
- Samsung Mobile Devices
- 19
- Huawei HarmonyOS · Huawei EMUI
- 10
- wpextended The Ultimate WordPress Toolkit – WP Extended
- 7
- Samsung Mobile Samsung Notes
- 4
- ABCD2
- 3
- IBM webMethods Integration
- 3
- Semtek Informatics Software Consulting Semtek Sempos
- 3
- Apache Software Foundation Apache OFBiz
- 2
- Cisco ClamAV
- 2
Critical 16
- CVE-2024-44998atm: idt77252: prevent use after free in dequeue_rx()Linux
- CVE-2024-44985ipv6: prevent possible UAF in ip6_xmit()Linux
- CVE-2024-44984bnxt_en: Fix double DMA unmapping for XDP_REDIRECTLinux
- CVE-2024-44970net/mlx5e: SHAMPO, Fix invalid WQ linked list unlinkLinux
- CVE-2024-20439A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by usCisco Smart License Utility
- CVE-2024-45053Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engineethyca fides · ethyca-fides
- CVE-2024-45076IBM webMethods Integration code executionIBM webMethods Integration
- CVE-2024-7078Unauthenticate SQLi in Semtek Informatics Software's Semtek SemposSemtek Informatics Software Consulting Semtek Sempos
- CVE-2024-7076SQLi in Semtek Informatics Software's Semtek SemposSemtek Informatics Software Consulting Semtek Sempos
- CVE-2024-7923Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcorepulpcore · Red Hat Satellite 6.13 for RHEL +4
- CVE-2024-7012Puppet-foreman: an authentication bypass vulnerability exists in foremanpuppet-foreman · Red Hat Satellite 6.13 for RHEL +3
- CVE-2024-8289MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeoverwcmp MultiVendorX – WooCommerce Multivendor Marketplace Sol…
- CVE-2024-45195Apache OFBiz: Confused controller-view authorization logic (forced browsing)Apache Software Foundation Apache OFBiz
- CVE-2024-6926Viral Signup <= 2.1 - Unauthenticated SQLiViral Signup
- CVE-2024-7950WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creationwpjobportal WP Job Portal – AI-Powered Recruitment System f…
- CVE-2024-44808An issue in Vypor Attack API System v.1.0 allows a remote attacker to execute arbitrary code via the user GET parameter.
High 46
- CVE-2024-2166Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time MForcepoint Email Security
- CVE-2024-45001net: mana: Fix RX buf alloc_size alignment and atomic op panicLinux
- CVE-2024-45000fs/netfs/fscache_cookie: add missing "n_accesses" checkLinux
- CVE-2024-44997net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()Linux
- CVE-2024-44995net: hns3: fix a deadlock problem when config TC during resettingLinux
- CVE-2024-44994iommu: Restore lost return in iommu_report_device_fault()Linux
- CVE-2024-44992smb/client: avoid possible NULL dereference in cifs_free_subrequest()Linux
- CVE-2024-44988net: dsa: mv88e6xxx: Fix out-of-bound accessLinux
- CVE-2024-44987ipv6: prevent UAF in ip6_send_skb()Linux
- CVE-2024-44986ipv6: fix possible UAF in ip6_finish_output2()Linux
- CVE-2024-44978drm/xe: Free job before xe_exec_queue_putLinux
- CVE-2024-44974mptcp: pm: avoid possible UaF when selecting endpLinux
- CVE-2024-44973mm, slub: do not call do_slab_free for kfence objectLinux
- CVE-2024-44967drm/mgag200: Bind I2C lifetime to DRM deviceLinux
- CVE-2024-44966binfmt_flat: Fix corruption when not offsetting data startLinux
- CVE-2024-44959tracefs: Use generic inode RCU for synchronizing freeingLinux
- CVE-2024-44954ALSA: line6: Fix racy access to midibufLinux
- CVE-2024-44951serial: sc16is7xx: fix TX fifo corruptionLinux
- CVE-2024-44950serial: sc16is7xx: fix invalid FIFO access with special register setLinux
- CVE-2024-44949parisc: fix a possible DMA corruptionLinux
- CVE-2024-20440A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.Cisco Smart License Utility
- CVE-2024-45075IBM webMethods Integration privilege escalationIBM webMethods Integration
- CVE-2024-45050Ringer Server Does Not Check Members When Loading MessagesLif-Platforms New-Ringer-Server
- CVE-2024-43405Nuclei Template Signature Verification Bypassprojectdiscovery nuclei · github.com/projectdiscovery/nu… +2
- CVE-2024-43402Rust OS Command Injection/Argument Injection vulnerabilityrust-lang rust
- CVE-2024-8418Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of servicecontainers/aardvark-dns · Red Hat Enterprise Linux +2
- CVE-2024-7834Local privilege escalation in OverwolfOverwolf
- CVE-2024-45507Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCEApache Software Foundation Apache OFBiz
- CVE-2024-8102The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Updatewpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-8104The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Downloadwpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-7786Sensei LMS < 4.24.2 - Unauthenticated Email Template LeakSensei LMS
- CVE-2024-34660Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.Samsung Mobile Samsung Notes
- CVE-2024-34659Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.Samsung Mobile Group Sharing
- CVE-2024-34657Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code.Samsung Mobile Samsung Notes
- CVE-2024-34656Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.Samsung Mobile Samsung Notes
- CVE-2024-39921Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to VFsas Technologies IPCOM EX2 Series · Fsas Technologies IPCO…
- CVE-2024-41716Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4.IDEC WindLDR · IDEC WindO/I-NV4
- CVE-2024-44383WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via msp_info_htm.
- CVE-2024-44400A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical.
- CVE-2024-44817SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the
- CVE-2024-44820A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/
- CVE-2024-44859Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.
- CVE-2024-45170An issue was discovered in za-internet C-MOR Video Surveillance 5.2401.
- CVE-2024-45174An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01.
- CVE-2024-45506HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwardin
- CVE-2024-45692Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
Medium, low and unrated 111
- CVE-2024-45429Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5WP Engine Advanced Custom Fields
- CVE-2024-20506ClamAV Privilege Handling Escalation VulnerabilityCisco ClamAV
- CVE-2024-20505ClamAV Memory Handling DoSCisco ClamAV
- CVE-2024-45395Unbounded loop over untrusted input can lead to endless data attacksigstore-go · github.com/sigstore/sigstore-go
- CVE-2024-45399Indico has a Cross-Site-Scripting during account creationindico
- CVE-2024-45008Input: MT - limit max slotsLinux
- CVE-2024-45007char: xillybus: Don't destroy workqueue from work item running on itLinux
- CVE-2024-45006xhci: Fix Panther point NULL pointer deref at full-speed re-enumerationLinux
- CVE-2024-45005KVM: s390: fix validity interception issue when gisa is switched offLinux
- CVE-2024-45004KEYS: trusted: dcp: fix leak of blob encryption keyLinux
- CVE-2024-45003vfs: Don't evict inode under the inode lru traversing contextLinux
- CVE-2024-45002rtla/osnoise: Prevent NULL dereference in error handlingLinux
- CVE-2024-44999gtp: pull network headers in gtp_dev_xmit()Linux
- CVE-2024-44996vsock: fix recursive ->recvmsg callsLinux
- CVE-2024-44993drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`Linux
- CVE-2024-44991tcp: prevent concurrent execution of tcp_sk_exit_batchLinux
- CVE-2024-44990bonding: fix null pointer deref in bond_ipsec_offload_okLinux
- CVE-2024-44989bonding: fix xfrm real_dev null pointer dereferenceLinux
- CVE-2024-44983netfilter: flowtable: validate vlan headerLinux
- CVE-2024-44982drm/msm/dpu: cleanup FB if dpu_format_populate_layout failsLinux
- CVE-2024-44981workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask()Linux
- CVE-2024-44980drm/xe: Fix opregion leakLinux
- CVE-2024-44979drm/xe: Fix missing workqueue destroy in xe_gt_pagefaultLinux
- CVE-2024-44977drm/amdgpu: Validate TA binary sizeLinux
- CVE-2024-44976ata: pata_macio: Fix DMA table overflowLinux
- CVE-2024-44975cgroup/cpuset: fix panic caused by partcmd_updateLinux
- CVE-2024-44971net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()Linux
- CVE-2024-44969s390/sclp: Prevent release of buffer in I/OLinux
- CVE-2024-44968tick/broadcast: Move per CPU pointer access into the atomic sectionLinux
- CVE-2024-44965x86/mm: Fix pti_clone_pgtable() alignment assumptionLinux
- CVE-2024-44964idpf: fix memory leaks and crashes while performing a soft resetLinux
- CVE-2024-44963btrfs: do not BUG_ON() when freeing tree block after errorLinux
- CVE-2024-44962Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloadingLinux
- CVE-2024-44961drm/amdgpu: Forward soft recovery errors to userspaceLinux
- CVE-2024-44960usb: gadget: core: Check for unset descriptorLinux
- CVE-2024-44958sched/smt: Fix unbalance sched_smt_present dec/incLinux
- CVE-2024-44957xen: privcmd: Switch from mutex to spinlock for irqfdsLinux
- CVE-2024-44956drm/xe/preempt_fence: enlarge the fence critical sectionLinux
- CVE-2024-44953scsi: ufs: core: Fix deadlock during RTC updateLinux
- CVE-2024-44948x86/mtrr: Check if fixed MTRRs exist before saving themLinux
- CVE-2024-8417云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source云课网络科技有限公司 Yunke Online School System
- CVE-2024-8416SourceCodester Food Ordering Management System ticket-status.php sql injectionSourceCodester Food Ordering Management System
- CVE-2024-8415SourceCodester Food Ordering Management System add-ticket.php sql injectionSourceCodester Food Ordering Management System
- CVE-2024-8414SourceCodester Insurance Management System cross-site request forgerySourceCodester Insurance Management System
- CVE-2024-20497Cisco Expressway Edge Improper Authorization VulnerabilityCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2024-20503Cisco Duo Epic for Hyperdrive Information Disclosure VulnerabilityCisco Duo Authentication for Epic
- CVE-2024-20469Cisco Identity Services Engine Command Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2024-45314Flask-AppBuilder login form allows browser to cache sensitive fieldsdpgaspar Flask-AppBuilder · flask-appbuilder
- CVE-2024-45074IBM webMethods Integration directory traversalIBM webMethods Integration
- CVE-2024-45052Fides Webserver Authentication Timing-Based Username Enumeration Vulnerabilityethyca fides · ethyca-fides
- CVE-2024-8412LinuxOSsk Shakal-NG views.py redirectLinuxOSsk Shakal-NG
- CVE-2024-8391Eclipse Vert.x gRPC server does not limit the maximum message sizeEclipse Foundation Eclipse Vert.x · io.vertx:vertx-grpc-… +1
- CVE-2024-8411ABCD ABCD2 buscar_integrada.php cross site scriptingABCD2
- CVE-2024-8410ABCD ABCD2 otros_sitios.php path traversalABCD2
- CVE-2024-8409ABCD ABCD2 show_image.php path traversalABCD2
- CVE-2024-7077Reflected XSS in Semtek Informatics Software's Semtek SemposSemtek Informatics Software Consulting Semtek Sempos
- CVE-2024-8408Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflowLinksys WRT54G
- CVE-2024-8407alwindoss akademy handlers.go cross site scriptingalwindoss akademy
- CVE-2024-8413Cross Site Scripting (XSS) in RaspcontrolRaspControl
- CVE-2024-7870PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log DeletionPixelYourSite – Your smart PIXEL (TAG) & API Manager · Pixe…
- CVE-2024-8318Attributes for Blocks <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributesForBlocks Parameterskadev Attributes for Blocks
- CVE-2024-8121The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Changewpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-8123The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Referencewpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-8106The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposurewpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-8119The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via pagewpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-8117The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_optionwpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2024-6889Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSSSecure Copy Content Protection and Content Locking
- CVE-2024-6888Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSSSecure Copy Content Protection and Content Locking
- CVE-2024-6722Chatbot Support AI <= 1.0.2 - Admin+ Stored XSSChatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatb…
- CVE-2024-6020Sign-up Sheets < 2.2.13 - Reflected XSSSign-up Sheets
- CVE-2024-34661Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location dataSamsung Mobile Samsung Assistant
- CVE-2024-34658Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.Samsung Mobile Samsung Notes
- CVE-2024-34655Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APSamsung Mobile Devices
- CVE-2024-34654Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Samsung Mobile Devices
- CVE-2024-34653Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.Samsung Mobile Devices
- CVE-2024-34652Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance inclSamsung Mobile Devices
- CVE-2024-34651Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files.Samsung Mobile Devices
- CVE-2024-34650Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to EdSamsung Mobile Devices
- CVE-2024-34649Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily aSamsung Mobile Devices
- CVE-2024-34648Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive dSamsung Mobile Devices
- CVE-2024-34647Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs relaSamsung Mobile Devices
- CVE-2024-34646Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of serSamsung Mobile Devices
- CVE-2024-34645Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.Samsung Mobile Devices
- CVE-2024-34644Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected daSamsung Mobile Devices
- CVE-2024-34643Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protecteSamsung Mobile Devices
- CVE-2024-34642Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.Samsung Mobile Devices
- CVE-2024-34641Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuSamsung Mobile Devices
- CVE-2024-34640Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of prSamsung Mobile Devices
- CVE-2024-34639Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validaSamsung Mobile Devices
- CVE-2024-34638Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded apSamsung Mobile Devices
- CVE-2024-34637Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Samsung Mobile Devices
- CVE-2024-8325Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingBlockSpare — News, Magazine and Blog Addons for (Gutenberg)…
- CVE-2024-8298Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45449Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affectHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45448Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may aHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45447Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confideHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45446Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect aHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45445Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will afHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45444Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45443Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confHuawei HarmonyOS
- CVE-2024-45442Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability wHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45441Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availabilityhuawei HarmonyOS · Huawei EMUI
- CVE-2024-42039Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentialityHuawei HarmonyOS · Huawei EMUI
- CVE-2024-45450Permission control vulnerability in the software update module.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-41927Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs.IDEC FC6A Series MICROSmart All-in-One CPU module · IDEC… +3
- CVE-2024-42642Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted
- CVE-2024-44818Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer
- CVE-2024-44819Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script
- CVE-2024-44821ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php.
- CVE-2024-45172An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01.
- CVE-2024-45177An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01.