CVEs published September 26, 2024
119 CVEs were published on September 26, 2024: 4 critical, 37 high.
- Published
- 119
- Critical
- 4
- High
- 37
- Medium
- 71
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 35
Most affected products
- goTenna Pro
- 10
- goTenna Pro ATAK Plugin
- 9
- Synology Drive Client
- 6
- Mattermost
- 4
- Synology Active Backup for Business Agent
- 4
- agnaistic agnai · agnai
- 3
- GitLab
- 3
- saadiqbal Advanced File Manager – Ultimate File Manager for…
- 3
- artbees Jupiter X Core
- 2
- Clibo Manager
- 2
Critical 4
- CVE-2024-9166OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite ReceiverAtelmo Atemio AM 520 HD Full HD Satellite Receiver
- CVE-2024-0132NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration NVIDIA Container Toolkit · NVIDIA GPU Operator +1
- CVE-2024-7772Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Uploadartbees Jupiter X Core
- CVE-2024-46627Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.
High 37
- CVE-2024-47175libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD bufferOpenPrinting libppd
- CVE-2024-47076libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP serverOpenPrinting libcupsfilters
- CVE-2024-6769Medium to High Integrity Privilege Escalation in Microsoft WindowsMicrosoft Windows
- CVE-2024-7594Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By DefaultHashiCorp Vault · github.com/hashicorp/vault +1
- CVE-2024-47180Shields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badgesbadges shields
- CVE-2024-47179RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover.DIYgod RSSHub
- CVE-2024-47130Missing Authentication for Critical Function in goTenna ProgoTenna Pro
- CVE-2024-47126Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in goTenna ProgoTenna Pro
- CVE-2024-47125Improper Restriction of Communication Channel to Intended Endpoints in goTenna ProgoTenna Pro
- CVE-2024-47169Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversalagnaistic agnai · agnai
- CVE-2024-39577Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements useDell SmartFabric OS10 Software
- CVE-2024-37125Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consumption vulnerability.Dell SmartFabric OS10 Software
- CVE-2024-43191IBM ManageIQ command executionIBM Cloud Pak for Multicloud Management
- CVE-2024-7108Incorrect Authorization in National Keep's CyberMathNational Keep Cyber Security Services CyberMath
- CVE-2024-8126Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
- CVE-2024-8704Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localesaadiqbal Advanced File Manager – Ultimate File Manager for…
- CVE-2024-9198Stored Cross-Site Scripting vulnerability in Clibo ManagerClibo Manager
- CVE-2022-4541WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Headernitinmaurya12 WordPress Visitors
- CVE-2024-47197Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentialsApache Software Foundation Maven Archetype Plugin · org.apa…
- CVE-2024-7781Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeoverartbees Jupiter X Core
- CVE-2024-47045Privilege chaining issue exists in the installer of e-Tax software(common program).National Tax Agency The installer of e-Tax software
- CVE-2022-49038Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 Synology Drive Client
- CVE-2023-52946Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client beforSynology Drive Client
- CVE-2024-8404Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folderPaperCut NG, PaperCut MF
- CVE-2024-40506Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitalit
- CVE-2024-40507Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.
- CVE-2024-40508Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference
- CVE-2024-41605In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan
- CVE-2024-44860An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a
- CVE-2024-45979A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with
- CVE-2024-45980A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a craft
- CVE-2024-45981A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with
- CVE-2024-45982A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a c
- CVE-2024-46328VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.
- CVE-2024-46329VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
- CVE-2024-46330VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
- CVE-2024-46628Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName paramet
Medium, low and unrated 78
- CVE-2024-4099Improper Encoding or Escaping of Output in GitLabGitLab
- CVE-2024-8974Incorrect Provision of Specified Functionality in GitLabGitLab
- CVE-2024-47176cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceOpenPrinting cups-browsed
- CVE-2024-8118Grafana alerting wrong permission on datasource rule write endpointGrafana
- CVE-2024-43814goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent DatagoTenna Pro ATAK Plugin
- CVE-2024-41715goTenna Pro ATAK Plugin Observable Response DiscrepancygoTenna Pro ATAK Plugin
- CVE-2024-41931goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent DatagoTenna Pro ATAK Plugin
- CVE-2024-41722goTenna Pro ATAK Plugin Weak AuthenticationgoTenna Pro ATAK Plugin
- CVE-2024-45723goTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number GeneratorgoTenna Pro ATAK Plugin
- CVE-2024-45838goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive InformationgoTenna Pro ATAK Plugin
- CVE-2024-47129Observable Response Discrepancy in goTenna ProgoTenna Pro
- CVE-2024-47128Insertion of Sensitive Information Into Sent Data in goTenna ProgoTenna Pro
- CVE-2024-43108goTenna Pro ATAK Plugin Missing Support for Integrity CheckgoTenna Pro ATAK Plugin
- CVE-2024-47174Credential leak when credentials are used with `<nix/fetchurl.nix>`NixOS nix
- CVE-2024-47127Weak Authentication in goTenna ProgoTenna Pro
- CVE-2024-43694goTenna Pro ATAK Plugin Insecure Storage of Sensitive InformationgoTenna Pro ATAK Plugin
- CVE-2024-47171Agnai vulnerable to Relative Path Traversal in Image Uploadagnaistic agnai · agnai
- CVE-2024-47124Cleartext Transmission of Sensitive Information in goTenna ProgoTenna Pro
- CVE-2024-47123Missing Support for Integrity Check in goTenna ProgoTenna Pro
- CVE-2024-47122Insecure Storage of Sensitive Information in goTenna ProgoTenna Pro
- CVE-2024-47121Weak Passwords Requirements in goTenna ProgoTenna Pro
- CVE-2024-47170Agnai File Disclosure Vulnerability: JSON via Path Traversalagnaistic agnai · agnai
- CVE-2024-47075DOM Clobbering gadgets found in layui that lead to Cross-site Scriptinglayui
- CVE-2024-45374goTenna Pro ATAK Plugin Weak Password RequirementsgoTenna Pro ATAK Plugin
- CVE-2024-45042Ory Kratos's `highest_available` setting does not properly respect code + mfa credentialsory kratos · github.com/ory/kratos
- CVE-2024-9203Enpass Password Manager sensitive information in memoryEnpass Password Manager
- CVE-2024-39319aimeos/ai-controller-frontend has IDOR vulnerability in account profile pageaimeos ai-controller-frontend · aimeos/ai-controller-fronte…
- CVE-2024-8771Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposureicegram Email Subscribers & Newsletters – Email Marketing,…
- CVE-2024-7259Ovirt-engine: potential exposure of cleartext provider passwords via web uiovirt-engine · Red Hat Virtualization
- CVE-2024-9155Insufficient Authorization On Unlinked Channel FilesMattermost
- CVE-2024-30134HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityHCL Software HCL Traveler for Microsoft Outlook
- CVE-2024-9177Themedy Toolbox <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodesmahodder Themedy Toolbox
- CVE-2024-31899IBM Cognos Command Center information disclosureIBM Cognos Command Center
- CVE-2023-46175IBM Cloud Pak for Multicloud Management information disclosureIBM Cloud Pak for Multicloud Management
- CVE-2024-7107Directory Traversal in National Keep's CyberMathNational Keep Cyber Security Services CyberMath
- CVE-2024-8633Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site ScriptingForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2024-8725Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
- CVE-2024-9199Rate limit vulnerability in Clibo ManagerClibo Manager
- CVE-2024-9115Common Tools for Site <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadthechetanvaghela Common Tools for Site
- CVE-2024-9117Mapplic Lite <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadsekler Mapplic Lite
- CVE-2024-9173GF Custom Style <= 2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadalefypf GF Custom Style
- CVE-2024-9127Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parametersolaplugins Super Testimonials
- CVE-2024-9125king_IE <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadmohsensd1373 king_IE
- CVE-2024-47337WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerabilityPhillip Dane Joy Of Text Lite
- CVE-2024-47044Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient accessNIPPON TELEGRAPH AND TELEPHONE EAST Hikari Denwa router… +3
- CVE-2024-9025Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_titlecodesupplyco Sight – Professional Image Gallery and Portfol…
- CVE-2024-8872Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scriptingbizswoop Store Hours for WooCommerce
- CVE-2024-47003DoS via non-string message using permalink embedMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-42406Unauthorized access on archived channelsMattermost
- CVE-2024-45843Weak SSRF FilteringMattermost
- CVE-2024-47145Unauthorized access on archived channels via file linksMattermost
- CVE-2024-8861ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingmetagauss ProfileGrid – User Profiles, Groups and Communiti…
- CVE-2024-4278Incorrect Synchronization in GitLabGitLab
- CVE-2024-6517Contact Form 7 Math Captcha <= 2.0.1 - Reflected XSSContact Form 7 Math Captcha
- CVE-2024-0133NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container NVIDIA Container Toolkit · NVIDIA GPU Operator +1
- CVE-2024-45836Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras.PLANEX COMMUNICATIONS CS-QR10 · PLANEX COMMUNICATIONS CS… +3
- CVE-2024-45372MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability.PLANEX COMMUNICATIONS MZK-DP300N
- CVE-2023-52949Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent befoSynology Active Backup for Business Agent
- CVE-2023-52948Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 Synology Active Backup for Business Agent
- CVE-2023-52947Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3Synology Active Backup for Business Agent
- CVE-2023-52950Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows Synology Active Backup for Business Agent
- CVE-2022-49041Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology DriSynology Drive Client
- CVE-2022-49040Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology DrivSynology Drive Client
- CVE-2022-49039Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users witSynology Drive Client
- CVE-2022-49037Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allowSynology Drive Client
- CVE-2024-47330Broken Access Control vulnerability on multiple WordPress plugins by SupsysticSlider by Supsystic · Social Share Buttons by Supsystic
- CVE-2024-8803Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scriptingmadfishdigital Bulk NoIndex & NoFollow Toolkit
- CVE-2024-8552Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enablewpchill Download Monitor
- CVE-2024-8723012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingouhinit 012 Ps Multi Languages
- CVE-2024-8405Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attackPaperCut NG, PaperCut MF
- CVE-2024-45983A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5.
- CVE-2024-45984A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject ma
- CVE-2024-45985A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inj
- CVE-2024-45986A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is reg
- CVE-2024-45987Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php.
- CVE-2024-45989Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor.
- CVE-2024-46327An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.
- CVE-2024-46632Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.pyassimp