CVEs published September 21, 2024
9 CVEs were published on September 21, 2024: 1 critical, 2 high.
- Published
- 9
- Critical
- 1
- High
- 2
- Medium
- 5
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Moxa MXview One Series
- 2
- Apache Software Foundation Apache HertzBeat
- 1
- dvankooten MC4WP: Mailchimp for WordPress
- 1
- github.com/vesoft-inc/nebula
- 1
- Moxa MXview One Series · Moxa MXview One Central Manager Se…
- 1
- Stirling-Tools Stirling-PDF
- 1
- y_project RuoYi
- 1
Critical 1
High 2
Medium, low and unrated 6
- CVE-2024-9075Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scriptingStirling-Tools Stirling-PDF
- CVE-2024-8680MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scriptingdvankooten MC4WP: Mailchimp for WordPress
- CVE-2024-9048y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scriptingy_project RuoYi
- CVE-2024-6787MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race ConditionMoxa MXview One Series
- CVE-2024-6786MXview One Series vulnerable to Path TraversalMoxa MXview One Series
- CVE-2024-6785MXview One and MXview One Central Manager Series store cleartext credentials in a local fileMoxa MXview One Series · Moxa MXview One Central Manager Se…