Our news and updates

In MySQL versions 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior a medium severity vulnerability CVE-2024-21219 was detected. This vulnerability allows high-privileged attackers to crash MySQL Server, causing a denial of service (DoS). To fix this problem, users should upgrade to versions 8.0.40, 8.4.3, or 9.0.2. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-21219.

In Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 a high severity vulnerability CVE-2024-45133 was detected. This vulnerability allows attackers with admin access to bypass security features, potentially exposing sensitive information and enabling further attacks. To fix this issue, users should upgrade Adobe Commerce to versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and 2.4.4-p11. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-45133.

In Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 a medium severity vulnerability CVE-2024-45130 was detected. This vulnerability allows attackers with limited access to bypass security restrictions and perform unauthorized actions within the system. To fix this issue, users should upgrade Adobe Commerce to versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and 2.4.4-p11. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-45130.

In Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10 a medium severity vulnerability CVE-2024-45131 was detected. This vulnerability allows attackers with limited access to bypass security restrictions and potentially access sensitive information or perform unauthorized actions within Adobe Commerce. To fix this issue, users should upgrade Adobe Commerce to versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and 2.4.4-p11. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-45131.

In MySQL versions 8.4.2 and prior, and 9.0.1 and prior a low severity vulnerability CVE-2024-21244 was detected. This vulnerability allows attackers with high privileges to gain unauthorized access to sensitive data in MySQL Server through various network protocols. To fix this issue, users should upgrade MySQL to versions 8.4.3 and later, 9.0.2 and later. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-21244.

In MySQL versions 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior a medium severity vulnerability CVE-2024-21241 was detected. This vulnerability in Oracle MySQL’s Server Optimizer allows a high-privileged attacker with network access to cause a denial of service (DoS) by crashing or hanging the MySQL server. Currently there’s no patch version for this vulnerability. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-21241.

In HAProxy versions 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 a medium severity vulnerability CVE-2024-49214 was detected. This vulnerability allows attackers to open a 0-RTT session with a spoofed IP address, bypassing the IP allow/block list functionality. To address this issue, update to version 3.1-dev7, 3.0.5, or 2.9.11. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-49214.

In Next.js versions 10.x, 11.x, 12.x, 13.x, and 14.x prior to version 14.2.7 a medium severity vulnerability CVE-2024-47831 was detected. This vulnerability allows attackers to trigger a Denial of Service condition, potentially causing excessive CPU consumption. To address this issue, update Next.js to version 14.2.7 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-47831.

In Magento (Adobe Commerce) versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10 a medium severity vulnerability CVE-2024-45135 was detected. This vulnerability allows attackers with admin access to bypass security measures in Adobe Commerce, so it’s essential to upgrade and review admin rights regularly. To fix this issue, users should upgrade Adobe Commerce to versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and 2.4.4-p11. For more details, visit https://nvd.nist.gov/vuln/detail/cve-2024-45135.