CVEs published September 15, 2024
27 CVEs were published on September 15, 2024: 3 critical, 5 high.
- Published
- 27
- Critical
- 3
- High
- 5
- Medium
- 18
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- composiohq composio · composio-core
- 2
- JoomUnited WP Meta SEO
- 2
- Spiffy Plugins Spiffy Calendar
- 2
- AutoCMS
- 1
- code-projects Crud Operation System
- 1
- CryoutCreations Fluida
- 1
- CryoutCreations Mantra
- 1
- CryoutCreations Nirvana
- 1
- CryoutCreations Parabola
- 1
- Happyforms
- 1
Critical 3
- CVE-2024-46918app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of a
- CVE-2024-46942In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entriesorg.opendaylight.mdsal:mdsal-artifacts
- CVE-2024-46943An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.org.opendaylight.aaa:aaa-artifacts
High 5
- CVE-2024-44053WordPress Opor Ayam theme <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerabilityMohammad Arif Opor Ayam
- CVE-2024-44060WordPress filmix theme <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityJennifer Hall Filmix
- CVE-2024-45458WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerabilitySpiffy Plugins Spiffy Calendar
- CVE-2024-45459WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Product Slider for WooCommerce
- CVE-2024-46938An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release thro
Medium, low and unrated 19
- CVE-2024-8876xiaohe4966 TpMeCMS lang path traversalxiaohe4966 TpMeCMS
- CVE-2024-8875vedees wcms finder.php path traversalvedees wcms
- CVE-2024-8869TOTOLINK A720R exportOvpn os command injectionTOTOLINK A720R
- CVE-2024-44054WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerabilityCryoutCreations Fluida
- CVE-2024-44056WordPress Mantra theme <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilityCryoutCreations Mantra
- CVE-2024-44057WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerabilityCryoutCreations Nirvana
- CVE-2024-44058WordPress Parabola theme <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityCryoutCreations Parabola
- CVE-2024-44059WordPress Custom Query Blocks plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerabilityRonald Huereca Custom Query Blocks
- CVE-2024-44062WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerabilityHiroaki Miyashita Custom Field Template
- CVE-2024-44063WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerabilityHappyforms
- CVE-2024-45455WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityJoomUnited WP Meta SEO
- CVE-2024-45456WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityJoomUnited WP Meta SEO
- CVE-2024-45457WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerabilitySpiffy Plugins Spiffy Calendar
- CVE-2024-45460WordPress Flipping Cards plugin <= 1.30 - Cross Site Scripting (XSS) vulnerabilitymanu225 Flipping Cards
- CVE-2024-8868code-projects Crud Operation System savedata.php sql injectioncode-projects Crud Operation System
- CVE-2024-8867Perfex CRM Parameter Clients.php cross site scriptingPerfex CRM
- CVE-2024-8866AutoCMS robot.php cross site scriptingAutoCMS
- CVE-2024-8865composiohq composio api.py path path traversalcomposiohq composio · composio-core
- CVE-2024-8864composiohq composio calculator.py Calculator code injectioncomposiohq composio · composio-core