# CVEs published 2024-09-11

112 CVEs were published on September 11, 2024: 11 critical, 52 high. Days are UTC.

- [CVE-2024-8706](https://cve.now/CVE-2024-8706.md): JFinalCMS com.cms.util.TemplateUtils update path traversal (CVSS 5.3, JFinalCMS)
- [CVE-2024-28981](https://cve.now/CVE-2024-28981.md): Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials (CVSS 8.5, Hitachi Vantara Pentaho Data Integration & Analytics)
- [CVE-2024-7890](https://cve.now/CVE-2024-7890.md): Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 5.4, Citrix Workspace app for Windows)
- [CVE-2024-8705](https://cve.now/CVE-2024-8705.md): Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System UCCGSrv.asmx GetDataKindByType sql injection (CVSS 5.3, Shandong Star Measurement and Control Equipment Heating Net…)
- [CVE-2024-7889](https://cve.now/CVE-2024-7889.md): Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 7.0, Citrix Workspace app for Windows)
- [CVE-2024-8694](https://cve.now/CVE-2024-8694.md): JFinalCMS com.cms.controller.admin.TemplateController update path traversal (CVSS 5.1, JFinalCMS)
- [CVE-2024-8693](https://cve.now/CVE-2024-8693.md): Kaon CG3000 dhcpcd Command cross site scripting (CVSS 5.1, Kaon CG3000)
- [CVE-2024-8692](https://cve.now/CVE-2024-8692.md): TDuckCloud TDuckPro password recovery (CVSS 6.9, TDuckCloud TDuckPro)
- [CVE-2024-8691](https://cve.now/CVE-2024-8691.md): PAN-OS: User Impersonation in GlobalProtect Portal (CVSS 5.3, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-8690](https://cve.now/CVE-2024-8690.md): Cortex XDR Agent: Local Windows Administrator Can Disable the Agent (CVSS 5.6, Palo Alto Networks Cortex XDR Agent)
- [CVE-2024-8689](https://cve.now/CVE-2024-8689.md): ActiveMQ Content Pack: Cleartext Exposure of Credentials (CVSS 6.0, Palo Alto Networks ActiveMQ Content Pack)
- [CVE-2024-8688](https://cve.now/CVE-2024-8688.md): PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) (CVSS 6.7, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-8687](https://cve.now/CVE-2024-8687.md): PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes (CVSS 6.9, Palo Alto Networks PAN-OS · Palo Alto Networks GlobalPro… +2)
- [CVE-2024-20304](https://cve.now/CVE-2024-20304.md): Cisco IOS XR Software Packet Memory Exhaustion Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2024-20489](https://cve.now/CVE-2024-20489.md): Cisco Routed Passive Optical Network Cleartext Password Vulnerability (CVSS 8.4, Cisco IOS XR Software)
- [CVE-2024-20483](https://cve.now/CVE-2024-20483.md): Cisco IOS XR PON Controller Command Injection Vulnerabilities (CVSS 7.2, Cisco IOS XR Software)
- [CVE-2024-20406](https://cve.now/CVE-2024-20406.md): Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2024-20381](https://cve.now/CVE-2024-20381.md): Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability (CVSS 8.8, Cisco IOS XR Software · Cisco Network Services Orchestra… +1)
- [CVE-2024-20317](https://cve.now/CVE-2024-20317.md): Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2024-20398](https://cve.now/CVE-2024-20398.md): Cisco IOS XR Software Local Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2024-20390](https://cve.now/CVE-2024-20390.md): Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2024-20343](https://cve.now/CVE-2024-20343.md): Cisco IOS XR Software CLI Arbitrary File Read Vulnerability (CVSS 5.5, Cisco IOS XR Software)
- [CVE-2024-8686](https://cve.now/CVE-2024-8686.md): PAN-OS: Command Injection Vulnerability (CVSS 8.6, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-8097](https://cve.now/CVE-2024-8097.md): Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level (CVSS 6.7, Payara Platform Payara Server)
- [CVE-2024-41868](https://cve.now/CVE-2024-41868.md): Audition | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Audition)
- [CVE-2024-39378](https://cve.now/CVE-2024-39378.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Audition)
- [CVE-2024-7312](https://cve.now/CVE-2024-7312.md): REST Interface Link Redirection via Host parameter (CVSS 7.0, Payara Platform Payara Server)
- [CVE-2024-5760](https://cve.now/CVE-2024-5760.md): The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell (CVSS 8.4, HP Samsung Universal Print Driver)
- [CVE-2024-46672](https://cve.now/CVE-2024-46672.md): wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (no CVSS, Linux)
- [CVE-2024-45030](https://cve.now/CVE-2024-45030.md): igb: cope with large MAX\_SKB\_FRAGS (CVSS 9.8, Linux)
- [CVE-2024-45029](https://cve.now/CVE-2024-45029.md): i2c: tegra: Do not mark ACPI devices as irq safe (no CVSS, Linux)
- [CVE-2024-45028](https://cve.now/CVE-2024-45028.md): mmc: mmc\_test: Fix NULL dereference on allocation failure (no CVSS, Linux)
- [CVE-2024-45027](https://cve.now/CVE-2024-45027.md): usb: xhci: Check for xhci-\>interrupters being allocated in xhci\_mem\_clearup() (no CVSS, Linux)
- [CVE-2024-45026](https://cve.now/CVE-2024-45026.md): s390/dasd: fix error recovery leading to data corruption on ESE devices (CVSS 7.0, Linux)
- [CVE-2024-45025](https://cve.now/CVE-2024-45025.md): fix bitmap corruption on close\_range() with CLOSE\_RANGE\_UNSHARE (no CVSS, Linux)
- [CVE-2024-45024](https://cve.now/CVE-2024-45024.md): mm/hugetlb: fix hugetlb vs. core-mm PT locking (CVSS 7.8, Linux)
- [CVE-2024-45023](https://cve.now/CVE-2024-45023.md): md/raid1: Fix data corruption for degraded array with slow disk (CVSS 7.8, Linux)
- [CVE-2024-45022](https://cve.now/CVE-2024-45022.md): mm/vmalloc: fix page mapping if vm\_area\_alloc\_pages() with high order fallback to order 0 (CVSS 7.8, Linux)
- [CVE-2024-45021](https://cve.now/CVE-2024-45021.md): memcg\_write\_event\_control(): fix a user-triggerable oops (CVSS 7.1, Linux)
- [CVE-2024-45020](https://cve.now/CVE-2024-45020.md): bpf: Fix a kernel verifier crash in stacksafe() (CVSS 7.8, Linux)
- [CVE-2024-45019](https://cve.now/CVE-2024-45019.md): net/mlx5e: Take state lock during tx timeout reporter (CVSS 7.8, Linux)
- [CVE-2024-45018](https://cve.now/CVE-2024-45018.md): netfilter: flowtable: initialise extack before use (no CVSS, Linux)
- [CVE-2024-45017](https://cve.now/CVE-2024-45017.md): net/mlx5: Fix IPsec RoCE MPV trace call (CVSS 7.8, Linux)
- [CVE-2024-45016](https://cve.now/CVE-2024-45016.md): netem: fix return value if duplicate enqueue fails (CVSS 7.8, Linux)
- [CVE-2024-45015](https://cve.now/CVE-2024-45015.md): drm/msm/dpu: move dpu\_encoder's connector assignment to atomic\_enable() (no CVSS, Linux)
- [CVE-2024-45014](https://cve.now/CVE-2024-45014.md): s390/boot: Avoid possible physmem\_info segment corruption (no CVSS, Linux)
- [CVE-2024-45013](https://cve.now/CVE-2024-45013.md): nvme: move stopping keep-alive into nvme\_uninit\_ctrl() (CVSS 9.8, Linux)
- [CVE-2024-45012](https://cve.now/CVE-2024-45012.md): nouveau/firmware: use dma non-coherent allocator (no CVSS, Linux)
- [CVE-2024-45011](https://cve.now/CVE-2024-45011.md): char: xillybus: Check USB endpoints when probing device (no CVSS, Linux)
- [CVE-2024-45010](https://cve.now/CVE-2024-45010.md): mptcp: pm: only mark 'subflow' endp as available (no CVSS, Linux)
- [CVE-2024-45009](https://cve.now/CVE-2024-45009.md): mptcp: pm: only decrement add\_addr\_accepted for MPJ req (CVSS 8.2, Linux)
- [CVE-2024-8306](https://cve.now/CVE-2024-8306.md): CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and ava (CVSS 7.8, Schneider Electric Vijeo Designer)
- [CVE-2024-4465](https://cve.now/CVE-2024-4465.md): Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0 (CVSS 6.0, Nozomi Networks Guardian · Nozomi Networks CMC)
- [CVE-2024-43793](https://cve.now/CVE-2024-43793.md): Halo's editor has a stored XSS vulnerability (CVSS 6.3, halo-dev halo)
- [CVE-2024-8639](https://cve.now/CVE-2024-8639.md): Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corrupt (CVSS 8.8, Google Chrome)
- [CVE-2024-8638](https://cve.now/CVE-2024-8638.md): Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2024-8637](https://cve.now/CVE-2024-8637.md): Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap cor (CVSS 8.8, Google Chrome)
- [CVE-2024-8636](https://cve.now/CVE-2024-8636.md): Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a (CVSS 8.8, Google Chrome)
- [CVE-2024-27112](https://cve.now/CVE-2024-27112.md): SQL Injection in SOPlanning before 1.52.02 (CVSS 9.3, Simple Online Planning SO Planning)
- [CVE-2024-27114](https://cve.now/CVE-2024-27114.md): Remote Code Execution through File Upload in SOPlanning before 1.52.02 (CVSS 8.9, Simple Online Planning SO Planning)
- [CVE-2024-27115](https://cve.now/CVE-2024-27115.md): Remote Code Execution through File Upload in SOPlanning before 1.52.02 (CVSS 10.0, Simple Online Planning SO Planning)
- [CVE-2024-27113](https://cve.now/CVE-2024-27113.md): Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02 (CVSS 9.3, Simple Online Planning SO Planning)
- [CVE-2024-8642](https://cve.now/CVE-2024-8642.md): Eclipse EDC: Consumer pull transfer token validation checks not applied (CVSS 5.0, Eclipse Foundation Eclipse EDC Connector · org.eclipse.edc:…)
- [CVE-2024-8646](https://cve.now/CVE-2024-8646.md): Eclipse Glassfish: URL redirection vulnerability to untrusted sites (CVSS 6.1, Eclipse Foundation Eclipse Glassfish · org.glassfish.main.w…)
- [CVE-2024-6091](https://cve.now/CVE-2024-6091.md): Shell Command Denylist Bypass in significant-gravitas/autogpt (CVSS 9.8, significant-gravitas/autogpt · agpt)
- [CVE-2024-45790](https://cve.now/CVE-2024-45790.md): User Enumeration vulnerability (CVSS 9.3, Reedos Software Solutions Mutual Fund Distribution Product)
- [CVE-2024-45789](https://cve.now/CVE-2024-45789.md): Parameter Tampering Vulnerability (CVSS 6.9, Reedos Software Solutions Mutual Fund Distribution Product)
- [CVE-2024-45788](https://cve.now/CVE-2024-45788.md): No Rate Limiting Vulnerability (CVSS 8.7, Reedos Software Solutions Mutual Fund Distribution Product)
- [CVE-2024-45787](https://cve.now/CVE-2024-45787.md): Information Disclosure Vulnerability (CVSS 8.7, Reedos Software Solutions Mutual Fund Distribution Product)
- [CVE-2024-45786](https://cve.now/CVE-2024-45786.md): Improper Authorization Vulnerability (CVSS 8.7, Reedos Software Solutions Mutual Fund Distribution Product)
- [CVE-2024-7609](https://cve.now/CVE-2024-7609.md): Directory Traversal in Vidco Software's VOC TESTER (CVSS 9.2, Vidco Software VOC TESTER)
- [CVE-2024-5416](https://cve.now/CVE-2024-5416.md): Elementor Website Builder – More than Just a Page Builder \<= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets (CVSS 5.4, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2024-8096](https://cve.now/CVE-2024-8096.md): OCSP stapling bypass with GnuTLS (CVSS 6.5, curl)
- [CVE-2024-45327](https://cve.now/CVE-2024-45327.md): An improper authorization vulnerability \[CWE-285\] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 (CVSS 7.1, Fortinet FortiSOAR)
- [CVE-2024-8277](https://cve.now/CVE-2024-8277.md): WooCommerce Photo Reviews Premium \<= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation (CVSS 9.8, villatheme WooCommerce Photo Reviews Premium)
- [CVE-2019-25212](https://cve.now/CVE-2019-25212.md): video carousel slider with lightbox \<= 1.0.6 - Authenticated (Admin+) SQL Injection (CVSS 4.9, nik00726 video carousel slider with lightbox)
- [CVE-2024-8045](https://cve.now/CVE-2024-8045.md): Advanced WordPress Backgrounds \<= 1.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameter (CVSS 6.4, nko Advanced WordPress Backgrounds)
- [CVE-2024-7626](https://cve.now/CVE-2024-7626.md): WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) \<= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read (CVSS 8.1, wpdelicious WP Delicious – Recipe Plugin for Food Bloggers)
- [CVE-2024-8440](https://cve.now/CVE-2024-8440.md): Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-7716](https://cve.now/CVE-2024-7716.md): GS Logo Slider Lite \< 3.6.9 - Admin+ Stored XSS (CVSS 4.8, Logo Slider)
- [CVE-2024-3899](https://cve.now/CVE-2024-3899.md): Envira Gallery \< 1.8.15 - Author+ Stored XSS (CVSS 4.8, Gallery Plugin for WordPress)
- [CVE-2024-21529](https://cve.now/CVE-2024-21529.md): Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. (CVSS 8.8, dset · org.webjars.npm:dset)
- [CVE-2024-7727](https://cve.now/CVE-2024-7727.md): HTML5 Video Player – mp4 Video Player Plugin and Block \<= 2.5.32 - Missing Authorization in multiple functions via h5vp\_ajax\_handler (CVSS 5.3, bplugins HTML5 Video Player – Embed and Play Videos in Cust…)
- [CVE-2024-7721](https://cve.now/CVE-2024-7721.md): HTML5 Video Player – mp4 Video Player Plugin and Block \<= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (CVSS 4.3, bplugins HTML5 Video Player – Embed and Play Videos in Cust…)
- [CVE-2024-1656](https://cve.now/CVE-2024-1656.md): Affected versions of Octopus Server had a weak content security policy. (CVSS 2.6, Octopus Deploy Octopus Server)
- [CVE-2024-43690](https://cve.now/CVE-2024-43690.md): Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to per (CVSS 8.0, Gallagher Command Centre Server)
- [CVE-2024-39808](https://cve.now/CVE-2024-39808.md): Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with phy (CVSS 4.6, Gallagher Controller 6000 and Controller)
- [CVE-2024-24972](https://cve.now/CVE-2024-24972.md): Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorise (CVSS 6.5, Gallagher Controller 6000 and Controller)
- [CVE-2024-23906](https://cve.now/CVE-2024-23906.md): Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an (CVSS 6.1, Gallagher Controller 6000 and Controller)
- [CVE-2024-8253](https://cve.now/CVE-2024-8253.md): Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, pickplugins Post Grid and Gutenberg Blocks)
- [CVE-2024-40662](https://cve.now/CVE-2024-40662.md): In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2024-40659](https://cve.now/CVE-2024-40659.md): In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feat (CVSS 5.5, Google Android)
- [CVE-2024-40658](https://cve.now/CVE-2024-40658.md): In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Google Android)
- [CVE-2024-40657](https://cve.now/CVE-2024-40657.md): In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused depu (CVSS 7.8, Google Android)
- [CVE-2024-40656](https://cve.now/CVE-2024-40656.md): In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused (CVSS 5.5, Google Android)
- [CVE-2024-40655](https://cve.now/CVE-2024-40655.md): In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the bac (CVSS 7.8, Google Android)
- [CVE-2024-40654](https://cve.now/CVE-2024-40654.md): In multiple locations, there is a possible permission bypass due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2024-40652](https://cve.now/CVE-2024-40652.md): In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a m (CVSS 7.3, Google Android)
- [CVE-2024-40650](https://cve.now/CVE-2024-40650.md): In wifi\_item\_edit\_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. (CVSS 7.8, Google Android)
- [CVE-2024-31336](https://cve.now/CVE-2024-31336.md): In PVRSRVBridgeRGXKickTA3D2 of server\_rgxta3d\_bridge.c, there is a possible arbitrary code execution due to improper input validation. (CVSS 8.4, Google Android)
- [CVE-2024-23716](https://cve.now/CVE-2024-23716.md): In DevmemIntPFNotify of devicemem\_server.c, there is a possible use-after-free due to a race condition. (CVSS 7.4, Google Android)
- [CVE-2024-42760](https://cve.now/CVE-2024-42760.md): SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/cont (CVSS 7.5)
- [CVE-2024-44466](https://cve.now/CVE-2024-44466.md): COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub\_424CB4. (CVSS 9.8)
- [CVE-2024-44541](https://cve.now/CVE-2024-44541.md): evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin." (CVSS 9.8)
- [CVE-2024-44570](https://cve.now/CVE-2024-44570.md): RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php. (CVSS 8.8)
- [CVE-2024-44571](https://cve.now/CVE-2024-44571.md): RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php. (CVSS 8.8)
- [CVE-2024-44572](https://cve.now/CVE-2024-44572.md): RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys\_mgmt function. (CVSS 8.8)
- [CVE-2024-44573](https://cve.now/CVE-2024-44573.md): A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbi (CVSS 4.7)
- [CVE-2024-44574](https://cve.now/CVE-2024-44574.md): RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sys\_conf function. (CVSS 8.8)
- [CVE-2024-44575](https://cve.now/CVE-2024-44575.md): RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to (CVSS 3.7)
- [CVE-2024-44577](https://cve.now/CVE-2024-44577.md): RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the time\_date function. (CVSS 8.8)
- [CVE-2024-44851](https://cve.now/CVE-2024-44851.md): A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web s (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.