# CVEs published 2024-09-16

163 CVEs were published on September 16, 2024: 19 critical, 42 high. Days are UTC.

- [CVE-2024-45496](https://cve.now/CVE-2024-45496.md): Openshift-controller-manager: elevated build pods can lead to node compromise in openshift (CVSS 9.9, openshift-controller-manager · Red Hat OpenShift Contain… +1)
- [CVE-2024-7387](https://cve.now/CVE-2024-7387.md): Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy (CVSS 9.1, openshift/builder · Red Hat OpenShift Container Platform +1)
- [CVE-2024-40848](https://cve.now/CVE-2024-40848.md): A downgrade issue was addressed with additional code-signing restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2024-44149](https://cve.now/CVE-2024-44149.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2024-44165](https://cve.now/CVE-2024-44165.md): A logic issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2024-40825](https://cve.now/CVE-2024-40825.md): The issue was addressed with improved checks. (CVSS 6.0, Apple macOS · Apple visionOS)
- [CVE-2024-44132](https://cve.now/CVE-2024-44132.md): This issue was addressed with improved handling of symlinks. (CVSS 8.4, Apple macOS)
- [CVE-2024-44124](https://cve.now/CVE-2024-44124.md): This issue was addressed through improved state management. (CVSS 6.5, Apple iOS and iPadOS)
- [CVE-2024-40844](https://cve.now/CVE-2024-40844.md): A privacy issue was addressed with improved handling of temporary files. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-44153](https://cve.now/CVE-2024-44153.md): The issue was addressed with improved permissions logic. (CVSS 5.5, Apple macOS)
- [CVE-2024-40852](https://cve.now/CVE-2024-40852.md): This issue was addressed by restricting options offered on a locked device. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2024-44186](https://cve.now/CVE-2024-44186.md): An access issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44169](https://cve.now/CVE-2024-44169.md): The issue was addressed with improved memory handling. (CVSS 8.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-44128](https://cve.now/CVE-2024-44128.md): This issue was addressed by adding an additional prompt for user consent. (CVSS 5.5, Apple macOS)
- [CVE-2024-44190](https://cve.now/CVE-2024-44190.md): A path handling issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2024-44191](https://cve.now/CVE-2024-44191.md): This issue was addressed through improved state management. (CVSS 5.5, Apple Xcode · Apple iOS and iPadOS +4)
- [CVE-2024-44129](https://cve.now/CVE-2024-44129.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2024-44187](https://cve.now/CVE-2024-44187.md): A cross-origin issue existed with "iframe" elements. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2024-44168](https://cve.now/CVE-2024-44168.md): A library injection issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44152](https://cve.now/CVE-2024-44152.md): A privacy issue was addressed with improved private data redaction for log entries. (CVSS 7.5, Apple macOS)
- [CVE-2024-40845](https://cve.now/CVE-2024-40845.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2024-44125](https://cve.now/CVE-2024-44125.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2024-44133](https://cve.now/CVE-2024-44133.md): This issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2024-44164](https://cve.now/CVE-2024-44164.md): This issue was addressed with improved checks. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-44148](https://cve.now/CVE-2024-44148.md): This issue was addressed with improved validation of file attributes. (CVSS 10.0, Apple macOS)
- [CVE-2024-40842](https://cve.now/CVE-2024-40842.md): An issue was addressed with improved validation of environment variables. (CVSS 5.5, Apple macOS)
- [CVE-2024-44180](https://cve.now/CVE-2024-44180.md): The issue was addressed with improved checks. (CVSS 2.4, Apple iOS and iPadOS)
- [CVE-2024-27861](https://cve.now/CVE-2024-27861.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2024-44163](https://cve.now/CVE-2024-44163.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2024-44134](https://cve.now/CVE-2024-44134.md): This issue was addressed with improved redaction of sensitive information. (CVSS 5.5, Apple macOS)
- [CVE-2024-40862](https://cve.now/CVE-2024-40862.md): A privacy issue was addressed by removing sensitive data. (CVSS 7.5, Apple Xcode)
- [CVE-2024-40863](https://cve.now/CVE-2024-40863.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2024-44135](https://cve.now/CVE-2024-44135.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44162](https://cve.now/CVE-2024-44162.md): This issue was addressed by enabling hardened runtime. (CVSS 7.8, Apple Xcode)
- [CVE-2024-40859](https://cve.now/CVE-2024-40859.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-27876](https://cve.now/CVE-2024-27876.md): A race condition was addressed with improved locking. (CVSS 8.1, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2024-44158](https://cve.now/CVE-2024-44158.md): This issue was addressed with improved redaction of sensitive information. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-27860](https://cve.now/CVE-2024-27860.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2024-40770](https://cve.now/CVE-2024-40770.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2024-44178](https://cve.now/CVE-2024-44178.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2024-40838](https://cve.now/CVE-2024-40838.md): A privacy issue was addressed by moving sensitive data to a protected location. (CVSS 3.3, Apple macOS)
- [CVE-2024-44139](https://cve.now/CVE-2024-44139.md): The issue was addressed with improved checks. (CVSS 2.4, Apple iOS and iPadOS)
- [CVE-2024-44181](https://cve.now/CVE-2024-44181.md): An issue was addressed with improved handling of temporary files. (CVSS 5.5, Apple macOS)
- [CVE-2024-44154](https://cve.now/CVE-2024-44154.md): A memory initialization issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2024-40843](https://cve.now/CVE-2024-40843.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2024-44182](https://cve.now/CVE-2024-44182.md): This issue was addressed with improved redaction of sensitive information. (CVSS 5.5, Apple macOS)
- [CVE-2024-40856](https://cve.now/CVE-2024-40856.md): An integrity issue was addressed with Beacon Protection. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2024-27879](https://cve.now/CVE-2024-27879.md): The issue was addressed with improved bounds checks. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2024-40801](https://cve.now/CVE-2024-40801.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-27880](https://cve.now/CVE-2024-27880.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-40840](https://cve.now/CVE-2024-40840.md): This issue was addressed through improved state management. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2024-40790](https://cve.now/CVE-2024-40790.md): The issue was addressed with improved handling of caches. (CVSS 5.5, Apple visionOS)
- [CVE-2024-40837](https://cve.now/CVE-2024-40837.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44177](https://cve.now/CVE-2024-44177.md): A privacy issue was addressed by removing sensitive data. (CVSS 5.5, Apple macOS)
- [CVE-2024-44198](https://cve.now/CVE-2024-44198.md): An integer overflow was addressed through improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-40860](https://cve.now/CVE-2024-40860.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2024-44161](https://cve.now/CVE-2024-44161.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple macOS)
- [CVE-2024-27875](https://cve.now/CVE-2024-27875.md): A logic issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2024-27874](https://cve.now/CVE-2024-27874.md): This issue was addressed through improved state management. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2024-44160](https://cve.now/CVE-2024-44160.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS)
- [CVE-2024-27858](https://cve.now/CVE-2024-27858.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-40861](https://cve.now/CVE-2024-40861.md): The issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2024-44176](https://cve.now/CVE-2024-44176.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-40791](https://cve.now/CVE-2024-40791.md): A privacy issue was addressed with improved private data redaction for log entries. (CVSS 3.3, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-40841](https://cve.now/CVE-2024-40841.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.8, Apple macOS)
- [CVE-2024-40857](https://cve.now/CVE-2024-40857.md): This issue was addressed through improved state management. (CVSS 6.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2024-44183](https://cve.now/CVE-2024-44183.md): A logic error was addressed with improved error handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-40831](https://cve.now/CVE-2024-40831.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44171](https://cve.now/CVE-2024-44171.md): This issue was addressed through improved state management. (CVSS 4.6, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2024-40866](https://cve.now/CVE-2024-40866.md): The issue was addressed with improved UI. (CVSS 6.5, Apple Safari · Apple macOS)
- [CVE-2024-44130](https://cve.now/CVE-2024-44130.md): This issue was addressed with improved data protection. (CVSS 4.4, Apple macOS)
- [CVE-2024-44167](https://cve.now/CVE-2024-44167.md): This issue was addressed by removing the vulnerable code. (CVSS 8.1, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2024-44188](https://cve.now/CVE-2024-44188.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-27795](https://cve.now/CVE-2024-27795.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2024-44184](https://cve.now/CVE-2024-44184.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-40850](https://cve.now/CVE-2024-40850.md): A file access issue was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2024-44147](https://cve.now/CVE-2024-44147.md): This issue was addressed through improved state management. (CVSS 7.7, Apple iOS and iPadOS)
- [CVE-2024-27869](https://cve.now/CVE-2024-27869.md): The issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-44151](https://cve.now/CVE-2024-44151.md): A permissions issue was addressed with additional restrictions. (CVSS 6.5, Apple macOS)
- [CVE-2024-40846](https://cve.now/CVE-2024-40846.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS)
- [CVE-2024-40797](https://cve.now/CVE-2024-40797.md): This issue was addressed through improved state management. (CVSS 6.1, Apple macOS)
- [CVE-2024-40847](https://cve.now/CVE-2024-40847.md): The issue was addressed with additional code-signing restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2024-44146](https://cve.now/CVE-2024-44146.md): A logic issue was addressed with improved file handling. (CVSS 10.0, Apple macOS)
- [CVE-2024-44202](https://cve.now/CVE-2024-44202.md): An authentication issue was addressed with improved state management. (CVSS 5.3, Apple Safari · Apple iOS and iPadOS)
- [CVE-2024-44166](https://cve.now/CVE-2024-44166.md): A privacy issue was addressed with improved private data redaction for log entries. (CVSS 5.5, Apple macOS)
- [CVE-2024-40826](https://cve.now/CVE-2024-40826.md): A privacy issue was addressed with improved handling of files. (CVSS 6.1, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-44189](https://cve.now/CVE-2024-44189.md): The issue was addressed with improved checks. (CVSS 7.5, Apple macOS)
- [CVE-2024-23237](https://cve.now/CVE-2024-23237.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2024-44131](https://cve.now/CVE-2024-44131.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2024-44127](https://cve.now/CVE-2024-44127.md): This issue was addressed through improved state management. (CVSS 5.3, Apple iOS and iPadOS)
- [CVE-2024-40830](https://cve.now/CVE-2024-40830.md): This issue was addressed with improved data protection. (CVSS 3.3, Apple iOS and iPadOS)
- [CVE-2024-44170](https://cve.now/CVE-2024-44170.md): A privacy issue was addressed by moving sensitive data to a more secure location. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2024-4283](https://cve.now/CVE-2024-4283.md): URL Redirection to Untrusted Site ('Open Redirect') in GitLab (CVSS 6.4, GitLab)
- [CVE-2024-6685](https://cve.now/CVE-2024-6685.md): Authorization Bypass Through User-Controlled Key in GitLab (CVSS 3.1, GitLab)
- [CVE-2024-22013](https://cve.now/CVE-2024-22013.md): U-Boot environment is read from unauthenticated partition. (CVSS 5.3, Google Nest Wifi Pro)
- [CVE-2024-8766](https://cve.now/CVE-2024-8766.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2024-34016](https://cve.now/CVE-2024-34016.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.5, Acronis Cyber Protect Cloud Agent)
- [CVE-2024-45800](https://cve.now/CVE-2024-45800.md): Multiple mXSS found in snappymail HTML parser (CVSS 5.0, the-djmaze snappymail)
- [CVE-2024-39910](https://cve.now/CVE-2024-39910.md): Cross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editor (CVSS 5.4, decidim)
- [CVE-2024-32034](https://cve.now/CVE-2024-32034.md): Cross-site scripting (XSS) in the decidim admin activity log (CVSS 6.8, decidim · decidim-admin)
- [CVE-2024-45799](https://cve.now/CVE-2024-45799.md): Javascript Injection in Vending Info/Buyers Info Module in FluxCP (CVSS 7.3, rathena FluxCP)
- [CVE-2024-45801](https://cve.now/CVE-2024-45801.md): Tampering by prototype polution in DOMPurify (CVSS 7.3, cure53 DOMPurify · dompurify)
- [CVE-2024-8661](https://cve.now/CVE-2024-8661.md): Concrete CMS version 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block (CVSS 4.6, Concrete CMS · concrete5/concrete5)
- [CVE-2024-23984](https://cve.now/CVE-2024-23984.md): Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosu (CVSS 6.8, Intel(R) Processors)
- [CVE-2024-24968](https://cve.now/CVE-2024-24968.md): Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a den (CVSS 5.6, Intel(R) Processors)
- [CVE-2023-25546](https://cve.now/CVE-2023-25546.md): Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via loc (CVSS 1.8, UEFI firmware for some Intel(R) Processors)
- [CVE-2023-43753](https://cve.now/CVE-2023-43753.md): Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclo (CVSS 6.8, Intel(R) Processors with Intel(R) SGX)
- [CVE-2023-22351](https://cve.now/CVE-2023-22351.md): Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege (CVSS 6.9, UEFI firmware for some Intel(R) Processors)
- [CVE-2023-23904](https://cve.now/CVE-2023-23904.md): NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p (CVSS 6.9, UEFI firmware for some Intel(R) Processors)
- [CVE-2023-41833](https://cve.now/CVE-2023-41833.md): A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via (CVSS 8.7, UEFI firmware for some Intel(R) processors)
- [CVE-2024-21781](https://cve.now/CVE-2024-21781.md): Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or deni (CVSS 7.0, UEFI firmware for some Intel(R) Processors)
- [CVE-2024-21829](https://cve.now/CVE-2024-21829.md): Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable esca (CVSS 8.7, Intel(R) Processors)
- [CVE-2023-42772](https://cve.now/CVE-2023-42772.md): Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable esca (CVSS 8.7, UEFI firmware for some Intel(R) reference processors)
- [CVE-2023-43626](https://cve.now/CVE-2023-43626.md): Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privil (CVSS 8.7, UEFI firmware for some Intel(R) Processors)
- [CVE-2024-21871](https://cve.now/CVE-2024-21871.md): Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv (CVSS 7.3, UEFI firmware for some Intel(R) Processors)
- [CVE-2024-23599](https://cve.now/CVE-2024-23599.md): Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial o (CVSS 8.3, Seamless Firmware Updates for some Intel® reference platfo…)
- [CVE-2024-28170](https://cve.now/CVE-2024-28170.md): Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosu (CVSS 3.3, Intel(R) RAID Web Console)
- [CVE-2024-36261](https://cve.now/CVE-2024-36261.md): Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of s (CVSS 3.5, Intel(R) RAID Web Console software)
- [CVE-2024-36247](https://cve.now/CVE-2024-36247.md): Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable denial of service vi (CVSS 4.6, Intel(R) RAID Web Console)
- [CVE-2024-32666](https://cve.now/CVE-2024-32666.md): NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial (CVSS 4.7, Intel(R) RAID Web Console software)
- [CVE-2024-34545](https://cve.now/CVE-2024-34545.md): Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable info (CVSS 5.2, Intel(R) RAID Web Console software)
- [CVE-2024-33848](https://cve.now/CVE-2024-33848.md): Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of servic (CVSS 6.5, Intel(R) RAID Web Console software)
- [CVE-2024-32940](https://cve.now/CVE-2024-32940.md): Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial (CVSS 6.5, Intel(R) RAID Web Console software)
- [CVE-2024-34153](https://cve.now/CVE-2024-34153.md): Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enabl (CVSS 6.7, Intel(R) RAID Web Console software)
- [CVE-2024-34543](https://cve.now/CVE-2024-34543.md): Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalat (CVSS 6.7, Intel(R) RAID Web Console software)
- [CVE-2024-8752](https://cve.now/CVE-2024-8752.md): WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability (CVSS 9.3, Smart HMI WebIQ)
- [CVE-2024-38315](https://cve.now/CVE-2024-38315.md): IBM Aspera Shares session fixation (CVSS 6.3, IBM Aspera Shares)
- [CVE-2024-6401](https://cve.now/CVE-2024-6401.md): SQLi in SFS Consulting's InsureE GL (CVSS 9.2, SFS Consulting InsureE GL)
- [CVE-2024-7104](https://cve.now/CVE-2024-7104.md): Remote Code Execution in SFS Consulting's ww.Winsure (CVSS 9.2, SFS Consulting ww.Winsure)
- [CVE-2024-7098](https://cve.now/CVE-2024-7098.md): XML Injection in SFS Consulting's ww.Winsure (CVSS 9.2, SFS Consulting ww.Winsure)
- [CVE-2024-45835](https://cve.now/CVE-2024-45835.md): Insufficient Electron Fuses Configuration (CVSS 2.5, Mattermost · mattermost-desktop)
- [CVE-2024-39772](https://cve.now/CVE-2024-39772.md): Silent Desktop Screenshot Capture (CVSS 3.7, Mattermost · mattermost-desktop)
- [CVE-2024-22399](https://cve.now/CVE-2024-22399.md): Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server (CVSS 9.8, Apache Software Foundation Apache Seata · org.apache.seata:…)
- [CVE-2024-46970](https://cve.now/CVE-2024-46970.md): In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible (CVSS 3.3, JetBrains IntelliJ IDEA)
- [CVE-2024-1578](https://cve.now/CVE-2024-1578.md): Multiple MiCard PLUS card reader dropped characters (CVSS 5.3, Rebranded by NT-ware (originally developed and provided by…)
- [CVE-2024-45698](https://cve.now/CVE-2024-45698.md): D-Link WiFi router - OS Command Injection (CVSS 9.8, D-Link DIR-X4860 A1)
- [CVE-2024-45697](https://cve.now/CVE-2024-45697.md): D-Link WiFi router - Hidden Functionality (CVSS 9.8, D-Link DIR-X4860 A1)
- [CVE-2024-45696](https://cve.now/CVE-2024-45696.md): D-Link WiFi router - Hidden Functionality (CVSS 8.8, D-Link DIR-X4860 A1 · D-Link COVR-X1870)
- [CVE-2024-45833](https://cve.now/CVE-2024-45833.md): Mobile password gets saved in dictionary under conditions (CVSS 4.5, Mattermost)
- [CVE-2024-39613](https://cve.now/CVE-2024-39613.md): RCE in desktop app in Windows by local attacker (CVSS 5.3, Mattermost · mattermost-desktop)
- [CVE-2024-45695](https://cve.now/CVE-2024-45695.md): D-Link WiFi router - Stack-based Buffer Overflow (CVSS 9.8, D-Link DIR-X4860 A1)
- [CVE-2024-45694](https://cve.now/CVE-2024-45694.md): D-Link WiFi router - Stack-based Buffer Overflow (CVSS 9.8, D-Link DIR-X5460 A1 · D-Link DIR-X4860 A1)
- [CVE-2024-8780](https://cve.now/CVE-2024-8780.md): The SYSCOM Group OMFLOW - Improper Authorization for Data Query Function (CVSS 6.5, The SYSCOM Group OMFLOW)
- [CVE-2024-8779](https://cve.now/CVE-2024-8779.md): The SYSCOM Group OMFLOW - Broken Access Control (CVSS 8.8, The SYSCOM Group OMFLOW)
- [CVE-2024-8778](https://cve.now/CVE-2024-8778.md): The SYSCOM Group OMFLOW - Arbitrary File Read (CVSS 6.5, The SYSCOM Group OMFLOW)
- [CVE-2024-8777](https://cve.now/CVE-2024-8777.md): The SYSCOM Group OMFLOW - Information Leakage (CVSS 7.5, The SYSCOM Group OMFLOW)
- [CVE-2024-8776](https://cve.now/CVE-2024-8776.md): INTUMIT SmartRobot - Cross-site Scripting (CVSS 6.1, INTUMIT SmartRobot)
- [CVE-2024-8880](https://cve.now/CVE-2024-8880.md): playSMS Template index.php code injection (CVSS 6.3, playSMS)
- [CVE-2023-45854](https://cve.now/CVE-2023-45854.md): A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd p (CVSS 7.5)
- [CVE-2024-42794](https://cve.now/CVE-2024-42794.md): Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save\_user. (CVSS 4.7)
- [CVE-2024-42795](https://cve.now/CVE-2024-42795.md): An Incorrect Access Control vulnerability was found in /music/view\_user.php?id=3 and /music/controller.php?page=edit\_user&id=3 in Kashipara (CVSS 4.2)
- [CVE-2024-42796](https://cve.now/CVE-2024-42796.md): An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete\_genre in Kashipara Music Management System v1.0. (CVSS 5.9)
- [CVE-2024-42798](https://cve.now/CVE-2024-42798.md): An Incorrect Access Control vulnerability was found in /music/index.php?page=user\_list and /music/index.php?page=edit\_user in Kashipara Musi (CVSS 7.6)
- [CVE-2024-44623](https://cve.now/CVE-2024-44623.md): An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child\_process.js function. (CVSS 7.3)
- [CVE-2024-45413](https://cve.now/CVE-2024-45413.md): The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa\_decrypt function. (CVSS 8.1)
- [CVE-2024-45414](https://cve.now/CVE-2024-45414.md): The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. (CVSS 9.8)
- [CVE-2024-45415](https://cve.now/CVE-2024-45415.md): The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check\_data\_integrity function. (CVSS 9.8)
- [CVE-2024-45416](https://cve.now/CVE-2024-45416.md): The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session\_init function. (CVSS 8.1)
- [CVE-2024-46419](https://cve.now/CVE-2024-46419.md): TOTOLINK AC1200 T8 v4.1.5cu.861\_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter. (CVSS 9.8)
- [CVE-2024-46424](https://cve.now/CVE-2024-46424.md): TOTOLINK AC1200 T8 v4.1.5cu.861\_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to (CVSS 7.5)
- [CVE-2024-46451](https://cve.now/CVE-2024-46451.md): TOTOLINK AC1200 T8 v4.1.5cu.861\_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter. (CVSS 9.8)
- [CVE-2024-46937](https://cve.now/CVE-2024-46937.md): An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication S (CVSS 9.1)
- [CVE-2024-46958](https://cve.now/CVE-2024-46958.md): In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or (CVSS 9.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.