# CVEs published 2024-09-12

118 CVEs were published on September 12, 2024: 20 critical, 39 high. Days are UTC.

- [CVE-2024-8751](https://cve.now/CVE-2024-8751.md): CVE-2024-8751 (CVSS 7.5, SICK AG MSC800 · Endress+Hauser MARSIC200 +14)
- [CVE-2024-7961](https://cve.now/CVE-2024-7961.md): Rockwell Automation Path Traversal Vulnerability in Pavilion8® (CVSS 8.6, Rockwell Automation Pavilion8®)
- [CVE-2024-7960](https://cve.now/CVE-2024-7960.md): Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8® (CVSS 8.8, Rockwell Automation Pavilion8®)
- [CVE-2024-8533](https://cve.now/CVE-2024-8533.md): Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions (CVSS 7.7, Rockwell Automation 2800C OptixPanel™ Compact · Rockwell… +1)
- [CVE-2024-6077](https://cve.now/CVE-2024-6077.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP (CVSS 8.7, Rockwell Automation CompactLogix · Rockwell Automation C… +3)
- [CVE-2024-45607](https://cve.now/CVE-2024-45607.md): whatsapp-api-js fails to validate message's signature (CVSS 5.8, Secreto31126 whatsapp-api-js · whatsapp-api-js)
- [CVE-2024-20430](https://cve.now/CVE-2024-20430.md): Cisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability (CVSS 7.3, Cisco Meraki Systems Manager Agent)
- [CVE-2024-8311](https://cve.now/CVE-2024-8311.md): Improper Protection of Alternate Path in GitLab (CVSS 6.5, GitLab)
- [CVE-2024-4472](https://cve.now/CVE-2024-4472.md): Insertion of Sensitive Information into Log File in GitLab (CVSS 4.0, GitLab)
- [CVE-2024-6678](https://cve.now/CVE-2024-6678.md): Authentication Bypass by Spoofing in GitLab (CVSS 9.9, GitLab)
- [CVE-2024-8641](https://cve.now/CVE-2024-8641.md): Privilege Context Switching Error in GitLab (CVSS 6.7, GitLab)
- [CVE-2024-45383](https://cve.now/CVE-2024-45383.md): A mishandling of IRP requests vulnerability exists in the HDAudBus\_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.36 (CVSS 5.0, Microsoft HDAudBus.sys)
- [CVE-2024-45303](https://cve.now/CVE-2024-45303.md): Discourse Calendar plugin event names susceptible to XSS (CVSS 6.1, discourse-calendar)
- [CVE-2024-8696](https://cve.now/CVE-2024-8696.md): A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 8.9, Docker Desktop)
- [CVE-2024-8695](https://cve.now/CVE-2024-8695.md): A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 9.0, Docker Desktop)
- [CVE-2024-8631](https://cve.now/CVE-2024-8631.md): Privilege Defined With Unsafe Actions in GitLab (CVSS 5.5, GitLab)
- [CVE-2024-8754](https://cve.now/CVE-2024-8754.md): External Control of Critical State Data in GitLab (CVSS 6.4, GitLab)
- [CVE-2024-8635](https://cve.now/CVE-2024-8635.md): Server-Side Request Forgery (SSRF) in GitLab (CVSS 7.7, GitLab)
- [CVE-2024-2743](https://cve.now/CVE-2024-2743.md): Incorrect Authorization in GitLab (CVSS 5.3, GitLab)
- [CVE-2024-4612](https://cve.now/CVE-2024-4612.md): URL Redirection to Untrusted Site ('Open Redirect') in GitLab (CVSS 6.4, GitLab)
- [CVE-2024-4660](https://cve.now/CVE-2024-4660.md): Missing Authorization in GitLab (CVSS 6.5, GitLab)
- [CVE-2024-5435](https://cve.now/CVE-2024-5435.md): Generation of Error Message Containing Sensitive Information in GitLab (CVSS 4.5, GitLab)
- [CVE-2024-6446](https://cve.now/CVE-2024-6446.md): Business Logic Errors in GitLab (CVSS 3.5, GitLab)
- [CVE-2024-6389](https://cve.now/CVE-2024-6389.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab (CVSS 4.3, GitLab)
- [CVE-2024-8124](https://cve.now/CVE-2024-8124.md): Inefficient Regular Expression Complexity in GitLab (CVSS 7.5, GitLab)
- [CVE-2024-8640](https://cve.now/CVE-2024-8640.md): Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 8.5, GitLab)
- [CVE-2024-6840](https://cve.now/CVE-2024-6840.md): Automation-controller: gain access to the k8s api server via job execution with container group (CVSS 6.6, automation-controller · Red Hat Ansible Automation Platform…)
- [CVE-2024-6658](https://cve.now/CVE-2024-6658.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-45826](https://cve.now/CVE-2024-45826.md): ThinManager® Code Execution Vulnerability (CVSS 8.5, Rockwell Automation ThinManager)
- [CVE-2024-45825](https://cve.now/CVE-2024-45825.md): 5015-U8IHFT Denial-of-Service Vulnerability via CIP Message (CVSS 8.7, Rockwell Automation 5015-U8IHFT)
- [CVE-2024-6702](https://cve.now/CVE-2024-6702.md): Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. (CVSS 5.2, Pegasystems Pega Infinity)
- [CVE-2024-6701](https://cve.now/CVE-2024-6701.md): Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. (CVSS 5.5, Pegasystems Pega Infinity)
- [CVE-2024-6700](https://cve.now/CVE-2024-6700.md): Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. (CVSS 5.5, Pegasystems Pega Infinity)
- [CVE-2024-45823](https://cve.now/CVE-2024-45823.md): FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets (CVSS 9.2, Rockwell Automation FactoryTalk® Batch View™)
- [CVE-2024-6510](https://cve.now/CVE-2024-6510.md): Local privilege escalation vulnerability in AVG Internet Security (CVSS 7.8, AVG Internet Security)
- [CVE-2024-42483](https://cve.now/CVE-2024-42483.md): ESP-NOW Replay Attacks Vulnerability (CVSS 6.5, espressif esp-now)
- [CVE-2024-42484](https://cve.now/CVE-2024-42484.md): ESP-NOW OOB Vulnerability In Group Type Message (CVSS 6.5, espressif esp-now)
- [CVE-2024-45824](https://cve.now/CVE-2024-45824.md): FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation (CVSS 9.2, Rockwell Automation FactoryTalk View Site Edition)
- [CVE-2024-28991](https://cve.now/CVE-2024-28991.md): SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution (CVSS 9.0, SolarWinds Access Rights Manager)
- [CVE-2024-28990](https://cve.now/CVE-2024-28990.md): SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability (CVSS 6.3, SolarWinds Access Rights Manager)
- [CVE-2024-3306](https://cve.now/CVE-2024-3306.md): IDOR in Utarit Information's SoliClub (CVSS 8.8, Utarit Information SoliClub)
- [CVE-2024-45856](https://cve.now/CVE-2024-45856.md): A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload wh (CVSS 9.0, mindsdb)
- [CVE-2024-45855](https://cve.now/CVE-2024-45855.md): Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous (CVSS 7.1, mindsdb)
- [CVE-2024-45854](https://cve.now/CVE-2024-45854.md): Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous (CVSS 7.1, mindsdb)
- [CVE-2024-3305](https://cve.now/CVE-2024-3305.md): IDOR in Utarit Information's SoliClub (CVSS 8.8, Utarit Information SoliClub)
- [CVE-2024-45853](https://cve.now/CVE-2024-45853.md): Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous (CVSS 7.1, mindsdb)
- [CVE-2024-45852](https://cve.now/CVE-2024-45852.md): Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to (CVSS 8.8, mindsdb)
- [CVE-2024-45851](https://cve.now/CVE-2024-45851.md): An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint (CVSS 8.8, mindsdb)
- [CVE-2024-45850](https://cve.now/CVE-2024-45850.md): An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint (CVSS 8.8, mindsdb)
- [CVE-2024-45849](https://cve.now/CVE-2024-45849.md): An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint (CVSS 8.8, mindsdb)
- [CVE-2024-45848](https://cve.now/CVE-2024-45848.md): An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration (CVSS 8.8, mindsdb)
- [CVE-2024-45847](https://cve.now/CVE-2024-45847.md): An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrati (CVSS 8.8, mindsdb)
- [CVE-2024-45846](https://cve.now/CVE-2024-45846.md): An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration (CVSS 8.8, mindsdb)
- [CVE-2024-45857](https://cve.now/CVE-2024-45857.md): Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl f (CVSS 7.8, cleanlab)
- [CVE-2024-27321](https://cve.now/CVE-2024-27321.md): An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilab (CVSS 7.8, Refuel autolabel · refuel-autolabel)
- [CVE-2024-27320](https://cve.now/CVE-2024-27320.md): An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classifi (CVSS 7.8, Refuel autolabel · refuel-autolabel)
- [CVE-2021-22503](https://cve.now/CVE-2021-22503.md): Improper Neutralization of Input During Web Page Generation Vulnerability (CVSS 5.4, OpenText eDirectory)
- [CVE-2021-22518](https://cve.now/CVE-2021-22518.md): Sensitive Information logging in NetIQ Identity Manager Driver (CVSS 5.8, OpenText Identity Manager AzureAD Driver)
- [CVE-2021-22532](https://cve.now/CVE-2021-22532.md): Possible NLDAP Denial of Service attack Vulnerability (CVSS 7.6, OpenText eDirectory)
- [CVE-2021-22533](https://cve.now/CVE-2021-22533.md): Possible Insertion of Sensitive Information into Log File Vulnerability (CVSS 6.5, OpenText eDirectory)
- [CVE-2021-38131](https://cve.now/CVE-2021-38131.md): Cross-Site Scripting (XSS) Vulnerability (CVSS 5.4, OpenText eDirectory)
- [CVE-2021-38132](https://cve.now/CVE-2021-38132.md): Possible External service interaction Vulnerability (CVSS 5.3, OpenText eDirectory)
- [CVE-2021-38133](https://cve.now/CVE-2021-38133.md): Possible Improper authentication Vulnerability in OpenText eDirectory (CVSS 7.4, OpenText eDirectory)
- [CVE-2022-26322](https://cve.now/CVE-2022-26322.md): Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager (CVSS 4.9, OpenText Identity Manager REST Driver)
- [CVE-2024-8750](https://cve.now/CVE-2024-8750.md): Cross-site Scripting vulnerability in Idoit pro (CVSS 5.4, Synetics Idoit pro)
- [CVE-2024-8749](https://cve.now/CVE-2024-8749.md): SQL Injection vulnerability in Idoit pro (CVSS 8.8, Synetics Idoit pro)
- [CVE-2024-2010](https://cve.now/CVE-2024-2010.md): Reflected XSS in TE Informatics' V5 Software (CVSS 8.8, TE Informatics)
- [CVE-2024-8522](https://cve.now/CVE-2024-8522.md): LearnPress – WordPress LMS Plugin \<= 4.2.7 - Unauthenticated SQL Injection via 'c\_only\_fields' (CVSS 10.0, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2024-8529](https://cve.now/CVE-2024-8529.md): LearnPress – WordPress LMS Plugin \<= 4.2.7 - Unauthenticated SQL Injection via 'c\_fields' (CVSS 10.0, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2024-8622](https://cve.now/CVE-2024-8622.md): amCharts: Charts and Maps \<= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery (CVSS 6.1, martynasma amCharts: Charts and Maps)
- [CVE-2024-8056](https://cve.now/CVE-2024-8056.md): MM-Breaking News \<= 0.7.9 - Reflected XSS (CVSS 6.1, MM-Breaking News)
- [CVE-2024-8054](https://cve.now/CVE-2024-8054.md): MM-Breaking News \<= 0.7.9 - Stored XSS via CSRF (CVSS 6.1, MM-Breaking News)
- [CVE-2024-7862](https://cve.now/CVE-2024-7862.md): Blog Introduction \<= 0.3.0 - Settings Update via CSRF (CVSS 4.3, blogintroduction-wordpress-plugin)
- [CVE-2024-7861](https://cve.now/CVE-2024-7861.md): Misiek Paypal \<= 1.1.20090324 - Stored XSS via CSRF (CVSS 6.1, Misiek Paypal)
- [CVE-2024-7860](https://cve.now/CVE-2024-7860.md): Simple Headline Rotator \<= 1.0 - Stored XSS via CSRF (CVSS 6.1, Simple Headline Rotator)
- [CVE-2024-7859](https://cve.now/CVE-2024-7859.md): Visual Sound \<= 1.03 - Settings Update via CSRF (CVSS 6.5, Visual Sound)
- [CVE-2024-7822](https://cve.now/CVE-2024-7822.md): Quick Code \<= 1.0 - Stored XSS via CSRF (CVSS 6.1, Quick Code)
- [CVE-2024-7820](https://cve.now/CVE-2024-7820.md): ILC Thickbox \<= 1.0 - Settings update via CSRF (CVSS 4.3, ILC Thickbox)
- [CVE-2024-7818](https://cve.now/CVE-2024-7818.md): Misiek Photo Album \<= 1.4.3 - Stored XSS via CSRF (CVSS 6.1, Misiek Photo Album)
- [CVE-2024-7817](https://cve.now/CVE-2024-7817.md): Misiek Photo Album \<= 1.4.3 - Album Deletion via CSRF (CVSS 6.5, Misiek Photo Album)
- [CVE-2024-7816](https://cve.now/CVE-2024-7816.md): Gixaw Chat \<= 1.0 - Stored XSS via CSRF (CVSS 6.1, Gixaw Chat)
- [CVE-2024-7766](https://cve.now/CVE-2024-7766.md): Adicon Server \<= 1.2 - Admin+ SQL Injection (CVSS 7.2, Adicon Server)
- [CVE-2024-6887](https://cve.now/CVE-2024-6887.md): Giveaways and Contests by RafflePress \< 1.12.16 - Editor+ Stored XSS (CVSS 4.8, Giveaways and Contests by RafflePress)
- [CVE-2024-6019](https://cve.now/CVE-2024-6019.md): Music Request Manager \<= 1.3 - Unauthenticated Stored XSS (CVSS 6.1, Music Request Manager)
- [CVE-2024-6018](https://cve.now/CVE-2024-6018.md): Music Request Manager \<= 1.3 - Reflected XSS (CVSS 6.1, Music Request Manager)
- [CVE-2024-6017](https://cve.now/CVE-2024-6017.md): Music Request Manager \<= 1.3 - Stored XSS via CSRF (CVSS 6.1, Music Request Manager)
- [CVE-2024-5799](https://cve.now/CVE-2024-5799.md): CM Pop-Up Banners for WordPress \< 1.7.3 - Contributor+ Stored XSS (CVSS 4.8, CM Pop-Up Banners for WordPress)
- [CVE-2024-3163](https://cve.now/CVE-2024-3163.md): Easy Property Listings \< 3.5.4 - Arbitrary Contact Deletion via CSRF (CVSS 4.3, Easy Property Listings)
- [CVE-2024-45624](https://cve.now/CVE-2024-45624.md): Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. (CVSS 7.5, PgPool Global Development Group Pgpool-II)
- [CVE-2024-8711](https://cve.now/CVE-2024-8711.md): SourceCodester Food Ordering Management System includes exposure of information through directory listing (CVSS 6.9, SourceCodester Food Ordering Management System)
- [CVE-2024-38222](https://cve.now/CVE-2024-38222.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2024-8710](https://cve.now/CVE-2024-8710.md): code-projects Inventory Management Products Table Page viewProduct.php sql injection (CVSS 5.3, code-projects Inventory Management)
- [CVE-2024-8709](https://cve.now/CVE-2024-8709.md): SourceCodester Best House Rental Management System admin\_class.php save\_user sql injection (CVSS 5.3, SourceCodester Best House Rental Management System)
- [CVE-2024-8708](https://cve.now/CVE-2024-8708.md): SourceCodester Best House Rental Management System categories.php cross site scripting (CVSS 5.3, SourceCodester Best House Rental Management System)
- [CVE-2024-32840](https://cve.now/CVE-2024-32840.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-34783](https://cve.now/CVE-2024-34783.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-29847](https://cve.now/CVE-2024-29847.md): Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenti (CVSS 10.0, Ivanti EPM)
- [CVE-2024-34779](https://cve.now/CVE-2024-34779.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-37397](https://cve.now/CVE-2024-37397.md): An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allow (CVSS 8.2, Ivanti EPM)
- [CVE-2024-32848](https://cve.now/CVE-2024-32848.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-34785](https://cve.now/CVE-2024-34785.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-32843](https://cve.now/CVE-2024-32843.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-32845](https://cve.now/CVE-2024-32845.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-32846](https://cve.now/CVE-2024-32846.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-32842](https://cve.now/CVE-2024-32842.md): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p (CVSS 9.1, Ivanti EPM)
- [CVE-2024-8707](https://cve.now/CVE-2024-8707.md): 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal (CVSS 5.3, 云课网络科技有限公司 Yunke Online School System)
- [CVE-2020-24061](https://cve.now/CVE-2020-24061.md): Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbi (CVSS 5.4)
- [CVE-2024-25270](https://cve.now/CVE-2024-25270.md): An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulat (CVSS 4.3)
- [CVE-2024-34334](https://cve.now/CVE-2024-34334.md): ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. (CVSS 9.3)
- [CVE-2024-34335](https://cve.now/CVE-2024-34335.md): ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page. (CVSS 6.1)
- [CVE-2024-34336](https://cve.now/CVE-2024-34336.md): User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by (CVSS 5.3)
- [CVE-2024-36066](https://cve.now/CVE-2024-36066.md): The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RF (CVSS 3.1)
- [CVE-2024-40457](https://cve.now/CVE-2024-40457.md): No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. (CVSS 9.1)
- [CVE-2024-41629](https://cve.now/CVE-2024-41629.md): An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plainte (CVSS 6.6)
- [CVE-2024-44459](https://cve.now/CVE-2024-44459.md): A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory consumption. (CVSS 7.5)
- [CVE-2024-44460](https://cve.now/CVE-2024-44460.md): An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS). (CVSS 7.5)
- [CVE-2024-45181](https://cve.now/CVE-2024-45181.md): An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. (CVSS 8.8)
- [CVE-2024-45182](https://cve.now/CVE-2024-45182.md): An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.