# CVEs published 2024-09-19

60 CVEs were published on September 19, 2024: 12 critical, 16 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-45806](https://cve.now/CVE-2024-45806.md): Potential manipulate \`x-envoy\` headers from external sources in envoy (CVSS 6.5, envoyproxy envoy)
- [CVE-2024-45807](https://cve.now/CVE-2024-45807.md): oghttp2 crash on OnBeginHeadersForStream in envoy (CVSS 7.5, envoyproxy envoy)
- [CVE-2024-45808](https://cve.now/CVE-2024-45808.md): Malicious log injection via access logs in envoy (CVSS 6.5, envoyproxy envoy)
- [CVE-2024-45809](https://cve.now/CVE-2024-45809.md): Jwt filter crash in the clear route cache with remote JWKs in envoy (CVSS 5.3, envoyproxy envoy)
- [CVE-2024-45810](https://cve.now/CVE-2024-45810.md): Envoy crashes for LocalReply in http async client (CVSS 6.5, envoyproxy envoy)
- [CVE-2024-9009](https://cve.now/CVE-2024-9009.md): code-projects Online Quiz Site showtest.php sql injection (CVSS 5.3, code-projects Online Quiz Site)
- [CVE-2024-46999](https://cve.now/CVE-2024-46999.md): User Grant Deactivation not Working in Zitadel (CVSS 7.3, zitadel · github.com/zitadel/zitadel +1)
- [CVE-2024-47000](https://cve.now/CVE-2024-47000.md): Service Users Deactivation not Working in Zitadel (CVSS 8.1, zitadel · github.com/zitadel/zitadel +1)
- [CVE-2024-47060](https://cve.now/CVE-2024-47060.md): Unauthorized Access After Organization or Project Deactivation in Zitadel (CVSS 4.3, zitadel · github.com/zitadel/zitadel +1)
- [CVE-2024-9008](https://cve.now/CVE-2024-9008.md): SourceCodester Best Online News Portal Comment Section news-details.php sql injection (CVSS 5.3, SourceCodester Best Online News Portal)
- [CVE-2023-27584](https://cve.now/CVE-2023-27584.md): Dragonfly2 vulnerable to hard coded cyptographic key (CVSS 9.8, dragonflyoss Dragonfly2 · d7y.io/dragonfly/v2)
- [CVE-2024-45410](https://cve.now/CVE-2024-45410.md): HTTP client can remove the X-Forwarded headers in Traefik (CVSS 9.8, traefik · github.com/traefik/traefik +2)
- [CVE-2024-46983](https://cve.now/CVE-2024-46983.md): Remote Command Execution(RCE) Vulnerbility in sofa-hessian (CVSS 9.8, sofastack sofa-hessian · com.alipay.sofa:hessian)
- [CVE-2024-45614](https://cve.now/CVE-2024-45614.md): Header normalization allows for client to clobber proxy set headers in Puma (CVSS 5.4, puma)
- [CVE-2024-46984](https://cve.now/CVE-2024-46984.md): XML External Entity Reference (XXE) vulnerability can lead to a Server Side Request Forgery attack in gematik app-referencevalidator (CVSS 8.6, gematik app-referencevalidator · de.gematik.refv.commons:co…)
- [CVE-2024-9007](https://cve.now/CVE-2024-9007.md): jeanmarc77 123solar detailed.php cross site scripting (CVSS 5.3, jeanmarc77 123solar)
- [CVE-2024-9006](https://cve.now/CVE-2024-9006.md): jeanmarc77 123solar config\_invt1.php code injection (CVSS 5.3, jeanmarc77 123solar)
- [CVE-2024-9004](https://cve.now/CVE-2024-9004.md): D-Link DAR-7000 Backup\_Server\_commit.php os command injection (CVSS 5.3, D-Link DAR-7000)
- [CVE-2024-9003](https://cve.now/CVE-2024-9003.md): Jinan Chicheng Company JFlow Attachment EntityMutliFile\_Load.do AttachmentUploadController access control (CVSS 5.3, Jinan Chicheng Company JFlow)
- [CVE-2024-43489](https://cve.now/CVE-2024-43489.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2024-43496](https://cve.now/CVE-2024-43496.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2024-38221](https://cve.now/CVE-2024-38221.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2024-9001](https://cve.now/CVE-2024-9001.md): TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection (CVSS 5.3, TOTOLINK T10)
- [CVE-2024-47162](https://cve.now/CVE-2024-47162.md): In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page (CVSS 4.1, JetBrains YouTrack)
- [CVE-2024-47160](https://cve.now/CVE-2024-47160.md): In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible (CVSS 4.3, JetBrains YouTrack)
- [CVE-2024-47159](https://cve.now/CVE-2024-47159.md): In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project (CVSS 4.3, JetBrains YouTrack)
- [CVE-2024-8963](https://cve.now/CVE-2024-8963.md): Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. (CVSS 9.4, KEV, Ivanti CSA)
- [CVE-2024-38016](https://cve.now/CVE-2024-38016.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2024-8653](https://cve.now/CVE-2024-8653.md): Netcat CMS: multiple reflected cross-site scripting vulnerabilities in netshop module (CVSS 5.9, NetCat CMS)
- [CVE-2024-8652](https://cve.now/CVE-2024-8652.md): Netcat CMS: reflected cross-site scripting in openstat module (CVSS 5.9, NetCat CMS)
- [CVE-2024-8651](https://cve.now/CVE-2024-8651.md): Netcat CMS: user enumeration (CVSS 6.9, NetCat CMS)
- [CVE-2024-45862](https://cve.now/CVE-2024-45862.md): Cleartext Storage of Sensitive Information in Kastle Systems Access Control System (CVSS 8.7, Kastle Systems Access Control System)
- [CVE-2024-45861](https://cve.now/CVE-2024-45861.md): Use of Hard-coded Credentials in Kastle Systems Access Control System (CVSS 9.2, Kastle Systems Access Control System)
- [CVE-2024-8375](https://cve.now/CVE-2024-8375.md): Object deserialization in Reverb leading to RCE (CVSS 5.7, Google Deepmind Reverb · dm-reverb-nightly +1)
- [CVE-2024-8883](https://cve.now/CVE-2024-8883.md): Keycloak: vulnerable redirect uri validation results in open redirec (CVSS 6.1, keycloak-services · Red Hat Build of Keycloak +4)
- [CVE-2024-8698](https://cve.now/CVE-2024-8698.md): Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak (CVSS 7.7, keycloak · Red Hat Build of Keycloak +4)
- [CVE-2024-7737](https://cve.now/CVE-2024-7737.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7, Dassault Systèmes 3DSwymer)
- [CVE-2024-7736](https://cve.now/CVE-2024-7736.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7, Dassault Systèmes ENOVIA Collaborative Industry Innovator)
- [CVE-2024-7785](https://cve.now/CVE-2024-7785.md): Reflected XSS in Ece Software's Electronic Ticket System (CVSS 9.3, Ece Software Electronic Ticket System)
- [CVE-2024-8986](https://cve.now/CVE-2024-8986.md): Information Leakage in grafana-plugin-sdk-go (CVSS 9.1, grafana-plugin-sdk-go Grafana Plugin SDK · github.com/grafa…)
- [CVE-2024-8354](https://cve.now/CVE-2024-8354.md): Qemu-kvm: usb: assertion failure in usb\_ep\_get() (CVSS 5.5, qemu · Red Hat Enterprise Linux)
- [CVE-2024-45770](https://cve.now/CVE-2024-45770.md): Pcp: pmpost symlink attack allows escalating pcp to root user (CVSS 4.4, pcp · Red Hat Enterprise Linux)
- [CVE-2024-45769](https://cve.now/CVE-2024-45769.md): Pcp: pmcd heap corruption through metric pmstore operations (CVSS 5.5, pcp · Red Hat Enterprise Linux)
- [CVE-2024-47089](https://cve.now/CVE-2024-47089.md): Unauthorized Transaction Manipulation Vulnerability (CVSS 8.7, Apex Softcell LD Geo)
- [CVE-2024-47088](https://cve.now/CVE-2024-47088.md): User Enumeration vulnerability (CVSS 9.3, Apex Softcell LD Geo)
- [CVE-2024-47087](https://cve.now/CVE-2024-47087.md): Information Disclosure Vulnerability (CVSS 8.7, Apex Softcell LD Geo)
- [CVE-2024-47086](https://cve.now/CVE-2024-47086.md): OTP Bypass Vulnerability (CVSS 8.7, Apex Softcell LD DP Back Office)
- [CVE-2024-47085](https://cve.now/CVE-2024-47085.md): Parameter Manipulation Vulnerability (CVSS 8.7, Apex Softcell LD DP Back Office)
- [CVE-2024-8364](https://cve.now/CVE-2024-8364.md): WP Custom Fields Search \<= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode (CVSS 6.4, dondon-benjamincouk WP Custom Fields Search)
- [CVE-2022-4533](https://cve.now/CVE-2022-4533.md): Limit Login Attempts Plus \<= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 5.3, devfelixmoira Limit Login Attempts Plus – WordPress Limit L…)
- [CVE-2024-8850](https://cve.now/CVE-2024-8850.md): MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting (CVSS 6.1, dvankooten MC4WP: Mailchimp for WordPress)
- [CVE-2024-7254](https://cve.now/CVE-2024-7254.md): Stack overflow in Protocol Buffers Java Lite (CVSS 8.7, Google Protocol Buffers · Google protobuf-java +9)
- [CVE-2024-25673](https://cve.now/CVE-2024-25673.md): Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection. (CVSS 6.1)
- [CVE-2024-31570](https://cve.now/CVE-2024-31570.md): libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. (CVSS 9.8)
- [CVE-2024-33109](https://cve.now/CVE-2024-33109.md): Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files (CVSS 9.9)
- [CVE-2024-40125](https://cve.now/CVE-2024-40125.md): An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execu (CVSS 9.8)
- [CVE-2024-45752](https://cve.now/CVE-2024-45752.md): logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus se (CVSS 8.5)
- [CVE-2024-46382](https://cve.now/CVE-2024-46382.md): A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn (CVSS 6.5)
- [CVE-2024-46394](https://cve.now/CVE-2024-46394.md): FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add (CVSS 8.0)
- [CVE-2024-46946](https://cve.now/CVE-2024-46946.md): langchain\_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sy (CVSS 9.8, langchain-experimental)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.