CVEs published September 27, 2024
162 CVEs were published on September 27, 2024: 11 critical, 60 high.
- Published
- 162
- Critical
- 11
- High
- 60
- Medium
- 50
- Low
- 1
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 41
Most affected products
- Linux
- 66
- Huawei HarmonyOS · Huawei EMUI
- 6
- Oceanic Software ValeApp
- 5
- Advantech ADAM-5630
- 4
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 3
- Advantech ADAM
- 2
- AI ChatBot with ChatGPT and Content Generator by AYS
- 2
- bg5sbk MiniCMS
- 2
- Facebook Thrift
- 2
- goauthentik authentik
- 2
Critical 11
- CVE-2024-22170Unchecked buffer in Dynamic DNS clientWestern Digital My Cloud
- CVE-2024-8310OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical FunctionOPW Fuel Managements Systems SiteSentinel
- CVE-2024-8630Alisonic Sibylla SQL InjectionAlisonic Sibylla
- CVE-2024-6981OMNTEC Proteus Tank Monitoring Missing Authentication for Critical FunctionOMNTEC Proteus Tank Monitoring
- CVE-2024-47070authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP headergoauthentik authentik
- CVE-2024-3373SQLi in RSM Design's Website TemplateRSM Design Website Template
- CVE-2024-46865fou: fix initialization of grcLinux
- CVE-2024-8643Session Hijacking in Oceanic Software's ValeAppOceanic Software ValeApp
- CVE-2024-8644Cleartext Storage of Sensitive Information in Oceanic Software's ValeAppOceanic Software ValeApp
- CVE-2024-46256A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certi
- CVE-2024-46367A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by
High 60
- CVE-2024-6436Rockwell Automation Input Validation Vulnerability exists in the SequenceManager™ ServerRockwell Automation SequenceManager™
- CVE-2024-9301A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250aNetflix E2Nest
- CVE-2024-28948Advantech ADAM-5630 Cross-Site Request ForgeryAdvantech ADAM-5630
- CVE-2024-39275Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive InformationAdvantech ADAM-5630
- CVE-2024-38308Advantech ADAM-5550 Cross-site ScriptingAdvantech ADAM
- CVE-2024-9284TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflowTP-LINK TL-WR841ND
- CVE-2024-6983Remote Code Execution in mudler/localaimudler/localai
- CVE-2024-7149Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusionarraytics Eventin – Event Calendar, Event Registration, Tic…
- CVE-2024-45773A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code executionFacebook Thrift
- CVE-2024-46866drm/xe/client: add missing bo locking in show_meminfo()Linux
- CVE-2024-46863ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty itemLinux
- CVE-2024-46862ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty itemLinux
- CVE-2024-46859platform/x86: panasonic-laptop: Fix SINF array out of bounds accessesLinux
- CVE-2024-46858mptcp: pm: Fix uaf in __timer_delete_syncLinux
- CVE-2024-46855netfilter: nft_socket: fix sk refcount leaksLinux
- CVE-2024-46852dma-buf: heaps: Fix off-by-one in CMA heap fault handlerLinux
- CVE-2024-46850drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct()Linux
- CVE-2024-46847mm: vmalloc: ensure vmap_block is initialised before adding to queueLinux
- CVE-2024-46845tracing/timerlat: Only clear timer if a kthread existsLinux
- CVE-2024-46844um: line: always fill *error_out in setup_one_line()Linux
- CVE-2024-46842scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_infoLinux
- CVE-2024-46834ethtool: fail closed if we can't get max channel used in indirection tablesLinux
- CVE-2024-46831net: microchip: vcap: Fix use-after-free error in kunit testLinux
- CVE-2024-46830KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTSLinux
- CVE-2024-46828sched: sch_cake: fix bulk flow accounting logic for host fairnessLinux
- CVE-2024-46823kunit/overflow: Fix UB in overflow_allocation_testLinux
- CVE-2024-46818drm/amd/display: Check gpio_id before used as array indexLinux
- CVE-2024-46817drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6Linux
- CVE-2024-46816drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_linksLinux
- CVE-2024-46815drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]Linux
- CVE-2024-46813drm/amd/display: Check link_index before accessing dc->links[]Linux
- CVE-2024-46812drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfigurationLinux
- CVE-2024-46811drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_boxLinux
- CVE-2024-46803drm/amdkfd: Check debug trap enable before write dbg_ev_fileLinux
- CVE-2024-8607SQLi in Oceanic Software's ValeAppOceanic Software ValeApp
- CVE-2024-8608Stored XSS in Oceanic Software's ValeAppOceanic Software ValeApp
- CVE-2024-8609Improper Access Control in Oceanic Software's ValeAppOceanic Software ValeApp
- CVE-2024-6931The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scriptingstellarwp The Events Calendar
- CVE-2024-39432In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2024-39431In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2024-7400Local privilege escalation in ESET products for WindowsESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +11
- CVE-2024-9029Freeimage: heap buffer overflow in tiff_read_iptc_profilefreeimage
- CVE-2024-7713AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key DisclosureAI ChatBot with ChatGPT and Content Generator by AYS
- CVE-2024-8922Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.phprajeshsingh520 PiWeb Product Enquiry or product catalog for…
- CVE-2024-9130GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameterstellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2024-33368An issue in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptSc
- CVE-2024-33369Directory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the getFile
- CVE-2024-40509Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asm
- CVE-2024-40510Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asm
- CVE-2024-40511Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmi
- CVE-2024-40512Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.
- CVE-2024-44910NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).
- CVE-2024-44911NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c).
- CVE-2024-44912NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).
- CVE-2024-46097TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section.
- CVE-2024-46331ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login.
- CVE-2024-46366A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side te
- CVE-2024-46441An arbitrary file upload vulnerability in YPay 1.2.0 allows attackers to execute arbitrary code via a ZIP archive to themePutFile in app/com
- CVE-2024-46471The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, p
- CVE-2024-46472CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.
Medium, low and unrated 91
- CVE-2024-38796Integer overflow in PeCoffLoaderRelocateImageTianoCore EDK2
- CVE-2024-9294dingfanzu CMS saveNewPwd.php sql injectiondingfanzu CMS
- CVE-2024-23586An insufficient session timeout vulnerability affects HCL Nomad server on DominoHCL Software Nomad server on Domino
- CVE-2024-47186Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scriptingfilamentphp filament · filament/tables +1
- CVE-2024-9293skyselang yylAdmin Backend File.php list sql injectionskyselang yylAdmin
- CVE-2024-9291kalvinGit kvf-admin XML File cross site scriptingkalvinGit kvf-admin
- CVE-2024-9160Security Misconfiguration in Forge module PEADMPuppet PEADM Forge Module
- CVE-2024-39364Advantech ADAM-5630 Missing Authentication for Critical FunctionAdvantech ADAM-5630
- CVE-2024-34542Advantech ADAM-5630 Weak Encoding for PasswordAdvantech ADAM-5630
- CVE-2024-37187Advantech ADAM-5550 Weak Encoding for PasswordAdvantech ADAM
- CVE-2024-38809Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.Spring Framework · org.springframework:spring-web
- CVE-2024-45745TopQuadrant TopBraid EDG JavaScript console XXETopQuadrant TopBraid EDG
- CVE-2024-45744TopQuadrant TopBraid EDG password manager stores external credentials insecurelyTopQuadrant TopBraid EDG
- CVE-2024-47077authentik cross-provider token validation problemsgoauthentik authentik
- CVE-2024-47184Ampache vulnerable to Stored XSS via Democratic Playlist Nameampache
- CVE-2024-9283RelaxedJS ReLaXed Pug to PDF Converter cross site scriptingRelaxedJS ReLaXed · relaxedjs
- CVE-2024-47182Dozzle uses unsafe hash for passwordsamir20 dozzle · github.com/amir20/dozzle
- CVE-2024-45863A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially rFacebook Thrift
- CVE-2024-9282bg5sbk MiniCMS page-edit.php cross-site request forgerybg5sbk MiniCMS
- CVE-2024-46868firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()Linux
- CVE-2024-46867drm/xe/client: fix deadlock in show_meminfo()Linux
- CVE-2024-46864x86/hyperv: fix kexec crash due to VP assist page corruptionLinux
- CVE-2024-46861usbnet: ipheth: do not stop RX on failing RX callbackLinux
- CVE-2024-46860wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_changeLinux
- CVE-2024-46857net/mlx5: Fix bridge mode operations when there are no VFsLinux
- CVE-2024-46856net: phy: dp83822: Fix NULL pointer dereference on DP83825 devicesLinux
- CVE-2024-46854net: dpaa: Pad packets to ETH_ZLENLinux
- CVE-2024-46853spi: nxp-fspi: fix the KASAN report out-of-bounds bugLinux
- CVE-2024-46851drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()Linux
- CVE-2024-46849ASoC: meson: axg-card: fix 'use-after-free'Linux
- CVE-2024-46848perf/x86/intel: Limit the period on HaswellLinux
- CVE-2024-46846spi: rockchip: Resolve unbalanced runtime PM / system PM handlingLinux
- CVE-2024-46843scsi: ufs: core: Remove SCSI host only if addedLinux
- CVE-2024-46841btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()Linux
- CVE-2024-46840btrfs: clean up our handling of refs == 0 in snapshot deleteLinux
- CVE-2024-46838userfaultfd: don't BUG_ON() if khugepaged yanks our page tableLinux
- CVE-2024-46837drm/panthor: Restrict high priorities on group_createLinux
- CVE-2024-46836usb: gadget: aspeed_udc: validate endpoint index for ast udcLinux
- CVE-2024-46835drm/amdgpu: Fix smatch static checker warningLinux
- CVE-2024-46833net: hns3: void array out of bound when loop tnl_numLinux
- CVE-2024-46832MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installedLinux
- CVE-2024-46829rtmutex: Drop rt_mutex::wait_lock before schedulingLinux
- CVE-2024-46827wifi: ath12k: fix firmware crash due to invalid peer nssLinux
- CVE-2024-46826ELF: fix kernel.randomize_va_space double readLinux
- CVE-2024-46825wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID checkLinux
- CVE-2024-46824iommufd: Require drivers to supply the cache_invalidate_user opsLinux
- CVE-2024-46822arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entryLinux
- CVE-2024-46821drm/amd/pm: Fix negative array index readLinux
- CVE-2024-46820drm/amdgpu/vcn: remove irq disabling in vcn 5 suspendLinux
- CVE-2024-46819drm/amdgpu: the warning dereferencing obj for nbio_v7_4Linux
- CVE-2024-46814drm/amd/display: Check msg_id before processing transcationLinux
- CVE-2024-46810drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQLinux
- CVE-2024-46809drm/amd/display: Check BIOS images before it is usedLinux
- CVE-2024-46808drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_rangeLinux
- CVE-2024-46807drm/amd/amdgpu: Check tbo resource pointerLinux
- CVE-2024-46806drm/amdgpu: Fix the warning division or modulo by zeroLinux
- CVE-2024-46805drm/amdgpu: fix the waring dereferencing hiveLinux
- CVE-2024-46804drm/amd/display: Add array index check for hdcp ddc accessLinux
- CVE-2024-46802drm/amd/display: added NULL check at start of dc_validate_streamLinux
- CVE-2024-9281bg5sbk MiniCMS post-edit.php cross-site request forgerybg5sbk MiniCMS
- CVE-2024-9280kalvinGit kvf-admin FileUploadKit.java fileUpload unrestricted uploadkalvinGit kvf-admin
- CVE-2024-9279funnyzpc Mee-Admin User Center index cross site scriptingfunnyzpc Mee-Admin
- CVE-2024-9278HuankeMao SCRM Administrator Backend WxkConfig.php upload_domain_verification_file unrestricted uploadHuankeMao SCRM
- CVE-2024-9277Langflow HTTP POST Request utils.py redosLangflow
- CVE-2024-9276TMsoft MyAuth Gateway index.php cross site scriptingTMsoft MyAuth Gateway
- CVE-2024-9275jeanmarc77 123solar admin_invt2.php file inclusionjeanmarc77 123solar
- CVE-2024-9136Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect sHuawei HarmonyOS · Huawei EMUI
- CVE-2024-47294Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may Huawei HarmonyOS · Huawei EMUI
- CVE-2024-47293Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-47292Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentialitHuawei HarmonyOS · Huawei EMUI
- CVE-2024-47291Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availabHuawei HarmonyOS · Huawei EMUI
- CVE-2024-47290Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-9202EDC DataSetResolver policy filtering missingEclipse Foundation Eclipse Dataspace Components
- CVE-2024-41930Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6.Media Fusion Co. MF Teacher Performance Management System
- CVE-2024-6654Denial of Service vulnerability in ESET products for macOSESET, spol. s r.o. ESET Cyber Security · ESET, spol. s r.o.…
- CVE-2024-38861Lack of TLS validation in plugin MikroTik on Checkmk ExchangeMikroTik
- CVE-2024-39435In Logmanager service, there is a possible missing verification incorrect input.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2024-39434In drm service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…
- CVE-2024-39433In drm service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…
- CVE-2024-8681Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widgetleap13 Premium Addons for Elementor – Powerful Elementor Te…
- CVE-2024-8991OSM <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodesphotoweblog OSM – OpenStreetMap
- CVE-2024-9049Beaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Modulebeaverbuilder Beaver Builder Page Builder – Drag and Drop W…
- CVE-2024-7714AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX CallsAI ChatBot with ChatGPT and Content Generator by AYS
- CVE-2024-8965Absolute Reviews <= 1.1.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria NameCode Supply Absolute Reviews
- CVE-2024-7011Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WSharp Display Solutions NP-CB4500UL · Sharp Display So… +147
- CVE-2024-25411A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
- CVE-2024-25412A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
- CVE-2024-46257A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote
- CVE-2024-46333An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a
- CVE-2024-46453A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scri
- CVE-2024-46470Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the member