# CVEs published 2024-10-09

124 CVEs were published on October 9, 2024: 14 critical, 59 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2024-8264](https://cve.now/CVE-2024-8264.md): Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05 (CVSS 5.5, Fortra Robot Schedule Enterprise)
- [CVE-2024-30118](https://cve.now/CVE-2024-30118.md): HCL Connections is susceptible to a sensitive information disclosure vulnerability (CVSS 3.5, HCL Software Connections)
- [CVE-2024-39525](https://cve.now/CVE-2024-39525.md): Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2024-39516](https://cve.now/CVE-2024-39516.md): Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2024-39515](https://cve.now/CVE-2024-39515.md): Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2024-7041](https://cve.now/CVE-2024-7041.md): IDOR in open-webui/open-webui (CVSS 6.5, open-webui/open-webui · open-webui)
- [CVE-2024-38815](https://cve.now/CVE-2024-38815.md): VMware NSX contains a content spoofing vulnerability. (CVSS 4.3, VMware NSX, VMware Cloud Foundation)
- [CVE-2024-38818](https://cve.now/CVE-2024-38818.md): VMware NSX contains a local privilege escalation vulnerability. (CVSS 6.7, VMware NSX, VMware Cloud Foundation)
- [CVE-2024-38817](https://cve.now/CVE-2024-38817.md): VMware NSX contains a command injection vulnerability. (CVSS 6.7, VMware NSX, VMware Cloud Foundation)
- [CVE-2024-3656](https://cve.now/CVE-2024-3656.md): Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities (CVSS 8.1, keycloak · Red Hat Build of Keycloak +3)
- [CVE-2024-47828](https://cve.now/CVE-2024-47828.md): Cross-Site Request Forgery in ampache (CVSS 5.3, ampache)
- [CVE-2024-47832](https://cve.now/CVE-2024-47832.md): XML Signature Bypass via differential XML parsing in ssoready (CVSS 9.3, ssoready · github.com/ssoready/ssoready)
- [CVE-2024-47833](https://cve.now/CVE-2024-47833.md): Session Cookie without Secure and HTTPOnly flags in taipy (CVSS 6.3, Avaiga taipy · taipy)
- [CVE-2024-47815](https://cve.now/CVE-2024-47815.md): Cross-site Scripting in IncidentReporting (CVSS 6.0, miraheze IncidentReporting)
- [CVE-2024-47816](https://cve.now/CVE-2024-47816.md): Users can impersonate import requesters if their actor IDs coincide in ImportDump (CVSS 6.4, miraheze ImportDump)
- [CVE-2024-47812](https://cve.now/CVE-2024-47812.md): Cross-site Scripting (XSS) on Special:RequestImportQueue when displaying request date in ImportDump (CVSS 6.0, miraheze ImportDump)
- [CVE-2024-47813](https://cve.now/CVE-2024-47813.md): Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations (CVSS 2.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2024-47763](https://cve.now/CVE-2024-47763.md): Wasmtime runtime crash when combining tail calls with trapping imports (CVSS 5.5, bytecodealliance wasmtime · wasmtime-bin +1)
- [CVE-2024-9473](https://cve.now/CVE-2024-9473.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2024-9471](https://cve.now/CVE-2024-9471.md): PAN-OS: Privilege Escalation (PE) Vulnerability in XML API (CVSS 5.1, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-9470](https://cve.now/CVE-2024-9470.md): Cortex XSOAR: Information Disclosure Vulnerability (CVSS 5.3, Palo Alto Networks Cortex XSOAR)
- [CVE-2024-9469](https://cve.now/CVE-2024-9469.md): Cortex XDR Agent: Local Windows User Can Disable the Agent (CVSS 5.7, Palo Alto Networks Cortex XDR Agent)
- [CVE-2024-9468](https://cve.now/CVE-2024-9468.md): PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet (CVSS 8.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-9467](https://cve.now/CVE-2024-9467.md): Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure (CVSS 7.0, Palo Alto Networks Expedition)
- [CVE-2024-9466](https://cve.now/CVE-2024-9466.md): Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure (CVSS 8.2, Palo Alto Networks Expedition)
- [CVE-2024-9465](https://cve.now/CVE-2024-9465.md): Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure (CVSS 9.2, KEV, Palo Alto Networks Expedition)
- [CVE-2024-9464](https://cve.now/CVE-2024-9464.md): Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure (CVSS 9.3, Palo Alto Networks Expedition)
- [CVE-2024-9463](https://cve.now/CVE-2024-9463.md): Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure (CVSS 9.9, KEV, Palo Alto Networks Expedition)
- [CVE-2024-43610](https://cve.now/CVE-2024-43610.md): Copilot Studio Information Disclosure Vulnerability (CVSS 7.4, Microsoft Copilot Studio)
- [CVE-2024-8015](https://cve.now/CVE-2024-8015.md): Telerik Report Server Insecure Type Resolution (CVSS 9.1, Progress Software Telerik Reporting)
- [CVE-2024-47673](https://cve.now/CVE-2024-47673.md): wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (no CVSS, Linux)
- [CVE-2024-47671](https://cve.now/CVE-2024-47671.md): USB: usbtmc: prevent kernel-usb-infoleak (no CVSS, Linux)
- [CVE-2024-47670](https://cve.now/CVE-2024-47670.md): ocfs2: add bounds checking to ocfs2\_xattr\_find\_entry() (CVSS 7.8, Linux)
- [CVE-2024-7292](https://cve.now/CVE-2024-7292.md): Account Controller allows high count of login attempts (CVSS 7.5, Progress Software Telerik Report Server)
- [CVE-2024-7294](https://cve.now/CVE-2024-7294.md): Uncontrolled resource consumption of anonymous endpoints (CVSS 7.5, Progress Software Telerik Report Server)
- [CVE-2024-7293](https://cve.now/CVE-2024-7293.md): Password policy for new users is not strong enough (CVSS 7.5, Progress Software Telerik Report Server)
- [CVE-2024-7840](https://cve.now/CVE-2024-7840.md): Improper neutralization special element in hyperlinks (CVSS 7.8, Progress Software Telerik Reporting)
- [CVE-2024-9675](https://cve.now/CVE-2024-9675.md): Buildah: buildah allows arbitrary directory mount (CVSS 7.8, buildah · Red Hat Enterprise Linux +4)
- [CVE-2024-9671](https://cve.now/CVE-2024-9671.md): System: pdf invoices of the developer users can be seen if the url is known (CVSS 5.3, 3scale · Red Hat 3scale API Management Platform)
- [CVE-2024-47425](https://cve.now/CVE-2024-47425.md): Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Framemaker)
- [CVE-2024-47423](https://cve.now/CVE-2024-47423.md): Adobe Framemaker | Unrestricted Upload of File with Dangerous Type (CWE-434) (CVSS 7.8, Adobe Framemaker)
- [CVE-2024-47421](https://cve.now/CVE-2024-47421.md): Adobe Framemaker | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Framemaker)
- [CVE-2024-47424](https://cve.now/CVE-2024-47424.md): Adobe Framemaker | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Framemaker)
- [CVE-2024-47422](https://cve.now/CVE-2024-47422.md): Adobe Framemaker | Untrusted Search Path (CWE-426) (CVSS 7.8, Adobe Framemaker)
- [CVE-2024-8048](https://cve.now/CVE-2024-8048.md): Telerik Reporting Insecure Expression Evaluation (CVSS 7.8, Progress Software Telerik Reporting)
- [CVE-2024-45137](https://cve.now/CVE-2024-45137.md): InDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2024-8014](https://cve.now/CVE-2024-8014.md): Telerik Reporting EntityDataSource Insecure Type Resolution (CVSS 8.8, Progress Software Telerik Reporting)
- [CVE-2024-47669](https://cve.now/CVE-2024-47669.md): nilfs2: fix state management in error path of log writing function (CVSS 7.3, Linux)
- [CVE-2024-47668](https://cve.now/CVE-2024-47668.md): lib/generic-radix-tree.c: Fix rare race in \_\_genradix\_ptr\_alloc() (CVSS 7.8, Linux)
- [CVE-2024-47667](https://cve.now/CVE-2024-47667.md): PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (CVSS 7.3, Linux)
- [CVE-2024-47666](https://cve.now/CVE-2024-47666.md): scsi: pm80xx: Set phy-\>enable\_completion only when we wait for it (no CVSS, Linux)
- [CVE-2024-47665](https://cve.now/CVE-2024-47665.md): i3c: mipi-i3c-hci: Error out instead on BUG\_ON() in IBI DMA setup (CVSS 5.5, Linux)
- [CVE-2024-47664](https://cve.now/CVE-2024-47664.md): spi: hisi-kunpeng: Add verification for the max\_frequency provided by the firmware (no CVSS, Linux)
- [CVE-2024-47663](https://cve.now/CVE-2024-47663.md): staging: iio: frequency: ad9834: Validate frequency parameter value (no CVSS, Linux)
- [CVE-2024-47662](https://cve.now/CVE-2024-47662.md): drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection (no CVSS, Linux)
- [CVE-2024-47661](https://cve.now/CVE-2024-47661.md): drm/amd/display: Avoid overflow from uint32\_t to uint8\_t (no CVSS, Linux)
- [CVE-2024-45136](https://cve.now/CVE-2024-45136.md): InCopy | Unrestricted Upload of File with Dangerous Type (CWE-434) (CVSS 7.8, Adobe InCopy)
- [CVE-2024-47660](https://cve.now/CVE-2024-47660.md): fsnotify: clear PARENT\_WATCHED flags lazily (no CVSS, Linux)
- [CVE-2024-47659](https://cve.now/CVE-2024-47659.md): smack: tcp: ipv4, fix incorrect labeling (CVSS 9.1, Linux)
- [CVE-2024-47658](https://cve.now/CVE-2024-47658.md): crypto: stm32/cryp - call finalize with bh disabled (CVSS 7.5, Linux)
- [CVE-2024-46871](https://cve.now/CVE-2024-46871.md): drm/amd/display: Correct the defined value for AMDGPU\_DMUB\_NOTIFICATION\_MAX (no CVSS, Linux)
- [CVE-2024-46870](https://cve.now/CVE-2024-46870.md): drm/amd/display: Disable DMCUB timeout for DCN35 (no CVSS, Linux)
- [CVE-2024-45138](https://cve.now/CVE-2024-45138.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45142](https://cve.now/CVE-2024-45142.md): Substance3D - Stager | Write-what-where Condition (CWE-123) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45143](https://cve.now/CVE-2024-45143.md): Substance3D - Stager | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45141](https://cve.now/CVE-2024-45141.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45152](https://cve.now/CVE-2024-45152.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45139](https://cve.now/CVE-2024-45139.md): Substance3D - Stager | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45140](https://cve.now/CVE-2024-45140.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-45144](https://cve.now/CVE-2024-45144.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2024-9286](https://cve.now/CVE-2024-9286.md): SQLi in TRtek Software's Distant Education Platform (CVSS 8.8, TRtek Software Distant Education Platform)
- [CVE-2024-9680](https://cve.now/CVE-2024-9680.md): An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. (CVSS 9.8, KEV, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-45720](https://cve.now/CVE-2024-45720.md): Apache Subversion: Command line argument injection on Windows platforms (CVSS 8.2, Apache Software Foundation Apache Subversion)
- [CVE-2024-28168](https://cve.now/CVE-2024-28168.md): Apache XML Graphics FOP: XML External Entity (XXE) Processing (CVSS 7.5, Apache Software Foundation Apache XML Graphics FOP · org.ap…)
- [CVE-2024-47334](https://cve.now/CVE-2024-47334.md): WordPress Zoho Flow for WordPress plugin \<= 2.7.1 - SQL Injection vulnerability (CVSS 7.6, Zoho Flow)
- [CVE-2024-45145](https://cve.now/CVE-2024-45145.md): Lightroom Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Lightroom Desktop)
- [CVE-2024-9575](https://cve.now/CVE-2024-9575.md): Local File Inclusion in pretix-widget WordPress plugin (CVSS 8.5, rami.io pretix Widget WordPress plugin)
- [CVE-2024-47410](https://cve.now/CVE-2024-47410.md): Animate | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47415](https://cve.now/CVE-2024-47415.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47417](https://cve.now/CVE-2024-47417.md): Animate | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47416](https://cve.now/CVE-2024-47416.md): Animate | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47419](https://cve.now/CVE-2024-47419.md): Animate | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Animate)
- [CVE-2024-47413](https://cve.now/CVE-2024-47413.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47420](https://cve.now/CVE-2024-47420.md): Animate | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Animate)
- [CVE-2024-47414](https://cve.now/CVE-2024-47414.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47418](https://cve.now/CVE-2024-47418.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47411](https://cve.now/CVE-2024-47411.md): Animate | Access of Uninitialized Pointer (CWE-824) (CVSS 7.8, Adobe Animate)
- [CVE-2024-47412](https://cve.now/CVE-2024-47412.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2024-45146](https://cve.now/CVE-2024-45146.md): Dimension | Use After Free (CWE-416) (CVSS 7.8, Adobe Dimension)
- [CVE-2024-45150](https://cve.now/CVE-2024-45150.md): Dimension | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Dimension)
- [CVE-2024-20787](https://cve.now/CVE-2024-20787.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2024-9451](https://cve.now/CVE-2024-9451.md): Embed PDF Viewer \<= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters (CVSS 6.4, afragen Embed PDF Viewer)
- [CVE-2024-39586](https://cve.now/CVE-2024-39586.md): Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. (CVSS 2.9, Dell AppSync)
- [CVE-2024-9449](https://cve.now/CVE-2024-9449.md): Auto iFrame \<= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter (CVSS 6.4, gregross Auto iFrame)
- [CVE-2024-39440](https://cve.now/CVE-2024-39440.md): In DRM service, there is a possible system crash due to null pointer dereference. (CVSS 6.2, Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…)
- [CVE-2024-39439](https://cve.now/CVE-2024-39439.md): In DRM service, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.2, Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…)
- [CVE-2024-39438](https://cve.now/CVE-2024-39438.md): In linkturbonative service, there is a possible command injection due to improper input validation. (CVSS 6.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2024-39437](https://cve.now/CVE-2024-39437.md): In linkturbonative service, there is a possible command injection due to improper input validation. (CVSS 6.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2024-39436](https://cve.now/CVE-2024-39436.md): In linkturbonative service, there is a possible command injection due to improper input validation. (CVSS 6.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2024-5968](https://cve.now/CVE-2024-5968.md): Photo Gallery by 10Web \<= 1.8.27 - Admin+ Stored XSS (CVSS 4.8, Photo Gallery by 10Web)
- [CVE-2024-7963](https://cve.now/CVE-2024-7963.md): CMSMasters Content Composer \<= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, CMSMasters Content Composer)
- [CVE-2023-36325](https://cve.now/CVE-2023-36325.md): i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation att (CVSS 3.7)
- [CVE-2023-37154](https://cve.now/CVE-2023-37154.md): check\_by\_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \\ (CVSS 8.4)
- [CVE-2023-45359](https://cve.now/CVE-2023-45359.md): An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. (CVSS 6.5)
- [CVE-2023-45361](https://cve.now/CVE-2023-45361.md): An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. (CVSS 6.1)
- [CVE-2023-45872](https://cve.now/CVE-2023-45872.md): An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. (CVSS 6.5)
- [CVE-2023-46586](https://cve.now/CVE-2023-46586.md): cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\\0' termination of the path for CGI scripts because strncpy is misused. (CVSS 9.1)
- [CVE-2024-25825](https://cve.now/CVE-2024-25825.md): FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the (CVSS 9.8)
- [CVE-2024-32608](https://cve.now/CVE-2024-32608.md): HDF5 library through 1.14.3 has memory corruption in H5A\_\_close resulting in the corruption of the instruction pointer and causing denial of (CVSS 9.8)
- [CVE-2024-35288](https://cve.now/CVE-2024-35288.md): Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occu (CVSS 7.8)
- [CVE-2024-42934](https://cve.now/CVE-2024-42934.md): OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi\_sim simulator, resulting in denial of service (CVSS 5.0)
- [CVE-2024-42988](https://cve.now/CVE-2024-42988.md): Lack of access control in ChallengeSolves (/api/v1/challenges/\<challenge id\>/solves) of CTFd v2.0.0 - v3.7.2 allows authenticated users to r (CVSS 4.3)
- [CVE-2024-45160](https://cve.now/CVE-2024-45160.md): Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via (CVSS 9.1)
- [CVE-2024-45179](https://cve.now/CVE-2024-45179.md): An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. (CVSS 7.2)
- [CVE-2024-45746](https://cve.now/CVE-2024-45746.md): An issue was discovered in Trusted Firmware-M through 2.1.0. (CVSS 9.8)
- [CVE-2024-46237](https://cve.now/CVE-2024-46237.md): PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in (CVSS 4.8)
- [CVE-2024-46292](https://cve.now/CVE-2024-46292.md): A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name para (CVSS 7.5)
- [CVE-2024-46304](https://cve.now/CVE-2024-46304.md): A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap\_handle\_request (CVSS 7.5)
- [CVE-2024-46307](https://cve.now/CVE-2024-46307.md): A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. (CVSS 7.5)
- [CVE-2024-46316](https://cve.now/CVE-2024-46316.md): DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub\_2C920 function at /cgi-bin/mainfunction.c (CVSS 8.0)
- [CVE-2024-47191](https://cve.now/CVE-2024-47191.md): pam\_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running (CVSS 7.1)
- [CVE-2024-48933](https://cve.now/CVE-2024-48933.md): A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML int (CVSS 6.1)
- [CVE-2024-48941](https://cve.now/CVE-2024-48941.md): The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacti (CVSS 9.1)
- [CVE-2024-48942](https://cve.now/CVE-2024-48942.md): The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the (CVSS 9.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.