# CVEs published 2024-10-08

234 CVEs were published on October 8, 2024: 10 critical, 127 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2024-9603](https://cve.now/CVE-2024-9603.md): Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2024-9602](https://cve.now/CVE-2024-9602.md): Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a craft (CVSS 8.8, Google Chrome)
- [CVE-2024-9412](https://cve.now/CVE-2024-9412.md): Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager (CVSS 8.4, Rockwell Automation Verve® Asset Manager)
- [CVE-2024-27457](https://cve.now/CVE-2024-27457.md): Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a privileged user to po (CVSS 1.8, Intel(R) TDX Module firmware)
- [CVE-2024-47773](https://cve.now/CVE-2024-47773.md): Anonymous cache poisoning via XHR requests in Discourse (CVSS 8.2, discourse)
- [CVE-2024-47780](https://cve.now/CVE-2024-47780.md): Information Disclosure in TYPO3 Page Tree (CVSS 3.1, typo3 · typo3/cms-backend)
- [CVE-2024-47822](https://cve.now/CVE-2024-47822.md): Directus inserts access token from query string into logs (CVSS 4.2, directus · @directus/api)
- [CVE-2024-47823](https://cve.now/CVE-2024-47823.md): Livewire Remote Code Execution (RCE) on File Uploads (CVSS 7.7, livewire · livewire/livewire)
- [CVE-2024-43488](https://cve.now/CVE-2024-43488.md): Visual Studio Code extension for Arduino Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2024-43611](https://cve.now/CVE-2024-43611.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43614](https://cve.now/CVE-2024-43614.md): Microsoft Defender for Endpoint for Linux Spoofing Vulnerability (CVSS 5.5, Microsoft Defender for Endpoint for Linux)
- [CVE-2024-43583](https://cve.now/CVE-2024-43583.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43603](https://cve.now/CVE-2024-43603.md): Visual Studio Collector Service Denial of Service Vulnerability (CVSS 5.5, Microsoft Visual Studio 2015 Update · Microsoft Visual Stud…)
- [CVE-2024-43599](https://cve.now/CVE-2024-43599.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2024-43593](https://cve.now/CVE-2024-43593.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43592](https://cve.now/CVE-2024-43592.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43591](https://cve.now/CVE-2024-43591.md): Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability (CVSS 8.7, Microsoft Azure CLI · Microsoft Azure Service Connector)
- [CVE-2024-43590](https://cve.now/CVE-2024-43590.md): Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Visual Studio · Microsoft Visual C++ Redistributa…)
- [CVE-2024-43589](https://cve.now/CVE-2024-43589.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43585](https://cve.now/CVE-2024-43585.md): Code Integrity Guard Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2024-43584](https://cve.now/CVE-2024-43584.md): Windows Scripting Engine Security Feature Bypass Vulnerability (CVSS 7.7, Microsoft Windows)
- [CVE-2024-43582](https://cve.now/CVE-2024-43582.md): Remote Desktop Protocol Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2024-43575](https://cve.now/CVE-2024-43575.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2024-43574](https://cve.now/CVE-2024-43574.md): Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Windows)
- [CVE-2024-43572](https://cve.now/CVE-2024-43572.md): Microsoft Management Console Remote Code Execution Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2024-43571](https://cve.now/CVE-2024-43571.md): Sudo for Windows Spoofing Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2024-43570](https://cve.now/CVE-2024-43570.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2024-43567](https://cve.now/CVE-2024-43567.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2024-43565](https://cve.now/CVE-2024-43565.md): Windows Network Address Translation (NAT) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2024-43564](https://cve.now/CVE-2024-43564.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43563](https://cve.now/CVE-2024-43563.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43562](https://cve.now/CVE-2024-43562.md): Windows Network Address Translation (NAT) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2024-43561](https://cve.now/CVE-2024-43561.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43560](https://cve.now/CVE-2024-43560.md): Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43559](https://cve.now/CVE-2024-43559.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43558](https://cve.now/CVE-2024-43558.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43557](https://cve.now/CVE-2024-43557.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43556](https://cve.now/CVE-2024-43556.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43555](https://cve.now/CVE-2024-43555.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43553](https://cve.now/CVE-2024-43553.md): NT OS Kernel Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2024-43552](https://cve.now/CVE-2024-43552.md): Windows Shell Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2024-43551](https://cve.now/CVE-2024-43551.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43550](https://cve.now/CVE-2024-43550.md): Windows Secure Channel Spoofing Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2024-43549](https://cve.now/CVE-2024-43549.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43547](https://cve.now/CVE-2024-43547.md): Windows Kerberos Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43546](https://cve.now/CVE-2024-43546.md): Windows Cryptographic Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2024-35215](https://cve.now/CVE-2024-35215.md): NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 a (CVSS 6.2, BlackBerry QNX Software Development Platform)
- [CVE-2024-43545](https://cve.now/CVE-2024-43545.md): Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43544](https://cve.now/CVE-2024-43544.md): Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43536](https://cve.now/CVE-2024-43536.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43528](https://cve.now/CVE-2024-43528.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43524](https://cve.now/CVE-2024-43524.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43523](https://cve.now/CVE-2024-43523.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43522](https://cve.now/CVE-2024-43522.md): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2024-43521](https://cve.now/CVE-2024-43521.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2024-43520](https://cve.now/CVE-2024-43520.md): Windows Kernel Denial of Service Vulnerability (CVSS 5.0, Microsoft Windows)
- [CVE-2024-43517](https://cve.now/CVE-2024-43517.md): Microsoft ActiveX Data Objects Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2024-43514](https://cve.now/CVE-2024-43514.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43512](https://cve.now/CVE-2024-43512.md): Windows Standards-Based Storage Management Service Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2024-43511](https://cve.now/CVE-2024-43511.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2024-43509](https://cve.now/CVE-2024-43509.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43501](https://cve.now/CVE-2024-43501.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43468](https://cve.now/CVE-2024-43468.md): Microsoft Configuration Manager Remote Code Execution Vulnerability (CVSS 9.8, KEV, Microsoft Configuration Manager)
- [CVE-2024-43497](https://cve.now/CVE-2024-43497.md): DeepSpeed Remote Code Execution Vulnerability (CVSS 8.4, Microsoft DeepSpeed · deepspeed)
- [CVE-2024-43485](https://cve.now/CVE-2024-43485.md): .NET and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +2)
- [CVE-2024-43484](https://cve.now/CVE-2024-43484.md): .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +2)
- [CVE-2024-43483](https://cve.now/CVE-2024-43483.md): .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +4)
- [CVE-2024-43456](https://cve.now/CVE-2024-43456.md): Windows Remote Desktop Services Tampering Vulnerability (CVSS 4.8, Microsoft Windows Server 2008 R2 Service Pack · Microsoft W…)
- [CVE-2024-30092](https://cve.now/CVE-2024-30092.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2024-38212](https://cve.now/CVE-2024-38212.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43453](https://cve.now/CVE-2024-43453.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-38262](https://cve.now/CVE-2024-38262.md): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-38265](https://cve.now/CVE-2024-38265.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-38124](https://cve.now/CVE-2024-38124.md): Windows Netlogon Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-38129](https://cve.now/CVE-2024-38129.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Server 2022, 23H2 Edition)
- [CVE-2024-38029](https://cve.now/CVE-2024-38029.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server 2022, 23H2 Edition)
- [CVE-2024-38149](https://cve.now/CVE-2024-38149.md): BranchCache Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2024-37983](https://cve.now/CVE-2024-37983.md): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2024-37979](https://cve.now/CVE-2024-37979.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows Server)
- [CVE-2024-37982](https://cve.now/CVE-2024-37982.md): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2024-37976](https://cve.now/CVE-2024-37976.md): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2024-20659](https://cve.now/CVE-2024-20659.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2024-43500](https://cve.now/CVE-2024-43500.md): Windows Resilient File System (ReFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2024-43616](https://cve.now/CVE-2024-43616.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2024-43615](https://cve.now/CVE-2024-43615.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2024-43612](https://cve.now/CVE-2024-43612.md): Power BI Report Server Spoofing Vulnerability (CVSS 6.9, Microsoft Power BI Report Server - May)
- [CVE-2024-43607](https://cve.now/CVE-2024-43607.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43609](https://cve.now/CVE-2024-43609.md): Microsoft Office Spoofing Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2024-43608](https://cve.now/CVE-2024-43608.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43604](https://cve.now/CVE-2024-43604.md): Outlook for Android Elevation of Privilege Vulnerability (CVSS 5.7, Microsoft Outlook for Android)
- [CVE-2024-43601](https://cve.now/CVE-2024-43601.md): Visual Studio Code for Linux Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code for Linux)
- [CVE-2024-43581](https://cve.now/CVE-2024-43581.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2024-43576](https://cve.now/CVE-2024-43576.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2024-43573](https://cve.now/CVE-2024-43573.md): Windows MSHTML Platform Spoofing Vulnerability (CVSS 6.5, KEV, Microsoft Windows)
- [CVE-2024-43554](https://cve.now/CVE-2024-43554.md): Windows Kernel-Mode Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2024-43543](https://cve.now/CVE-2024-43543.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43542](https://cve.now/CVE-2024-43542.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43541](https://cve.now/CVE-2024-43541.md): Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-43540](https://cve.now/CVE-2024-43540.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43538](https://cve.now/CVE-2024-43538.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43537](https://cve.now/CVE-2024-43537.md): Windows Mobile Broadband Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43535](https://cve.now/CVE-2024-43535.md): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2024-43534](https://cve.now/CVE-2024-43534.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2024-43533](https://cve.now/CVE-2024-43533.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2024-43532](https://cve.now/CVE-2024-43532.md): Remote Registry Service Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2024-43529](https://cve.now/CVE-2024-43529.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2024-43527](https://cve.now/CVE-2024-43527.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-43526](https://cve.now/CVE-2024-43526.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43525](https://cve.now/CVE-2024-43525.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2024-43519](https://cve.now/CVE-2024-43519.md): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2024-43518](https://cve.now/CVE-2024-43518.md): Windows Telephony Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2024-43515](https://cve.now/CVE-2024-43515.md): Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2024-43513](https://cve.now/CVE-2024-43513.md): BitLocker Security Feature Bypass Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2024-43508](https://cve.now/CVE-2024-43508.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2024-43506](https://cve.now/CVE-2024-43506.md): BranchCache Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2024-43505](https://cve.now/CVE-2024-43505.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2024-43504](https://cve.now/CVE-2024-43504.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2024-43503](https://cve.now/CVE-2024-43503.md): Microsoft SharePoint Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2024-43502](https://cve.now/CVE-2024-43502.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2024-38229](https://cve.now/CVE-2024-38229.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 8.1, Microsoft .NET · Microsoft Visual Studio +12)
- [CVE-2024-43481](https://cve.now/CVE-2024-43481.md): Power BI Report Server Spoofing Vulnerability (CVSS 6.5, Microsoft Power BI Report Server - May)
- [CVE-2024-43480](https://cve.now/CVE-2024-43480.md): Azure Service Fabric for Linux Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Azure Service Fabric for Linux)
- [CVE-2024-38261](https://cve.now/CVE-2024-38261.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +2)
- [CVE-2024-38179](https://cve.now/CVE-2024-38179.md): Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure Stack HCI OS · Microsoft Azure Stack OS HCI)
- [CVE-2024-43516](https://cve.now/CVE-2024-43516.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-38097](https://cve.now/CVE-2024-38097.md): Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Azure Monitor)
- [CVE-2024-3057](https://cve.now/CVE-2024-3057.md): A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation. (CVSS 9.8, PureStorage FlashArray)
- [CVE-2024-8626](https://cve.now/CVE-2024-8626.md): Logix Controllers Vulnerable to Denial-of-Service Vulnerability (CVSS 8.7, Rockwell Automation CompactLogix 5380 controllers · Rock… +3)
- [CVE-2024-47011](https://cve.now/CVE-2024-47011.md): Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information (CVSS 7.5, Ivanti Avalanche)
- [CVE-2024-47010](https://cve.now/CVE-2024-47010.md): Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. (CVSS 7.3, Ivanti Avalanche)
- [CVE-2024-47009](https://cve.now/CVE-2024-47009.md): Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. (CVSS 7.3, Ivanti Avalanche)
- [CVE-2024-47008](https://cve.now/CVE-2024-47008.md): Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. (CVSS 7.5, Ivanti Avalanche)
- [CVE-2024-47007](https://cve.now/CVE-2024-47007.md): A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to ca (CVSS 7.5, Ivanti Avalanche)
- [CVE-2024-9167](https://cve.now/CVE-2024-9167.md): Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacke (CVSS 7.8, Ivanti Velocity License Server)
- [CVE-2024-9622](https://cve.now/CVE-2024-9622.md): Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4 (CVSS 5.3, resteasy-netty4 · Red Hat JBoss Data Grid +2)
- [CVE-2024-9621](https://cve.now/CVE-2024-9621.md): Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log (CVSS 5.3, quarkus-cxf · Red Hat Build of Apache Camel 4.4 for Quar… +1)
- [CVE-2024-9620](https://cve.now/CVE-2024-9620.md): Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption (CVSS 5.3, event-driven-automation · Red Hat Ansible Automation Platfo…)
- [CVE-2024-9381](https://cve.now/CVE-2024-9381.md): Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions. (CVSS 7.2, Ivanti CSA)
- [CVE-2024-9380](https://cve.now/CVE-2024-9380.md): An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit (CVSS 7.2, KEV, Ivanti CSA)
- [CVE-2024-9379](https://cve.now/CVE-2024-9379.md): SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ru (CVSS 6.5, KEV, Ivanti CSA)
- [CVE-2024-9124](https://cve.now/CVE-2024-9124.md): Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability (CVSS 8.2, Rockwell Automation Drives - PowerFlex)
- [CVE-2024-7612](https://cve.now/CVE-2024-7612.md): Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components. (CVSS 8.8, Ivanti Endpoint Manager Mobile)
- [CVE-2024-47951](https://cve.now/CVE-2024-47951.md): In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings (CVSS 3.5, JetBrains TeamCity)
- [CVE-2024-47950](https://cve.now/CVE-2024-47950.md): In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings (CVSS 3.5, JetBrains TeamCity)
- [CVE-2024-47949](https://cve.now/CVE-2024-47949.md): In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location (CVSS 4.9, JetBrains TeamCity)
- [CVE-2024-47948](https://cve.now/CVE-2024-47948.md): In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups (CVSS 4.9, JetBrains TeamCity)
- [CVE-2024-47161](https://cve.now/CVE-2024-47161.md): In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API (CVSS 4.3, JetBrains TeamCity)
- [CVE-2024-8215](https://cve.now/CVE-2024-8215.md): Payload Injection Attack via Management REST interface (CVSS 8.7, Payara Platform Payara Server)
- [CVE-2024-45330](https://cve.now/CVE-2024-45330.md): A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to (CVSS 6.8, Fortinet FortiAnalyzer)
- [CVE-2024-33506](https://cve.now/CVE-2024-33506.md): An exposure of sensitive information to an unauthorized actor vulnerability \[CWE-200\] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0. (CVSS 3.1, Fortinet FortiManager)
- [CVE-2024-8431](https://cve.now/CVE-2024-8431.md): Photo Gallery, Images, Slider in Rbs Image Gallery \<= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosure (CVSS 4.3, robosoft Robo Gallery – Photo & Image Slider)
- [CVE-2024-8482](https://cve.now/CVE-2024-8482.md): Royal Elementor Addons and Templates \<= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget (CVSS 6.4, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-9207](https://cve.now/CVE-2024-9207.md): BuddyPress Docs \<= 2.2.3 - Reflected Cross-Site Scripting (CVSS 6.1, boonebgorges BuddyPress Docs)
- [CVE-2024-8488](https://cve.now/CVE-2024-8488.md): Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms \<= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, ays-pro Survey Maker)
- [CVE-2024-8884](https://cve.now/CVE-2024-8884.md): CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attac (CVSS 9.8, Schneider Electric System Monitor application in Harmony In…)
- [CVE-2024-9005](https://cve.now/CVE-2024-9005.md): CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely de (CVSS 7.3, Schneider Electric EcoStruxure Power Monitoring Expert)
- [CVE-2024-8518](https://cve.now/CVE-2024-8518.md): CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted pro (CVSS 3.3, Schneider Electric Zelio Soft)
- [CVE-2024-8422](https://cve.now/CVE-2024-8422.md): CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & inte (CVSS 7.8, Schneider Electric Zelio Soft)
- [CVE-2024-3506](https://cve.now/CVE-2024-3506.md): Camera Driver possible Buffer Overflow (CVSS 7.3, Milestone Systems XProtect VMS)
- [CVE-2024-8433](https://cve.now/CVE-2024-8433.md): Easy Mega Menu Plugin for WordPress – ThemeHunk \<= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, Easy Mega Menu for WordPress – ThemeHunk)
- [CVE-2024-8629](https://cve.now/CVE-2024-8629.md): WooCommerce Multilingual & Multicurrency with WPML \<= 5.3.7 - Reflected Cross-Site Scripting (CVSS 6.1, amirhelzer WPML Multilingual & Multicurrency for WooCommerce)
- [CVE-2024-47565](https://cve.now/CVE-2024-47565.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 4.3, Siemens SINEC Security Monitor)
- [CVE-2024-47563](https://cve.now/CVE-2024-47563.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 5.3, Siemens SINEC Security Monitor)
- [CVE-2024-47562](https://cve.now/CVE-2024-47562.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 8.8, Siemens SINEC Security Monitor)
- [CVE-2024-47553](https://cve.now/CVE-2024-47553.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 9.9, Siemens SINEC Security Monitor)
- [CVE-2024-47196](https://cve.now/CVE-2024-47196.md): A vulnerability has been identified in ModelSim (All versions \< V2025.2), Questa (All versions \< V2025.2). (CVSS 6.7, Siemens ModelSim · Siemens Questa)
- [CVE-2024-47195](https://cve.now/CVE-2024-47195.md): A vulnerability has been identified in ModelSim (All versions \< V2024.3), Questa (All versions \< V2024.3). (CVSS 6.7, Siemens ModelSim · Siemens Questa)
- [CVE-2024-47194](https://cve.now/CVE-2024-47194.md): A vulnerability has been identified in ModelSim (All versions \< V2024.3), Questa (All versions \< V2024.3). (CVSS 6.7, Siemens ModelSim · Siemens Questa)
- [CVE-2024-47046](https://cve.now/CVE-2024-47046.md): A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (Al (CVSS 7.8, Siemens Simcenter Femap)
- [CVE-2024-46887](https://cve.now/CVE-2024-46887.md): The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. (CVSS 5.3, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +66)
- [CVE-2024-46886](https://cve.now/CVE-2024-46886.md): The web server of affected devices does not properly validate input that is used for a user redirection. (CVSS 4.7, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemen… +103)
- [CVE-2024-45476](https://cve.now/CVE-2024-45476.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 3.3, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45475](https://cve.now/CVE-2024-45475.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45474](https://cve.now/CVE-2024-45474.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45473](https://cve.now/CVE-2024-45473.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45472](https://cve.now/CVE-2024-45472.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45471](https://cve.now/CVE-2024-45471.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45470](https://cve.now/CVE-2024-45470.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45469](https://cve.now/CVE-2024-45469.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45468](https://cve.now/CVE-2024-45468.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45467](https://cve.now/CVE-2024-45467.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45466](https://cve.now/CVE-2024-45466.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45465](https://cve.now/CVE-2024-45465.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45464](https://cve.now/CVE-2024-45464.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-45463](https://cve.now/CVE-2024-45463.md): A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions \< V14.2.0.14), Teamcenter Visualization V14.3 (All versi (CVSS 7.8, Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…)
- [CVE-2024-41981](https://cve.now/CVE-2024-41981.md): A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (Al (CVSS 7.8, Siemens Simcenter Femap)
- [CVE-2024-41902](https://cve.now/CVE-2024-41902.md): A vulnerability has been identified in JT2Go (All versions \< V2406.0003). (CVSS 7.8, Siemens JT2Go)
- [CVE-2024-41798](https://cve.now/CVE-2024-41798.md): A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). (CVSS 9.8, Siemens SENTRON 7KM PAC3200)
- [CVE-2023-52952](https://cve.now/CVE-2023-52952.md): A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions \>= V11.5.1 \< V11.6.2), HiMed Cockpit 14 pro+ ( (CVSS 8.5, Siemens HiMed Cockpit 12 pro · Siemens HiMed Cockpit 14… +2)
- [CVE-2024-8943](https://cve.now/CVE-2024-8943.md): LatePoint \<= 5.0.12 - Authentication Bypass (CVSS 9.8, LatePoint Plugin)
- [CVE-2024-8911](https://cve.now/CVE-2024-8911.md): LatePoint \<= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection (CVSS 9.8, LatePoint Plugin)
- [CVE-2022-4534](https://cve.now/CVE-2022-4534.md): Limit Login Attempts (Spam Protection) \<= 5.3 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 5.3, wp-buy Limit Login Attempts)
- [CVE-2024-47095](https://cve.now/CVE-2024-47095.md): Reflected Cross-Site Scripting in Follet School Solutions Destiny (CVSS 5.1, Follet School Solutions Destiny)
- [CVE-2024-8964](https://cve.now/CVE-2024-8964.md): Image Optimizer, Resizer and CDN – Sirv \<= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, Image Optimizer, Resizer and CDN – Sirv)
- [CVE-2024-34672](https://cve.now/CVE-2024-34672.md): Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android (CVSS 5.5, Samsung Mobile SamsungVideoPlayer)
- [CVE-2024-34671](https://cve.now/CVE-2024-34671.md): Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to ge (CVSS 3.3, Samsung Mobile Samsung Internet)
- [CVE-2024-34670](https://cve.now/CVE-2024-34670.md): Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive infor (CVSS 4.0, Samsung Mobile Sound Assistant)
- [CVE-2024-34669](https://cve.now/CVE-2024-34669.md): Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrar (CVSS 7.5, Samsung Mobile Devices)
- [CVE-2024-34668](https://cve.now/CVE-2024-34668.md): Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary (CVSS 7.5, Samsung Mobile Devices)
- [CVE-2024-34667](https://cve.now/CVE-2024-34667.md): Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary (CVSS 7.5, Samsung Mobile Devices)
- [CVE-2024-34666](https://cve.now/CVE-2024-34666.md): Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers t (CVSS 7.5, Samsung Mobile Devices)
- [CVE-2024-34665](https://cve.now/CVE-2024-34665.md): Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary (CVSS 7.5, Samsung Mobile Devices)
- [CVE-2024-34664](https://cve.now/CVE-2024-34664.md): Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a mu (CVSS 4.1, Samsung Mobile Devices)
- [CVE-2024-34663](https://cve.now/CVE-2024-34663.md): Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2024-34662](https://cve.now/CVE-2024-34662.md): Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select And (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2024-7206](https://cve.now/CVE-2024-7206.md): Firmware extraction and Hardware SSL Pinning Bypass (CVSS 7.0, eWeLink Zigbee Bridge Pro)
- [CVE-2024-9021](https://cve.now/CVE-2024-9021.md): Relevanssi \< 4.23.1 - Contributor+ Stored XSS (CVSS 5.4, Relevanssi)
- [CVE-2024-8983](https://cve.now/CVE-2024-8983.md): Custom Twitter Feeds \< 2.2.3 - Admin+ Stored XSS (CVSS 4.8, Custom Twitter Feeds)
- [CVE-2024-9292](https://cve.now/CVE-2024-9292.md): Bridge Core \<= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, QODE Bridge Core)
- [CVE-2024-21533](https://cve.now/CVE-2024-21533.md): All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL (CVSS 6.5, ggit)
- [CVE-2024-21532](https://cve.now/CVE-2024-21532.md): All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the b (CVSS 7.3, ggit)
- [CVE-2024-9026](https://cve.now/CVE-2024-9026.md): PHP-FPM logs from children may be altered (CVSS 3.3, PHP Group PHP)
- [CVE-2024-8927](https://cve.now/CVE-2024-8927.md): cgi.force\_redirect configuration is bypassable due to the environment variable collision (CVSS 7.5, PHP Group PHP)
- [CVE-2024-8926](https://cve.now/CVE-2024-8926.md): PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) (CVSS 8.1, PHP Group PHP)
- [CVE-2024-8925](https://cve.now/CVE-2024-8925.md): Erroneous parsing of multipart form data (CVSS 3.1, PHP Group PHP)
- [CVE-2024-47594](https://cve.now/CVE-2024-47594.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) (CVSS 5.4, SAP\_SE SAP NetWeaver Enterprise Portal)
- [CVE-2024-45282](https://cve.now/CVE-2024-45282.md): HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) (CVSS 4.3, SAP\_SE SAP S/4 HANA)
- [CVE-2024-45278](https://cve.now/CVE-2024-45278.md): Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice (CVSS 5.4, SAP\_SE SAP Commerce Backoffice)
- [CVE-2024-45277](https://cve.now/CVE-2024-45277.md): Prototype Pollution vulnerability in SAP HANA Client (CVSS 4.3, SAP\_SE SAP HANA Client · @sap/hana-client)
- [CVE-2024-37179](https://cve.now/CVE-2024-37179.md): Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (CVSS 7.7, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2024-45382](https://cve.now/CVE-2024-45382.md): Liteos\_a has an Out-of-bounds Write vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2024-43697](https://cve.now/CVE-2024-43697.md): Liteos\_a has an Improper Input Validation vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2024-43696](https://cve.now/CVE-2024-43696.md): Liteos\_a has an Memory Leak vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2024-39831](https://cve.now/CVE-2024-39831.md): AccessTokenManager has an use after free vulnerability (CVSS 4.4, OpenHarmony)
- [CVE-2024-39806](https://cve.now/CVE-2024-39806.md): Liteos\_a has an out-of-bounds Read vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2024-25885](https://cve.now/CVE-2024-25885.md): An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) (CVSS 7.5, xhtml2pdf)
- [CVE-2024-36814](https://cve.now/CVE-2024-36814.md): An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on th (CVSS 4.9, github.com/AdguardTeam/AdGuardHome)
- [CVE-2024-44349](https://cve.now/CVE-2024-44349.md): A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands (CVSS 9.8)
- [CVE-2024-45230](https://cve.now/CVE-2024-45230.md): An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. (CVSS 7.5, django)
- [CVE-2024-45231](https://cve.now/CVE-2024-45231.md): An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. (CVSS 5.3, django)
- [CVE-2024-45880](https://cve.now/CVE-2024-45880.md): A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. (CVSS 8.0)
- [CVE-2024-45918](https://cve.now/CVE-2024-45918.md): Fujian Kelixin Communication Command and Dispatch Platform \<=7.6.6.4391 is vulnerable to SQL Injection via /client/get\_gis\_fence.php. (CVSS 9.8)
- [CVE-2024-46410](https://cve.now/CVE-2024-46410.md): PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment (CVSS 4.8)
- [CVE-2024-46539](https://cve.now/CVE-2024-46539.md): Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a (CVSS 8.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-10-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.