CVEs published September 14, 2024
13 CVEs were published on September 14, 2024: 2 critical, 4 high.
- Published
- 13
- Critical
- 2
- High
- 4
- Medium
- 7
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- aimhubio aim · aim
- 1
- ankitpokhrel WooCommerce Multiple Free Gift
- 1
- ansible-core · Red Hat Ansible Automation Platform Execu… +4
- 1
- Bricks Builder Bricks
- 1
- glboy OTP Login With Phone Number, OTP Verification
- 1
- h2oai h2o-3 · dtale
- 1
- murgroland WP Booking System – Booking Calendar
- 1
- realmag777 FOX – Currency Switcher Professional for WooComm…
- 1
- softaculous Backuply – Backup, Restore, Migrate and Clone
- 1
- TECNO com.afmobi.boomplayer
- 1
Critical 2
- CVE-2024-8669Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injectionsoftaculous Backuply – Backup, Restore, Migrate and Clone
- CVE-2024-8039Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account taTECNO com.afmobi.boomplayer
High 4
- CVE-2024-6482Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalationglboy OTP Login With Phone Number, OTP Verification
- CVE-2024-8479Simple Spoiler 1.2 - 1.3 - Unauthenticated Arbitrary Shortcode Executionwebliberty Simple Spoiler
- CVE-2024-8246Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalationthemekraft Post Form – Registration Form – Profile Form for…
- CVE-2024-8271FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Executionrealmag777 FOX – Currency Switcher Professional for WooComm…
Medium, low and unrated 7
- CVE-2024-8863aimhubio aim Text Explorer textbox.tsx dangerouslySetInnerHTML cross site scriptingaimhubio aim · aim
- CVE-2024-8862h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserializationh2oai h2o-3 · dtale
- CVE-2023-3410Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site ScriptingBricks Builder Bricks
- CVE-2024-8797WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scriptingmurgroland WP Booking System – Booking Calendar
- CVE-2024-8724Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scriptingxootix Waitlist Woocommerce
- CVE-2024-8775Ansible-core: exposure of sensitive information in ansible vault files due to improper loggingansible-core · Red Hat Ansible Automation Platform Execu… +4
- CVE-2022-3459WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Addingankitpokhrel WooCommerce Multiple Free Gift