CVEs published September 11, 2024
112 CVEs were published on September 11, 2024: 11 critical, 52 high.
- Published
- 112
- Critical
- 11
- High
- 52
- Medium
- 36
- Low
- 2
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- Linux
- 23
- Google Android
- 11
- Cisco IOS XR Software
- 8
- Reedos Software Solutions Mutual Fund Distribution Product
- 5
- Google Chrome
- 4
- Simple Online Planning SO Planning
- 4
- Gallagher Controller 6000 and Controller
- 3
- Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- 3
- Adobe Audition
- 2
- bplugins HTML5 Video Player – Embed and Play Videos in Cust…
- 2
Critical 11
- CVE-2024-45030igb: cope with large MAX_SKB_FRAGSLinux
- CVE-2024-45013nvme: move stopping keep-alive into nvme_uninit_ctrl()Linux
- CVE-2024-27112SQL Injection in SOPlanning before 1.52.02Simple Online Planning SO Planning
- CVE-2024-27115Remote Code Execution through File Upload in SOPlanning before 1.52.02Simple Online Planning SO Planning
- CVE-2024-27113Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02Simple Online Planning SO Planning
- CVE-2024-6091Shell Command Denylist Bypass in significant-gravitas/autogptsignificant-gravitas/autogpt · agpt
- CVE-2024-45790User Enumeration vulnerabilityReedos Software Solutions Mutual Fund Distribution Product
- CVE-2024-7609Directory Traversal in Vidco Software's VOC TESTERVidco Software VOC TESTER
- CVE-2024-8277WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalationvillatheme WooCommerce Photo Reviews Premium
- CVE-2024-44466COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.
- CVE-2024-44541evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."
High 52
- CVE-2024-28981Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected CredentialsHitachi Vantara Pentaho Data Integration & Analytics
- CVE-2024-7889Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace app for Windows
- CVE-2024-20304Cisco IOS XR Software Packet Memory Exhaustion VulnerabilityCisco IOS XR Software
- CVE-2024-20489Cisco Routed Passive Optical Network Cleartext Password VulnerabilityCisco IOS XR Software
- CVE-2024-20483Cisco IOS XR PON Controller Command Injection VulnerabilitiesCisco IOS XR Software
- CVE-2024-20406Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2024-20381Cisco Network Services Orchestrator Configuration Update Authorization Bypass VulnerabilityCisco IOS XR Software · Cisco Network Services Orchestra… +1
- CVE-2024-20317Cisco IOS XR Software Layer 2 Services Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2024-20398Cisco IOS XR Software Local Privilege Escalation VulnerabilityCisco IOS XR Software
- CVE-2024-8686PAN-OS: Command Injection VulnerabilityPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-39378Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2024-7312REST Interface Link Redirection via Host parameterPayara Platform Payara Server
- CVE-2024-5760The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shellHP Samsung Universal Print Driver
- CVE-2024-45026s390/dasd: fix error recovery leading to data corruption on ESE devicesLinux
- CVE-2024-45024mm/hugetlb: fix hugetlb vs. core-mm PT lockingLinux
- CVE-2024-45023md/raid1: Fix data corruption for degraded array with slow diskLinux
- CVE-2024-45022mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0Linux
- CVE-2024-45021memcg_write_event_control(): fix a user-triggerable oopsLinux
- CVE-2024-45020bpf: Fix a kernel verifier crash in stacksafe()Linux
- CVE-2024-45019net/mlx5e: Take state lock during tx timeout reporterLinux
- CVE-2024-45017net/mlx5: Fix IPsec RoCE MPV trace callLinux
- CVE-2024-45016netem: fix return value if duplicate enqueue failsLinux
- CVE-2024-45009mptcp: pm: only decrement add_addr_accepted for MPJ reqLinux
- CVE-2024-8306CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and avaSchneider Electric Vijeo Designer
- CVE-2024-8639Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruptGoogle Chrome
- CVE-2024-8638Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a craftGoogle Chrome
- CVE-2024-8637Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corGoogle Chrome
- CVE-2024-8636Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via aGoogle Chrome
- CVE-2024-27114Remote Code Execution through File Upload in SOPlanning before 1.52.02Simple Online Planning SO Planning
- CVE-2024-45788No Rate Limiting VulnerabilityReedos Software Solutions Mutual Fund Distribution Product
- CVE-2024-45787Information Disclosure VulnerabilityReedos Software Solutions Mutual Fund Distribution Product
- CVE-2024-45786Improper Authorization VulnerabilityReedos Software Solutions Mutual Fund Distribution Product
- CVE-2024-45327An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 Fortinet FortiSOAR
- CVE-2024-7626WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Readwpdelicious WP Delicious – Recipe Plugin for Food Bloggers
- CVE-2024-21529Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization.dset · org.webjars.npm:dset
- CVE-2024-43690Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perGallagher Command Centre Server
- CVE-2024-8253Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalationpickplugins Post Grid and Gutenberg Blocks
- CVE-2024-40662In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation.Google Android
- CVE-2024-40658In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-40657In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused depuGoogle Android
- CVE-2024-40655In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the bacGoogle Android
- CVE-2024-40654In multiple locations, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2024-40652In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a mGoogle Android
- CVE-2024-40650In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state.Google Android
- CVE-2024-31336In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation.Google Android
- CVE-2024-23716In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition.Google Android
- CVE-2024-42760SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/cont
- CVE-2024-44570RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php.
- CVE-2024-44571RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php.
- CVE-2024-44572RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_mgmt function.
- CVE-2024-44574RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys_conf function.
- CVE-2024-44577RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time_date function.
Medium, low and unrated 49
- CVE-2024-8706JFinalCMS com.cms.util.TemplateUtils update path traversalJFinalCMS
- CVE-2024-7890Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace app for Windows
- CVE-2024-8705Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System UCCGSrv.asmx GetDataKindByType sql injectionShandong Star Measurement and Control Equipment Heating Net…
- CVE-2024-8694JFinalCMS com.cms.controller.admin.TemplateController update path traversalJFinalCMS
- CVE-2024-8693Kaon CG3000 dhcpcd Command cross site scriptingKaon CG3000
- CVE-2024-8692TDuckCloud TDuckPro password recoveryTDuckCloud TDuckPro
- CVE-2024-8691PAN-OS: User Impersonation in GlobalProtect PortalPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-8690Cortex XDR Agent: Local Windows Administrator Can Disable the AgentPalo Alto Networks Cortex XDR Agent
- CVE-2024-8689ActiveMQ Content Pack: Cleartext Exposure of CredentialsPalo Alto Networks ActiveMQ Content Pack
- CVE-2024-8688PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesPalo Alto Networks PAN-OS · Palo Alto Networks GlobalPro… +2
- CVE-2024-20390Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2024-20343Cisco IOS XR Software CLI Arbitrary File Read VulnerabilityCisco IOS XR Software
- CVE-2024-8097Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST levelPayara Platform Payara Server
- CVE-2024-41868Audition | Out-of-bounds Read (CWE-125)Adobe Audition
- CVE-2024-46672wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletionLinux
- CVE-2024-45029i2c: tegra: Do not mark ACPI devices as irq safeLinux
- CVE-2024-45028mmc: mmc_test: Fix NULL dereference on allocation failureLinux
- CVE-2024-45027usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()Linux
- CVE-2024-45025fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARELinux
- CVE-2024-45018netfilter: flowtable: initialise extack before useLinux
- CVE-2024-45015drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()Linux
- CVE-2024-45014s390/boot: Avoid possible physmem_info segment corruptionLinux
- CVE-2024-45012nouveau/firmware: use dma non-coherent allocatorLinux
- CVE-2024-45011char: xillybus: Check USB endpoints when probing deviceLinux
- CVE-2024-45010mptcp: pm: only mark 'subflow' endp as availableLinux
- CVE-2024-4465Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2024-43793Halo's editor has a stored XSS vulnerabilityhalo-dev halo
- CVE-2024-8642Eclipse EDC: Consumer pull transfer token validation checks not appliedEclipse Foundation Eclipse EDC Connector · org.eclipse.edc:…
- CVE-2024-8646Eclipse Glassfish: URL redirection vulnerability to untrusted sitesEclipse Foundation Eclipse Glassfish · org.glassfish.main.w…
- CVE-2024-45789Parameter Tampering VulnerabilityReedos Software Solutions Mutual Fund Distribution Product
- CVE-2024-5416Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgetselemntor Elementor Website Builder – more than just a page…
- CVE-2024-8096OCSP stapling bypass with GnuTLScurl
- CVE-2019-25212video carousel slider with lightbox <= 1.0.6 - Authenticated (Admin+) SQL Injectionnik00726 video carousel slider with lightbox
- CVE-2024-8045Advanced WordPress Backgrounds <= 1.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameternko Advanced WordPress Backgrounds
- CVE-2024-8440Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widgetwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2024-7716GS Logo Slider Lite < 3.6.9 - Admin+ Stored XSSLogo Slider
- CVE-2024-3899Envira Gallery < 1.8.15 - Author+ Stored XSSGallery Plugin for WordPress
- CVE-2024-7727HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handlerbplugins HTML5 Video Player – Embed and Play Videos in Cust…
- CVE-2024-7721HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Updatebplugins HTML5 Video Player – Embed and Play Videos in Cust…
- CVE-2024-1656Affected versions of Octopus Server had a weak content security policy.Octopus Deploy Octopus Server
- CVE-2024-39808Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with phyGallagher Controller 6000 and Controller
- CVE-2024-24972Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authoriseGallagher Controller 6000 and Controller
- CVE-2024-23906Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows anGallagher Controller 6000 and Controller
- CVE-2024-40659In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation featGoogle Android
- CVE-2024-40656In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused Google Android
- CVE-2024-44573A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbi
- CVE-2024-44575RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to
- CVE-2024-44851A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web s