Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2024

163 records · 13 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2024-46982
    48Plan

    Cache Poisoning in next.js

    HighCVSS 7.5Proof of conceptEPSS 59%

    vercel · next.jsSep 17, 2024

  • CVE-2024-43971
    24Monitor

    WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    sunshinephotocart · sunshine photo cartSep 17, 2024

  • CVE-2024-39081
    16Monitor

    An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications.

    MediumCVSS 4.2Proof of conceptEPSS 0%

    jktyre · smart tyre car \& bikeSep 18, 2024

  • CVE-2024-44542
    39Monitor

    SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    todesk · todeskSep 18, 2024

  • CVE-2023-47105
    35Monitor

    exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without aut

    HighCVSS 8.6Proof of conceptEPSS 1%

    Sep 18, 2024

  • CVE-2024-46986
    50Plan

    Arbitrary file write leading to RCE in Camaleon CMS

    CriticalCVSS 9.9Proof of conceptEPSS 37%

    tuzitio · camaleon cmsSep 18, 2024

  • CVE-2024-46987
    40Plan

    Arbitrary path traversal in Camaleon CMS

    HighCVSS 7.7WeaponizedEPSS 14%

    tuzitio · camaleon cmsSep 18, 2024

  • CVE-2024-46377
    39Monitor

    Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/a

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    mayurik · best house rental management systemSep 18, 2024

  • CVE-2024-8698
    31Monitor

    Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

    HighCVSS 7.7Proof of conceptEPSS 2%

    red hat · red hat build of keycloakSep 19, 2024

  • CVE-2024-8883
    25Monitor

    Keycloak: vulnerable redirect uri validation results in open redirec

    MediumCVSS 6.1Proof of conceptEPSS 2%

    redhat · build of keycloakSep 19, 2024

  • CVE-2024-8963
    96Now

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

    CriticalCVSS 9.1KEVWeaponizedEPSS 98%

    ivanti · endpoint manager cloud services applianceSep 19, 2024

  • CVE-2024-9004
    26Monitor

    D-Link DAR-7000 Backup_Server_commit.php os command injection

    MediumCVSS 5.3No exploitEPSS 16%

    dlink · dar-7000 firmwareSep 19, 2024

  • CVE-2023-27584
    49Plan

    Dragonfly2 vulnerable to hard coded cyptographic key

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    linuxfoundation · dragonflySep 19, 2024

  • CVE-2024-45410
    30Monitor

    HTTP client can remove the X-Forwarded headers in Traefik

    HighCVSS 7.5Proof of conceptEPSS 1%

    traefik · traefikSep 19, 2024

  • CVE-2024-45614
    21Monitor

    Header normalization allows for client to clobber proxy set headers in Puma

    MediumCVSS 5.4Proof of conceptEPSS 0%

    puma · pumaSep 19, 2024

  • CVE-2024-9007
    21Monitor

    jeanmarc77 123solar detailed.php cross site scripting

    MediumCVSS 5.3Proof of conceptEPSS 1%

    jeanmarc77 · 123solarSep 19, 2024

  • CVE-2024-42346
    21Monitor

    Stored Cross Site Scripting (Stored XSS) in Galaxy

    MediumCVSS 5.4Proof of conceptEPSS 0%

    galaxyproject · galaxySep 20, 2024

  • CVE-2024-47062
    38Monitor

    Multiple SQL Injections and ORM Leak in navidrome

    CriticalCVSS 9.4Proof of conceptEPSS 4%

    navidrome · navidromeSep 20, 2024

  • CVE-2024-42323
    37Monitor

    Apache HertzBeat: RCE by snakeYaml deser load malicious xml

    HighCVSS 8.8Proof of conceptEPSS 8%

    apache · hertzbeatSep 21, 2024

  • CVE-2024-9076
    26Monitor

    DedeCMS article_string_mix.php os command injection

    MediumCVSS 5.1No exploitEPSS 20%

    dedecms · dedecmsSep 21, 2024

  • CVE-2024-43989
    34Monitor

    WordPress Justified Image Grid plugin <= 4.6.1 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.5No exploitEPSS 12%

    firsh · justified image gridSep 22, 2024

  • CVE-2024-23922
    28Monitor

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

    MediumCVSS 6.8Proof of conceptEPSS 1%

    sony · xav-ax5500 firmwareSep 23, 2024

  • CVE-2024-47066
    39Monitor

    Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

    HighCVSS 8.8Proof of conceptEPSS 11%

    lobehub · lobe chatSep 23, 2024

  • CVE-2024-9014
    29Monitor

    OAuth2 client id and secret exposed through the web browser in pgAdmin 4

    MediumCVSS 6.5Proof of conceptEPSS 9%

    pgadmin · pgadmin 4Sep 23, 2024

  • CVE-2023-46948
    21Monitor

    A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbit

    MediumCVSS 5.4Proof of conceptEPSS 0%

    Sep 23, 2024

  • CVE-2024-42861
    30Monitor

    An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted Pdelay_Req message

    HighCVSS 7.5Proof of conceptEPSS 1%

    linuxptp project · linuxptpSep 23, 2024

  • CVE-2023-5359
    30Monitor

    W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

    HighCVSS 7.5Proof of conceptEPSS 0%

    boldgrid · w3 total cacheSep 24, 2024

  • CVE-2024-21545
    32Monitor

    Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization.

    HighCVSS 8.2Proof of conceptEPSS 0%

    proxmox · pve-managerSep 24, 2024

  • CVE-2024-8877
    50Plan

    Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204.

    MediumCVSS 6.9Proof of conceptEPSS 77%

    riello-ups · netman 204 firmwareSep 24, 2024

  • CVE-2024-8349
    28Monitor

    Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

    HighCVSS 7.2Proof of conceptEPSS 1%

    uncannyowl · uncanny groups for learndashSep 24, 2024

  • CVE-2024-8484
    31Monitor

    REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 3%

    jianbo · rest api to miniprogramSep 24, 2024

  • CVE-2024-8275
    54Plan

    The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection

    CriticalCVSS 9.8Proof of conceptEPSS 49%

    stellarwp · the events calendarSep 25, 2024

  • CVE-2024-6845
    21Monitor

    SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 1%

    webdigit · chatbot with chatgptSep 25, 2024

  • CVE-2024-7479
    35Monitor

    Improper signature verification of VPN driver installation in TeamViewer Remote Clients

    HighCVSS 8.8Proof of conceptEPSS 0%

    teamviewer · remote full clientSep 25, 2024

  • CVE-2024-6592
    37Monitor

    WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    watchguard · authentication gatewaySep 25, 2024

  • CVE-2024-20467
    34Monitor

    A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, rem

    HighCVSS 8.6Proof of conceptEPSS 0%

    cisco · ios xeSep 25, 2024

  • CVE-2024-0132
    45Plan

    NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration

    HighCVSS 8.3Proof of conceptEPSS 40%

    nvidia · nvidia container toolkitSep 26, 2024

  • CVE-2024-6517
    24Monitor

    Contact Form 7 Math Captcha <= 2.0.1 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 0%

    dotsquares · contact form 7 math captchaSep 26, 2024

  • CVE-2024-46627
    37Monitor

    Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.

    CriticalCVSS 9.1Proof of conceptEPSS 4%

    Sep 26, 2024

  • CVE-2024-9166
    37Monitor

    OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    atelmo · atemio am 520 hd full hd satellite receiverSep 26, 2024

  • CVE-2024-8118
    20Monitor

    Grafana alerting wrong permission on datasource rule write endpoint

    MediumCVSS 5.1Proof of conceptEPSS 0%

    grafana · grafanaSep 26, 2024

  • CVE-2024-46628
    43Plan

    Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName paramet

    CriticalCVSS 9.8No exploitEPSS 11%

    tendacn · g3 firmwareSep 26, 2024

  • CVE-2024-47179
    35Monitor

    RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning which may lead to a full repository takeover.

    HighCVSS 8.8Proof of conceptEPSS 0%

    diygod · rsshubSep 26, 2024

  • CVE-2024-6769
    33Monitor

    Medium to High Integrity Privilege Escalation in Microsoft Windows

    HighCVSS 8.4Proof of conceptEPSS 1%

    microsoft · windows 10Sep 26, 2024

  • CVE-2024-40506
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitalit

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 26, 2024

  • CVE-2024-40507
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 26, 2024

  • CVE-2024-40508
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 26, 2024

  • CVE-2024-47076
    60This week

    libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server

    HighCVSS 8.6WeaponizedEPSS 79%

    openprinting · libcupsfiltersSep 26, 2024

  • CVE-2024-47175
    60This week

    libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

    CriticalCVSS 9.8WeaponizedEPSS 63%

    openprinting · libppdSep 26, 2024

  • CVE-2024-47176
    60This week

    cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

    MediumCVSS 5.3WeaponizedEPSS 50%

    openprinting · cups-browsedSep 26, 2024

  • CVE-2024-7714
    30Monitor

    AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

    HighCVSS 7.5Proof of conceptEPSS 0%

    ays-pro · chatgpt assistantSep 27, 2024

  • CVE-2024-6931
    29Monitor

    The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 16%

    stellarwp · the events calendarSep 27, 2024

  • CVE-2024-40511
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmi

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 27, 2024

  • CVE-2024-40512
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 27, 2024

  • CVE-2024-40509
    29Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asm

    HighCVSS 7.3Proof of conceptEPSS 0%

    openpetra · openpetraSep 27, 2024

  • CVE-2024-40510
    32Monitor

    Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asm

    HighCVSS 8.2Proof of conceptEPSS 0%

    openpetra · openpetraSep 27, 2024

  • CVE-2024-25411
    24Monitor

    A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

    MediumCVSS 6.1Proof of conceptEPSS 0%

    flatpress · flatpressSep 27, 2024

  • CVE-2024-25412
    24Monitor

    A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

    MediumCVSS 6.1Proof of conceptEPSS 1%

    flatpress · flatpressSep 27, 2024

  • CVE-2024-46256
    40Plan

    A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certi

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    jc21 · nginx proxy managerSep 27, 2024

  • CVE-2024-8353
    60This week

    GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8WeaponizedEPSS 32%

    givewp · givewpSep 27, 2024

  • CVE-2024-9326
    27Monitor

    PHPGurukul Online Shopping Portal Admin Panel index.php sql injection

    MediumCVSS 6.9Proof of conceptEPSS 1%

    phpgurukul · online shopping portalSep 29, 2024

  • CVE-2024-45200
    25Monitor

    In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based

    MediumCVSS 6.3Proof of conceptEPSS 1%

    Sep 30, 2024

  • CVE-2024-46635
    23Monitor

    An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information

    MediumCVSS 5.9Proof of conceptEPSS 0%

    Sep 30, 2024