CVEs published in August 2024
19 tracked CVEs from 6 vendors had their first vendor advisory published in August 2024: 1 critical, 7 high, 1 in CISA KEV. Newest first.
8 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-42154Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-40766UnratedCISA KEV
SonicWall SonicOS Improper Access Control Vulnerability
SonicWall · 1 advisory - Added
CVE-2024-7634Medium
NGINX Agent's "config_dirs" restriction feature
F5 · 1 advisory - Added
CVE-2024-21690High
Confluence Data Center: This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0…
Atlassian · 1 advisory - Added
CVE-2024-21689High
Confluence: This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0…
Atlassian · 1 advisory - Added
CVE-2023-52340High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-7347Medium
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might
F5 · 1 advisory - Added
CVE-2024-41727High
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC…
F5 · 1 advisory - Added
CVE-2024-41723Medium
BIG-IP: Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.
F5 · 1 advisory - Added
CVE-2024-41719Medium
When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged…
F5 · 1 advisory - Added
CVE-2024-41164Medium
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions…
F5 · 1 advisory - Added
CVE-2024-39809High
The Central Manager user session refresh token does not expire when a user logs out.
F5 · 1 advisory - Added
CVE-2024-39792High
When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests
F5 · 1 advisory - Added
CVE-2024-39778High
When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests
F5 · 1 advisory - Added
CVE-2024-37028Medium
BIG-IP Next: BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.
F5 · 1 advisory - Added
CVE-2024-32765Medium
QTS: vulnerability has been reported to affect Network & Virtual Switch.
QNAP · 1 advisory - Added
CVE-2024-20479Medium
Cisco Identity Services Engine Software: vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface
Cisco · 1 advisory - Added
CVE-2024-20443Medium
Cisco Adaptive Security Appliance (ASA) Software: vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface
Cisco · 1 advisory - Added
CVE-2024-41110Critical
Docker Vulnerability in NetApp Products
NetApp · 1 advisory