CVEs published September 8, 2024
27 CVEs were published on September 8, 2024: 3 critical, 6 high.
- Published
- 27
- Critical
- 3
- High
- 6
- Medium
- 18
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- TOTOLINK AC1200 T8
- 5
- WP MultiTasking
- 5
- Loway QueueMetrics
- 3
- TOTOLINK AC1200 T8 · TOTOLINK AC1200 T10
- 3
- TrueBooker
- 2
- code-projects Hospital Management System
- 1
- erjemin roll_cms
- 1
- Gouniverse GoLang CMS · github.com/gouniverse/cms
- 1
- itsourcecode Payroll Management System
- 1
- itsourcecode Tailoring Management System
- 1
Critical 3
High 6
- CVE-2024-8579TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflowTOTOLINK AC1200 T8
- CVE-2024-8578TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflowTOTOLINK AC1200 T8
- CVE-2024-8577TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflowTOTOLINK AC1200 T8 · TOTOLINK AC1200 T10
- CVE-2024-8576TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflowTOTOLINK AC1200 T8 · TOTOLINK AC1200 T10
- CVE-2024-8575TOTOLINK AC1200 T8 cstecgi.cgi setWiFiScheduleCfg buffer overflowTOTOLINK AC1200 T8
- CVE-2024-8573TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowTOTOLINK AC1200 T8 · TOTOLINK AC1200 T10
Medium, low and unrated 18
- CVE-2024-8583SourceCodester Online Bank Management System Feedback mfeedback.php cross site scriptingSourceCodester Online Bank Management System
- CVE-2024-8582SourceCodester Food Ordering Management System index.php cross site scriptingSourceCodester Food Ordering Management System
- CVE-2024-42343Loway - CWE-204: Observable Response DiscrepancyLoway QueueMetrics
- CVE-2024-42342Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Loway QueueMetrics
- CVE-2024-42341Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')Loway QueueMetrics
- CVE-2024-8574TOTOLINK AC1200 T8 cstecgi.cgi setParentalRules os command injectionTOTOLINK AC1200 T8
- CVE-2024-8572Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scriptingGouniverse GoLang CMS · github.com/gouniverse/cms
- CVE-2024-8571erjemin roll_cms views.py information exposureerjemin roll_cms
- CVE-2024-8570itsourcecode Tailoring Management System inccatadd.php sql injectionitsourcecode Tailoring Management System
- CVE-2024-6925TrueBooker < 1.0.3 - Settings Update via CSRFTrueBooker
- CVE-2024-6859WP MultiTasking <= 0.1.12 - Reflected XSS via ShortcodeWP MultiTasking
- CVE-2024-6856WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRFWP MultiTasking
- CVE-2024-6855WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRFWP MultiTasking
- CVE-2024-6853WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRFWP MultiTasking
- CVE-2024-6852WP MultiTasking <= 0.1.12 - Settings Update via CSRFWP MultiTasking
- CVE-2024-8569code-projects Hospital Management System user-login.php sql injectioncode-projects Hospital Management System
- CVE-2024-8568Mini-Tmall 1 rewardMapper.select sql injectionMini-Tmall
- CVE-2024-8567itsourcecode Payroll Management System ajax.php sql injectionitsourcecode Payroll Management System