# CVEs published 2024-09-18

239 CVEs were published on September 18, 2024: 22 critical, 101 high. Days are UTC.

- [CVE-2024-37406](https://cve.now/CVE-2024-37406.md): In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to dom (CVSS 7.5, Brave Android Browser)
- [CVE-2022-25770](https://cve.now/CVE-2022-25770.md): Insufficient authentication in upgrade flow (CVSS 7.8, Mautic · mautic/core +1)
- [CVE-2024-47059](https://cve.now/CVE-2024-47059.md): Users enumeration - weak password login (CVSS 4.3, Mautic · mautic/core)
- [CVE-2021-27917](https://cve.now/CVE-2021-27917.md): XSS in contact tracking and page hits report (CVSS 7.3, Mautic · mautic/core-lib +1)
- [CVE-2024-47050](https://cve.now/CVE-2024-47050.md): XSS in contact/company tracking (no authentication) (CVSS 5.4, Mautic · mautic/core +1)
- [CVE-2024-47058](https://cve.now/CVE-2024-47058.md): Cross-site Scripting (XSS) - stored (edit form HTML field) (CVSS 2.9, Mautic · mautic/core +1)
- [CVE-2022-25768](https://cve.now/CVE-2022-25768.md): Improper Access Control in UI upgrade process (CVSS 7.0, Mautic · mautic/core-lib +1)
- [CVE-2024-8287](https://cve.now/CVE-2024-8287.md): Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. (CVSS 7.5, Canonical Anbox Cloud)
- [CVE-2024-45601](https://cve.now/CVE-2024-45601.md): Local file Inclusion via static file serving functionality in Mesop (CVSS 7.5, google mesop · mesop)
- [CVE-2024-46989](https://cve.now/CVE-2024-46989.md): Multiple caveats on resources of the same type can result in no permission when permission is expected (CVSS 3.7, authzed spicedb · github.com/authzed/spicedb)
- [CVE-2024-46978](https://cve.now/CVE-2024-46978.md): Missing checks for notification filter preferences editions in XWiki Platform (CVSS 6.5, xwiki-platform · org.xwiki.platform:xwiki-platform-notifica…)
- [CVE-2024-46979](https://cve.now/CVE-2024-46979.md): Data leak of notification filters of users in XWiki Platform (CVSS 5.3, xwiki-platform · org.xwiki.platform:xwiki-platform-notifica…)
- [CVE-2024-46987](https://cve.now/CVE-2024-46987.md): Arbitrary path traversal in Camaleon CMS (CVSS 7.7, owen2345 camaleon-cms · camaleon\_cms)
- [CVE-2024-46986](https://cve.now/CVE-2024-46986.md): Arbitrary file write leading to RCE in Camaleon CMS (CVSS 10.0, owen2345 camaleon-cms · camaleon\_cms)
- [CVE-2024-45298](https://cve.now/CVE-2024-45298.md): Disabled user can bypass lockout by requesting password reset in wiki.js (CVSS 4.3, requarks wiki)
- [CVE-2024-46990](https://cve.now/CVE-2024-46990.md): SSRF Loopback IP filter bypass in directus (CVSS 5.0, directus · @directus/api)
- [CVE-2024-45813](https://cve.now/CVE-2024-45813.md): ReDoS vulnerability in multiparametric routes in find-my-way (CVSS 5.3, delvedor find-my-way · find-my-way)
- [CVE-2022-25777](https://cve.now/CVE-2022-25777.md): Server-Side Request Forgery in Asset section (CVSS 6.5, Mautic · mautic/core)
- [CVE-2022-25776](https://cve.now/CVE-2022-25776.md): Sensitive Data Exposure due to inadequate user permission settings (CVSS 8.3, Mautic · mautic/core)
- [CVE-2024-45858](https://cve.now/CVE-2024-45858.md): An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way (CVSS 7.8, Guardrails AI guardrails · guardrails-ai)
- [CVE-2022-25775](https://cve.now/CVE-2022-25775.md): SQL Injection in dynamic Reports (CVSS 6.6, Mautic · mautic/core)
- [CVE-2024-6878](https://cve.now/CVE-2024-6878.md): Directory Browsing in Eliz Software's Panel (CVSS 9.2, Eliz Software Panel)
- [CVE-2022-25774](https://cve.now/CVE-2022-25774.md): XSS in Notifications via saving Dashboards (CVSS 4.8, Mautic · mautic/core)
- [CVE-2024-6877](https://cve.now/CVE-2024-6877.md): Reflected XSS in Eliz Software's Panel (CVSS 9.4, Eliz Software Panel)
- [CVE-2024-5960](https://cve.now/CVE-2024-5960.md): Plaintext Storage of a Password in Eliz Software's Panel (CVSS 9.8, Eliz Software Panel)
- [CVE-2022-25769](https://cve.now/CVE-2022-25769.md): Improper regex in htaccess file (CVSS 7.2, Mautic · mautic/core)
- [CVE-2024-5959](https://cve.now/CVE-2024-5959.md): Stored XSS in Eliz Software's Panel (CVSS 9.3, Eliz Software Panel)
- [CVE-2024-5958](https://cve.now/CVE-2024-5958.md): SQLi in Eliz Software's Panel (CVSS 9.4, Eliz Software Panel)
- [CVE-2024-36981](https://cve.now/CVE-2024-36981.md): An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC\_v3 b4702061dc14d1024856f7 (CVSS 7.5, OpenPLC\_v3)
- [CVE-2024-36980](https://cve.now/CVE-2024-36980.md): An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC\_v3 b4702061dc14d1024856f7 (CVSS 7.5, OpenPLC\_v3)
- [CVE-2024-34026](https://cve.now/CVE-2024-34026.md): A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC \_v3 b4702061dc14d10248 (CVSS 9.0, OpenPLC\_v3)
- [CVE-2024-39590](https://cve.now/CVE-2024-39590.md): Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC\_v3 16bf8bac1a3 (CVSS 7.5, OpenPLC\_v3)
- [CVE-2024-39589](https://cve.now/CVE-2024-39589.md): Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC\_v3 16bf8bac1a3 (CVSS 7.5, OpenPLC\_v3)
- [CVE-2024-31198](https://cve.now/CVE-2024-31198.md): Out-of-bounds Read in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31197](https://cve.now/CVE-2024-31197.md): Improper Null Termination in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31196](https://cve.now/CVE-2024-31196.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31195](https://cve.now/CVE-2024-31195.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31194](https://cve.now/CVE-2024-31194.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31193](https://cve.now/CVE-2024-31193.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31192](https://cve.now/CVE-2024-31192.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31191](https://cve.now/CVE-2024-31191.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31190](https://cve.now/CVE-2024-31190.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31189](https://cve.now/CVE-2024-31189.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31188](https://cve.now/CVE-2024-31188.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31187](https://cve.now/CVE-2024-31187.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31186](https://cve.now/CVE-2024-31186.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31185](https://cve.now/CVE-2024-31185.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31184](https://cve.now/CVE-2024-31184.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31183](https://cve.now/CVE-2024-31183.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31182](https://cve.now/CVE-2024-31182.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31181](https://cve.now/CVE-2024-31181.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31180](https://cve.now/CVE-2024-31180.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31179](https://cve.now/CVE-2024-31179.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31178](https://cve.now/CVE-2024-31178.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31177](https://cve.now/CVE-2024-31177.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31176](https://cve.now/CVE-2024-31176.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31175](https://cve.now/CVE-2024-31175.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31174](https://cve.now/CVE-2024-31174.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31173](https://cve.now/CVE-2024-31173.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31172](https://cve.now/CVE-2024-31172.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31171](https://cve.now/CVE-2024-31171.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31170](https://cve.now/CVE-2024-31170.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31169](https://cve.now/CVE-2024-31169.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31168](https://cve.now/CVE-2024-31168.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31167](https://cve.now/CVE-2024-31167.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31166](https://cve.now/CVE-2024-31166.md): Out-of-bounds Read in libfluid\_msg library (CVSS 6.5, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31165](https://cve.now/CVE-2024-31165.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-31164](https://cve.now/CVE-2024-31164.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-23916](https://cve.now/CVE-2024-23916.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-23915](https://cve.now/CVE-2024-23915.md): NULL Pointer Dereference in libfluid\_msg library (CVSS 5.3, Open Networking Foundation (ONF) libfluid)
- [CVE-2024-8891](https://cve.now/CVE-2024-8891.md): Exposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMT (CVSS 5.3, CIRCUTOR Q-SMT)
- [CVE-2024-8890](https://cve.now/CVE-2024-8890.md): Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT (CVSS 8.0, CIRCUTOR Q-SMT)
- [CVE-2024-8892](https://cve.now/CVE-2024-8892.md): Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+ (CVSS 5.3, CIRCUTOR TCP2RS+)
- [CVE-2024-8889](https://cve.now/CVE-2024-8889.md): Improper Input Validation vulnerability on CIRCUTOR TCP2RS+ (CVSS 9.3, CIRCUTOR TCP2RS+)
- [CVE-2024-8888](https://cve.now/CVE-2024-8888.md): Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT (CVSS 10.0, CIRCUTOR Q-SMT)
- [CVE-2024-5682](https://cve.now/CVE-2024-5682.md): User Enumeration in Yordam Information Technology's Yordam Library Automation System (CVSS 6.9, Yordam Information Technology Yordam Library Automation Sys…)
- [CVE-2024-6406](https://cve.now/CVE-2024-6406.md): Sensetive Data Exposure in Yordam Information Technology's Mobile Library Application (CVSS 8.5, Yordam Information Technology Mobile Library Application)
- [CVE-2024-43188](https://cve.now/CVE-2024-43188.md): IBM Business Automation Workflow improper input validation (CVSS 4.9, IBM Business Automation Workflow)
- [CVE-2024-8887](https://cve.now/CVE-2024-8887.md): Authentication bypass vulnerability on CIRCUTOR Q-SMT (CVSS 10.0, CIRCUTOR Q-SMT)
- [CVE-2024-46801](https://cve.now/CVE-2024-46801.md): libfs: fix get\_stashed\_dentry() (CVSS 7.8, Linux)
- [CVE-2024-46800](https://cve.now/CVE-2024-46800.md): sch/netem: fix use after free in netem\_dequeue (CVSS 7.8, Linux)
- [CVE-2024-46799](https://cve.now/CVE-2024-46799.md): net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP\_TX (CVSS 7.5, Linux)
- [CVE-2024-46798](https://cve.now/CVE-2024-46798.md): ASoC: dapm: Fix UAF for snd\_soc\_pcm\_runtime object (CVSS 7.8, Linux)
- [CVE-2024-46797](https://cve.now/CVE-2024-46797.md): powerpc/qspinlock: Fix deadlock in MCS queue (no CVSS, Linux)
- [CVE-2024-46796](https://cve.now/CVE-2024-46796.md): smb: client: fix double put of @cfile in smb2\_set\_path\_size() (CVSS 9.8, Linux)
- [CVE-2024-46795](https://cve.now/CVE-2024-46795.md): ksmbd: unset the binding mark of a reused connection (no CVSS, Linux)
- [CVE-2024-46794](https://cve.now/CVE-2024-46794.md): x86/tdx: Fix data leak in mmio\_read() (no CVSS, Linux)
- [CVE-2024-46793](https://cve.now/CVE-2024-46793.md): ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder (no CVSS, Linux)
- [CVE-2024-46792](https://cve.now/CVE-2024-46792.md): riscv: misaligned: Restrict user access to kernel memory (CVSS 7.8, Linux)
- [CVE-2024-46791](https://cve.now/CVE-2024-46791.md): can: mcp251x: fix deadlock if an interrupt occurs during mcp251x\_open (no CVSS, Linux)
- [CVE-2024-46790](https://cve.now/CVE-2024-46790.md): codetag: debug: mark codetags for poisoned page as empty (no CVSS, Linux)
- [CVE-2024-46789](https://cve.now/CVE-2024-46789.md): mm/slub: add check for s-\>flags in the alloc\_tagging\_slab\_free\_hook (no CVSS, Linux)
- [CVE-2024-46788](https://cve.now/CVE-2024-46788.md): tracing/osnoise: Use a cpumask to know what threads are kthreads (CVSS 7.8, Linux)
- [CVE-2024-46787](https://cve.now/CVE-2024-46787.md): userfaultfd: fix checks for huge PMDs (CVSS 7.8, Linux)
- [CVE-2024-46786](https://cve.now/CVE-2024-46786.md): fscache: delete fscache\_cookie\_lru\_timer when fscache exits to avoid UAF (no CVSS, Linux)
- [CVE-2024-46785](https://cve.now/CVE-2024-46785.md): eventfs: Use list\_del\_rcu() for SRCU protected list variable (no CVSS, Linux)
- [CVE-2024-46784](https://cve.now/CVE-2024-46784.md): net: mana: Fix error handling in mana\_create\_txq/rxq's NAPI cleanup (no CVSS, Linux)
- [CVE-2024-46783](https://cve.now/CVE-2024-46783.md): tcp\_bpf: fix return value of tcp\_bpf\_sendmsg() (no CVSS, Linux)
- [CVE-2024-46782](https://cve.now/CVE-2024-46782.md): ila: call nf\_unregister\_net\_hooks() sooner (no CVSS, Linux)
- [CVE-2024-46781](https://cve.now/CVE-2024-46781.md): nilfs2: fix missing cleanup on rollforward recovery error (CVSS 7.8, Linux)
- [CVE-2024-46780](https://cve.now/CVE-2024-46780.md): nilfs2: protect references to superblock parameters exposed in sysfs (CVSS 7.8, Linux)
- [CVE-2024-46779](https://cve.now/CVE-2024-46779.md): drm/imagination: Free pvr\_vm\_gpuva after unlink (no CVSS, Linux)
- [CVE-2024-46778](https://cve.now/CVE-2024-46778.md): drm/amd/display: Check UnboundedRequestEnabled's value (no CVSS, Linux)
- [CVE-2024-46777](https://cve.now/CVE-2024-46777.md): udf: Avoid excessive partition lengths (CVSS 7.8, Linux)
- [CVE-2024-46776](https://cve.now/CVE-2024-46776.md): drm/amd/display: Run DC\_LOG\_DC after checking link-\>link\_enc (no CVSS, Linux)
- [CVE-2024-46775](https://cve.now/CVE-2024-46775.md): drm/amd/display: Validate function returns (no CVSS, Linux)
- [CVE-2024-46774](https://cve.now/CVE-2024-46774.md): powerpc/rtas: Prevent Spectre v1 gadget construction in sys\_rtas() (no CVSS, Linux)
- [CVE-2024-46773](https://cve.now/CVE-2024-46773.md): drm/amd/display: Check denominator pbn\_div before used (no CVSS, Linux)
- [CVE-2024-46772](https://cve.now/CVE-2024-46772.md): drm/amd/display: Check denominator crb\_pipes before used (no CVSS, Linux)
- [CVE-2024-46771](https://cve.now/CVE-2024-46771.md): can: bcm: Remove proc entry when dev is unregistered. (CVSS 7.8, Linux)
- [CVE-2024-46770](https://cve.now/CVE-2024-46770.md): ice: Add netif\_device\_attach/detach into PF reset flow (no CVSS, Linux)
- [CVE-2024-46769](https://cve.now/CVE-2024-46769.md): spi: intel: Add check devm\_kasprintf() returned value (no CVSS, Linux)
- [CVE-2024-46768](https://cve.now/CVE-2024-46768.md): hwmon: (hp-wmi-sensors) Check if WMI event data exists (no CVSS, Linux)
- [CVE-2024-46767](https://cve.now/CVE-2024-46767.md): net: phy: Fix missing of\_node\_put() for leds (no CVSS, Linux)
- [CVE-2024-46766](https://cve.now/CVE-2024-46766.md): ice: move netif\_queue\_set\_napi to rtnl-protected sections (no CVSS, Linux)
- [CVE-2024-46765](https://cve.now/CVE-2024-46765.md): ice: protect XDP configuration with a mutex (CVSS 7.8, Linux)
- [CVE-2024-46764](https://cve.now/CVE-2024-46764.md): bpf: add check for invalid name in btf\_name\_valid\_section() (CVSS 7.3, Linux)
- [CVE-2024-46763](https://cve.now/CVE-2024-46763.md): fou: Fix null-ptr-deref in GRO. (CVSS 7.5, Linux)
- [CVE-2024-46762](https://cve.now/CVE-2024-46762.md): xen: privcmd: Fix possible access to a freed kirqfd instance (CVSS 7.8, Linux)
- [CVE-2024-46761](https://cve.now/CVE-2024-46761.md): pci/hotplug/pnv\_php: Fix hotplug driver crash on Powernv (no CVSS, Linux)
- [CVE-2024-46760](https://cve.now/CVE-2024-46760.md): wifi: rtw88: usb: schedule rx work after everything is set up (no CVSS, Linux)
- [CVE-2024-46759](https://cve.now/CVE-2024-46759.md): hwmon: (adc128d818) Fix underflows seen when writing limit attributes (no CVSS, Linux)
- [CVE-2024-46755](https://cve.now/CVE-2024-46755.md): wifi: mwifiex: Do not return unused priv in mwifiex\_get\_priv\_by\_id() (CVSS 8.8, Linux)
- [CVE-2024-46754](https://cve.now/CVE-2024-46754.md): bpf: Remove tst\_run from lwt\_seg6local\_prog\_ops. (CVSS 7.8, Linux)
- [CVE-2024-46753](https://cve.now/CVE-2024-46753.md): btrfs: handle errors from btrfs\_dec\_ref() properly (no CVSS, Linux)
- [CVE-2024-46752](https://cve.now/CVE-2024-46752.md): btrfs: replace BUG\_ON() with error handling at update\_ref\_for\_cow() (no CVSS, Linux)
- [CVE-2024-46751](https://cve.now/CVE-2024-46751.md): btrfs: don't BUG\_ON() when 0 reference count at btrfs\_lookup\_extent\_info() (CVSS 7.8, Linux)
- [CVE-2024-46750](https://cve.now/CVE-2024-46750.md): PCI: Add missing bridge lock to pci\_bus\_lock() (CVSS 7.8, Linux)
- [CVE-2024-46749](https://cve.now/CVE-2024-46749.md): Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart\_flush() (no CVSS, Linux)
- [CVE-2024-46748](https://cve.now/CVE-2024-46748.md): cachefiles: Set the max subreq size for cache writes to MAX\_RW\_COUNT (no CVSS, Linux)
- [CVE-2024-46747](https://cve.now/CVE-2024-46747.md): HID: cougar: fix slab-out-of-bounds Read in cougar\_report\_fixup (no CVSS, Linux)
- [CVE-2024-46746](https://cve.now/CVE-2024-46746.md): HID: amd\_sfh: free driver\_data after destroying hid device (CVSS 7.8, Linux)
- [CVE-2024-46745](https://cve.now/CVE-2024-46745.md): Input: uinput - reject requests with unreasonable number of slots (no CVSS, Linux)
- [CVE-2024-46744](https://cve.now/CVE-2024-46744.md): Squashfs: sanity check symbolic link size (no CVSS, Linux)
- [CVE-2024-46743](https://cve.now/CVE-2024-46743.md): of/irq: Prevent device address out-of-bounds read in interrupt map walk (CVSS 7.3, Linux)
- [CVE-2024-46742](https://cve.now/CVE-2024-46742.md): smb/server: fix potential null-ptr-deref of lease\_ctx\_info in smb2\_open() (no CVSS, Linux)
- [CVE-2024-46741](https://cve.now/CVE-2024-46741.md): misc: fastrpc: Fix double free of 'buf' in error path (CVSS 7.8, Linux)
- [CVE-2024-46740](https://cve.now/CVE-2024-46740.md): binder: fix UAF caused by offsets overwrite (CVSS 7.8, Linux)
- [CVE-2024-46739](https://cve.now/CVE-2024-46739.md): uio\_hv\_generic: Fix kernel NULL pointer dereference in hv\_uio\_rescind (no CVSS, Linux)
- [CVE-2024-46738](https://cve.now/CVE-2024-46738.md): VMCI: Fix use-after-free when removing resource in vmci\_resource\_remove() (CVSS 7.8, Linux)
- [CVE-2024-46737](https://cve.now/CVE-2024-46737.md): nvmet-tcp: fix kernel crash if commands allocation fails (CVSS 7.5, Linux)
- [CVE-2024-46736](https://cve.now/CVE-2024-46736.md): smb: client: fix double put of @cfile in smb2\_rename\_path() (CVSS 9.8, Linux)
- [CVE-2024-46735](https://cve.now/CVE-2024-46735.md): ublk\_drv: fix NULL pointer dereference in ublk\_ctrl\_start\_recovery() (no CVSS, Linux)
- [CVE-2024-46734](https://cve.now/CVE-2024-46734.md): btrfs: fix race between direct IO write and fsync when using same fd (CVSS 7.8, Linux)
- [CVE-2024-8969](https://cve.now/CVE-2024-8969.md): The SYSCOM Group OMFLOW - Exposure of Sensitive Data (CVSS 6.5, The SYSCOM Group OMFLOW)
- [CVE-2024-46733](https://cve.now/CVE-2024-46733.md): btrfs: fix qgroup reserve leaks in cow\_file\_range (no CVSS, Linux)
- [CVE-2024-46732](https://cve.now/CVE-2024-46732.md): drm/amd/display: Assign linear\_pitch\_alignment even for VM (no CVSS, Linux)
- [CVE-2024-46731](https://cve.now/CVE-2024-46731.md): drm/amd/pm: fix the Out-of-bounds read warning (no CVSS, Linux)
- [CVE-2024-46730](https://cve.now/CVE-2024-46730.md): drm/amd/display: Ensure array index tg\_inst won't be -1 (CVSS 7.8, Linux)
- [CVE-2024-46729](https://cve.now/CVE-2024-46729.md): drm/amd/display: Fix incorrect size calculation for loop (no CVSS, Linux)
- [CVE-2024-46728](https://cve.now/CVE-2024-46728.md): drm/amd/display: Check index for aux\_rd\_interval before using (no CVSS, Linux)
- [CVE-2024-46727](https://cve.now/CVE-2024-46727.md): drm/amd/display: Add otg\_master NULL check within resource\_log\_pipe\_topology\_update (no CVSS, Linux)
- [CVE-2024-46726](https://cve.now/CVE-2024-46726.md): drm/amd/display: Ensure index calculation will not overflow (no CVSS, Linux)
- [CVE-2024-46725](https://cve.now/CVE-2024-46725.md): drm/amdgpu: Fix out-of-bounds write warning (CVSS 7.8, Linux)
- [CVE-2024-46724](https://cve.now/CVE-2024-46724.md): drm/amdgpu: Fix out-of-bounds read of df\_v1\_7\_channel\_number (no CVSS, Linux)
- [CVE-2024-46723](https://cve.now/CVE-2024-46723.md): drm/amdgpu: fix ucode out-of-bounds read warning (no CVSS, Linux)
- [CVE-2024-46722](https://cve.now/CVE-2024-46722.md): drm/amdgpu: fix mc\_data out-of-bounds read warning (no CVSS, Linux)
- [CVE-2024-46721](https://cve.now/CVE-2024-46721.md): apparmor: fix possible NULL pointer dereference (no CVSS, Linux)
- [CVE-2024-46720](https://cve.now/CVE-2024-46720.md): drm/amdgpu: fix dereference after null check (no CVSS, Linux)
- [CVE-2024-46719](https://cve.now/CVE-2024-46719.md): usb: typec: ucsi: Fix null pointer dereference in trace (no CVSS, Linux)
- [CVE-2024-46718](https://cve.now/CVE-2024-46718.md): drm/xe: Don't overmap identity VRAM mapping (no CVSS, Linux)
- [CVE-2024-46717](https://cve.now/CVE-2024-46717.md): net/mlx5e: SHAMPO, Fix incorrect page release (CVSS 9.8, Linux)
- [CVE-2024-46716](https://cve.now/CVE-2024-46716.md): dmaengine: altera-msgdma: properly free descriptor in msgdma\_free\_descriptor (CVSS 7.8, Linux)
- [CVE-2024-46715](https://cve.now/CVE-2024-46715.md): driver: iio: add missing checks on iio\_info's callback access (no CVSS, Linux)
- [CVE-2024-46714](https://cve.now/CVE-2024-46714.md): drm/amd/display: Skip wbscl\_set\_scaler\_filter if filter is null (no CVSS, Linux)
- [CVE-2024-43778](https://cve.now/CVE-2024-43778.md): OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. (CVSS 8.8, TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7)
- [CVE-2024-47001](https://cve.now/CVE-2024-47001.md): Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. (CVSS 8.8, TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7)
- [CVE-2024-41929](https://cve.now/CVE-2024-41929.md): Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. (CVSS 8.8, TAKENAKA ENGINEERING CO. HDVR-400 · TAKENAKA ENGINEERING… +7)
- [CVE-2024-6641](https://cve.now/CVE-2024-6641.md): WP Hardening – Fix Your WordPress Security \<= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration (CVSS 5.3, astrasecuritysuite WP Hardening)
- [CVE-2024-45366](https://cve.now/CVE-2024-45366.md): Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. (CVSS 6.1, Welcart e-Commerce)
- [CVE-2024-42404](https://cve.now/CVE-2024-42404.md): SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the inf (CVSS 8.8, Welcart e-Commerce)
- [CVE-2024-45679](https://cve.now/CVE-2024-45679.md): Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a (CVSS 8.4, Open Asset Import Library Assimp)
- [CVE-2022-39068](https://cve.now/CVE-2022-39068.md): Buffer Overflow Vulnerability in ZTE MF296R (CVSS 4.5, ZTE MF296R)
- [CVE-2023-28451](https://cve.now/CVE-2023-28451.md): An issue was discovered in Technitium 11.0.2. (CVSS 7.5)
- [CVE-2023-28452](https://cve.now/CVE-2023-28452.md): An issue was discovered in CoreDNS through 1.10.1. (CVSS 7.5, github.com/coredns/coredns)
- [CVE-2023-28455](https://cve.now/CVE-2023-28455.md): An issue was discovered in Technitium through 11.0.2. (CVSS 7.5)
- [CVE-2023-28456](https://cve.now/CVE-2023-28456.md): An issue was discovered in Technitium through 11.0.2. (CVSS 7.5)
- [CVE-2023-28457](https://cve.now/CVE-2023-28457.md): An issue was discovered in Technitium through 11.0.3. (CVSS 7.5)
- [CVE-2023-30464](https://cve.now/CVE-2023-30464.md): CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. (CVSS 7.5, github.com/coredns/coredns)
- [CVE-2023-41610](https://cve.now/CVE-2023-41610.md): Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext. (CVSS 8.8)
- [CVE-2023-41611](https://cve.now/CVE-2023-41611.md): Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data. (CVSS 6.5)
- [CVE-2023-41612](https://cve.now/CVE-2023-41612.md): Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled\_telnet.dat on the Micro SD card. (CVSS 8.8)
- [CVE-2023-47105](https://cve.now/CVE-2023-47105.md): exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without aut (CVSS 8.6, github.com/chaosblade-io/chaosblade)
- [CVE-2023-49203](https://cve.now/CVE-2023-49203.md): Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes acc (CVSS 7.5)
- [CVE-2024-34057](https://cve.now/CVE-2024-34057.md): Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. (CVSS 8.2)
- [CVE-2024-34399](https://cve.now/CVE-2024-34399.md): \*\*UNSUPPORTED WHEN ASSIGNED\*\* An issue was discovered in BMC Remedy Mid Tier 7.6.04. (CVSS 9.8)
- [CVE-2024-35515](https://cve.now/CVE-2024-35515.md): Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. (CVSS 9.8, sqlitedict)
- [CVE-2024-39081](https://cve.now/CVE-2024-39081.md): An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications. (CVSS 4.2)
- [CVE-2024-39339](https://cve.now/CVE-2024-39339.md): A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. (CVSS 7.5)
- [CVE-2024-40568](https://cve.now/CVE-2024-40568.md): Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute a (CVSS 9.8)
- [CVE-2024-43024](https://cve.now/CVE-2024-43024.md): Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary w (CVSS 6.1)
- [CVE-2024-43025](https://cve.now/CVE-2024-43025.md): An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a (CVSS 6.1)
- [CVE-2024-44542](https://cve.now/CVE-2024-44542.md): SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter. (CVSS 9.8)
- [CVE-2024-44589](https://cve.now/CVE-2024-44589.md): Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of (CVSS 8.8)
- [CVE-2024-45523](https://cve.now/CVE-2024-45523.md): An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.359 (CVSS 9.1)
- [CVE-2024-46086](https://cve.now/CVE-2024-46086.md): FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file\_manager/delete/123 (CVSS 8.8)
- [CVE-2024-46372](https://cve.now/CVE-2024-46372.md): DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. (CVSS 6.1)
- [CVE-2024-46373](https://cve.now/CVE-2024-46373.md): Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. (CVSS 8.8)
- [CVE-2024-46374](https://cve.now/CVE-2024-46374.md): Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete\_category() function of the file rental/admin\_cl (CVSS 9.8)
- [CVE-2024-46375](https://cve.now/CVE-2024-46375.md): Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin\_cl (CVSS 9.8)
- [CVE-2024-46376](https://cve.now/CVE-2024-46376.md): Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update\_account() function of the file rental/ (CVSS 9.8)
- [CVE-2024-46377](https://cve.now/CVE-2024-46377.md): Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save\_settings() function of the file rental/a (CVSS 9.8)
- [CVE-2024-46550](https://cve.now/CVE-2024-46550.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. (CVSS 7.5)
- [CVE-2024-46551](https://cve.now/CVE-2024-46551.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA\_Pwd parameter at inet15.cgi. (CVSS 7.5)
- [CVE-2024-46552](https://cve.now/CVE-2024-46552.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. (CVSS 7.5)
- [CVE-2024-46553](https://cve.now/CVE-2024-46553.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46554](https://cve.now/CVE-2024-46554.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46555](https://cve.now/CVE-2024-46555.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46556](https://cve.now/CVE-2024-46556.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46557](https://cve.now/CVE-2024-46557.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46558](https://cve.now/CVE-2024-46558.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46559](https://cve.now/CVE-2024-46559.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA\_UsrNme parameter at inet15.cgi. (CVSS 7.5)
- [CVE-2024-46560](https://cve.now/CVE-2024-46560.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub\_key parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46561](https://cve.now/CVE-2024-46561.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46564](https://cve.now/CVE-2024-46564.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. (CVSS 7.5)
- [CVE-2024-46565](https://cve.now/CVE-2024-46565.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. (CVSS 7.5)
- [CVE-2024-46566](https://cve.now/CVE-2024-46566.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. (CVSS 7.5)
- [CVE-2024-46567](https://cve.now/CVE-2024-46567.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46568](https://cve.now/CVE-2024-46568.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. (CVSS 7.5)
- [CVE-2024-46571](https://cve.now/CVE-2024-46571.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. (CVSS 7.5)
- [CVE-2024-46580](https://cve.now/CVE-2024-46580.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46581](https://cve.now/CVE-2024-46581.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46582](https://cve.now/CVE-2024-46582.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46583](https://cve.now/CVE-2024-46583.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. (CVSS 7.5)
- [CVE-2024-46584](https://cve.now/CVE-2024-46584.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. (CVSS 7.5)
- [CVE-2024-46585](https://cve.now/CVE-2024-46585.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. (CVSS 7.5)
- [CVE-2024-46586](https://cve.now/CVE-2024-46586.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46588](https://cve.now/CVE-2024-46588.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. (CVSS 7.5)
- [CVE-2024-46589](https://cve.now/CVE-2024-46589.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. (CVSS 7.5)
- [CVE-2024-46590](https://cve.now/CVE-2024-46590.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46591](https://cve.now/CVE-2024-46591.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46592](https://cve.now/CVE-2024-46592.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt\_5g%d parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46593](https://cve.now/CVE-2024-46593.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. (CVSS 7.5)
- [CVE-2024-46594](https://cve.now/CVE-2024-46594.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46595](https://cve.now/CVE-2024-46595.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. (CVSS 7.5)
- [CVE-2024-46596](https://cve.now/CVE-2024-46596.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. (CVSS 7.5)
- [CVE-2024-46597](https://cve.now/CVE-2024-46597.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. (CVSS 7.5)
- [CVE-2024-46598](https://cve.now/CVE-2024-46598.md): Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. (CVSS 7.5)
- [CVE-2024-46959](https://cve.now/CVE-2024-46959.md): runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.