Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2024

206 records · 8 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 3

  • CVE-2024-0799
    40Plan

    Authentication Bypass via wizardLogin in Arcserve Unified Data Protection

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    arcserve · udpMar 13, 2024

  • CVE-2024-0801
    43Plan

    Unauthenticated DoS in Arcserve Unified Data Protection

    HighCVSS 7.5Proof of conceptEPSS 41%

    arcserve · udpMar 13, 2024

  • CVE-2024-2242
    24Monitor

    Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    rocklobster · contact form 7Mar 13, 2024

  • CVE-2024-25228
    43Plan

    Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i

    HighCVSS 8.8No exploitEPSS 25%

    vinchin · vinchin backup and recoveryMar 13, 2024

  • CVE-2024-1222
    58Plan

    Incorrect authorization controls in PaperCut NG/MF APIs

    CriticalCVSS 9.8No exploitEPSS 63%

    papercut · papercut mfMar 13, 2024

  • CVE-2024-1883
    42Plan

    Reflected XSS in PaperCut NG/MF

    MediumCVSS 6.1No exploitEPSS 61%

    papercut · papercut mfMar 14, 2024

  • CVE-2024-1884
    37Monitor

    Server Side Request Forgery in PaperCut NG/MF

    MediumCVSS 6.5No exploitEPSS 37%

    papercut · papercut mfMar 14, 2024

  • CVE-2024-0311
    22Monitor

    A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    skyhigh · skyhigh client proxyMar 14, 2024

  • CVE-2023-42286
    39Monitor

    There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system co

    CriticalCVSS 9.8No exploitEPSS 0%

    eyoucms · eyoucmsMar 14, 2024

  • CVE-2024-26475
    22Monitor

    An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub

    MediumCVSS 5.5Proof of conceptEPSS 0%

    radare · radare2Mar 14, 2024

  • CVE-2024-26503
    36Monitor

    Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code v

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    openeclass · openeclassMar 14, 2024

  • CVE-2024-25227
    39Monitor

    SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), esca

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    abocms · abo.cmsMar 15, 2024

  • CVE-2024-28752
    38Monitor

    Apache CXF SSRF Vulnerability using the Aegis databinding

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    apache · cxfMar 15, 2024

  • CVE-2024-2193
    22Monitor

    Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.

    MediumCVSS 5.7Proof of conceptEPSS 1%

    amd · cpuMar 15, 2024

  • CVE-2024-28253
    39Monitor

    SpEL Injection in `PUT /api/v1/policies` in OpenMetadata

    HighCVSS 8.8Proof of conceptEPSS 12%

    open-metadata · openmetadataMar 15, 2024

  • CVE-2024-28254
    49Plan

    SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata

    HighCVSS 8.8WeaponizedEPSS 45%

    open-metadata · openmetadataMar 15, 2024

  • CVE-2024-28255
    61This week

    Authentication Bypass in OpenMetadata

    CriticalCVSS 9.8WeaponizedEPSS 73%

    open-metadata · openmetadataMar 15, 2024

  • CVE-2024-23298
    22Monitor

    A logic issue was addressed with improved state management.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    apple · xcodeMar 15, 2024

  • CVE-2024-28640
    34Monitor

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause

    HighCVSS 7.5No exploitEPSS 14%

    totolink · x5000r firmwareMar 16, 2024

  • CVE-2024-22513
    22Monitor

    djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    Mar 16, 2024

  • CVE-2024-20767
    89Now

    ColdFusion | Improper Access Control (CWE-284)

    HighCVSS 7.4KEVWeaponizedEPSS 98%

    adobe · coldfusionMar 18, 2024

  • CVE-2024-27937
    25Monitor

    glpi Users emails enumeration

    MediumCVSS 4.3No exploitEPSS 27%

    glpi-project · glpiMar 18, 2024

  • CVE-2024-27096
    44Plan

    SQL Injection in through the search engine

    MediumCVSS 6.5No exploitEPSS 58%

    glpi-project · glpiMar 18, 2024

  • CVE-2024-27098
    49Plan

    Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI

    CriticalCVSS 9.6No exploitEPSS 35%

    glpi-project · glpiMar 18, 2024

  • CVE-2024-27914
    24Monitor

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    MediumCVSS 6.1Proof of conceptEPSS 0%

    glpi-project · glpiMar 18, 2024

  • CVE-2024-23333
    31Monitor

    LAM vulnerable to Authenticated Remote Code Execution

    MediumCVSS 6.6No exploitEPSS 17%

    ldap-account-manager · ldap account managerMar 18, 2024

  • CVE-2024-24578
    60This week

    RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

    CriticalCVSS 9.8WeaponizedEPSS 8%

    raspberrymatic · raspberrymaticMar 18, 2024

  • CVE-2024-2621
    40Plan

    Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    kelixin communication command and dispatch project · kelixin communication command and dispatchMar 18, 2024

  • CVE-2024-22017
    29Monitor

    setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().

    HighCVSS 7.3Proof of conceptEPSS 0%

    nodejs · nodeMar 19, 2024

  • CVE-2023-40278
    31Monitor

    An issue was discovered in OpenClinic GA 5.247.01.

    HighCVSS 7.5Proof of conceptEPSS 3%

    openclinic ga project · openclinic gaMar 19, 2024

  • CVE-2023-40279
    31Monitor

    An issue was discovered in OpenClinic GA 5.247.01.

    HighCVSS 7.5Proof of conceptEPSS 3%

    openclinic ga project · openclinic gaMar 19, 2024

  • CVE-2024-28734
    25Monitor

    Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted

    MediumCVSS 6.1Proof of conceptEPSS 1%

    Mar 19, 2024

  • CVE-2024-29137
    24Monitor

    WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    themefic · tourficMar 19, 2024

  • CVE-2024-29138
    24Monitor

    WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    dev.institute · restrict user accessMar 19, 2024

  • CVE-2024-28595
    39Monitor

    SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    walterjnr1 · employee management systemMar 19, 2024

  • CVE-2024-2169
    32Monitor

    Implementations of UDP application protocols are susceptible to network loops and denial of service

    HighCVSS 7.5Proof of conceptEPSS 5%

    mikrotik · routeros-tftpMar 19, 2024

  • CVE-2024-28715
    35Monitor

    Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 functio

    HighCVSS 8.8Proof of conceptEPSS 1%

    html-js · doracmsMar 19, 2024

  • CVE-2024-2387
    24Monitor

    Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Script

    MediumCVSS 6.1Proof of conceptEPSS 1%

    nasirahmed · afi – the easiest integration pluginMar 19, 2024

  • CVE-2023-7246
    21Monitor

    System Dashboard < 2.8.10 - XSS via Header Injection

    MediumCVSS 5.4Proof of conceptEPSS 0%

    bowo · system dashboardMar 20, 2024

  • CVE-2024-0337
    24Monitor

    Travelpayouts <= 1.1.15 - Open Redirect

    MediumCVSS 6.1Proof of conceptEPSS 0%

    travelpayouts · travelpayoutsMar 20, 2024

  • CVE-2024-1800
    45Plan

    Progress Telerik Report Server Deserialization

    HighCVSS 8.8WeaponizedEPSS 34%

    progress · telerik report serverMar 20, 2024

  • CVE-2023-51444
    29Monitor

    GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    HighCVSS 7.2Proof of conceptEPSS 1%

    geoserver · geoserverMar 20, 2024

  • CVE-2024-2625
    41Plan

    Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via

    HighCVSS 8.8No exploitEPSS 21%

    google · chromeMar 20, 2024

  • CVE-2024-28231
    30Monitor

    Manipulated DATA Submessage causes a heap-buffer-overflow error

    HighCVSS 7.5Proof of conceptEPSS 0%

    eprosima · fast ddsMar 20, 2024

  • CVE-2023-49978
    35Monitor

    Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions res

    HighCVSS 8.8Proof of conceptEPSS 0%

    oretnom23 · customer support systemMar 20, 2024

  • CVE-2023-49979
    30Monitor

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the applicat

    HighCVSS 7.5Proof of conceptEPSS 0%

    mayurik · best student management systemMar 20, 2024

  • CVE-2023-49980
    30Monitor

    A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files wit

    HighCVSS 7.5Proof of conceptEPSS 0%

    mayurik · best student result management systemMar 20, 2024

  • CVE-2023-49981
    30Monitor

    A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the

    HighCVSS 7.5Proof of conceptEPSS 0%

    oretnom23 · school fees management systemMar 20, 2024

  • CVE-2023-49982
    35Monitor

    Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges

    HighCVSS 8.8Proof of conceptEPSS 0%

    oretnom23 · school fees management systemMar 20, 2024

  • CVE-2023-49983
    27Monitor

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to exec

    MediumCVSS 6.8Proof of conceptEPSS 0%

    oretnom23 · school fees management systemMar 20, 2024

  • CVE-2023-49984
    24Monitor

    A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to e

    MediumCVSS 6.1Proof of conceptEPSS 0%

    oretnom23 · school fees management systemMar 20, 2024

  • CVE-2023-49985
    26Monitor

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to exec

    MediumCVSS 6.5Proof of conceptEPSS 0%

    oretnom23 · school fees management systemMar 20, 2024

  • CVE-2024-27292
    51Plan

    Docassemble unauthorized access through URL manipulation

    HighCVSS 7.5Proof of conceptEPSS 69%

    jhpyle · docassembleMar 20, 2024

  • CVE-2024-2053
    43Plan

    Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 44%

    articatech · artica proxyMar 20, 2024

  • CVE-2024-2054
    63This week

    Artica Proxy Unauthenticated PHP Deserialization Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 81%

    articatech · artica proxyMar 20, 2024

  • CVE-2024-1538
    38Monitor

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    HighCVSS 8.8No exploitEPSS 10%

    filemanagerpro · file managerMar 21, 2024

  • CVE-2024-27956
    67This week

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 94%

    valvepress · automaticMar 21, 2024

  • CVE-2024-27921
    53Plan

    Grav File Upload Path Traversal vulnerability

    HighCVSS 8.8No exploitEPSS 60%

    getgrav · gravMar 21, 2024

  • CVE-2024-28116
    37Monitor

    Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

    HighCVSS 8.8Proof of conceptEPSS 5%

    getgrav · gravMar 21, 2024

  • CVE-2024-29272
    29Monitor

    Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and o

    MediumCVSS 6.5Proof of conceptEPSS 9%

    vvveb · vvvebjsMar 22, 2024

  • CVE-2024-29275
    40Plan

    SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive i

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    seacms · seacmsMar 22, 2024

  • CVE-2024-29943
    46Plan

    An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination.

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    mozilla · firefoxMar 22, 2024

  • CVE-2024-2448
    52Plan

    LoadMaster Command Injection Vulnerability

    HighCVSS 8.8No exploitEPSS 55%

    progress · loadmasterMar 22, 2024

  • CVE-2024-2449
    34Monitor

    LoadMaster Cross-Site Request Forgery (CSRF)

    HighCVSS 7.5No exploitEPSS 12%

    progress · loadmasterMar 22, 2024

  • CVE-2024-29059
    90Now

    .NET Framework Information Disclosure Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 98%

    microsoft · .net frameworkMar 22, 2024

  • CVE-2024-24725
    50Plan

    Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the mod

    HighCVSS 8.8WeaponizedEPSS 51%

    gibbonedu · gibbonMar 23, 2024

  • CVE-2024-2862
    54Plan

    Password reset vulnerability without authorization on LG LED Assistant

    CriticalCVSS 9.8Proof of conceptEPSS 51%

    lg · lg led assistantMar 25, 2024

  • CVE-2024-2863
    58Plan

    Path traversal via file upload on LG LED Assistant

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    lg · lg led assistantMar 25, 2024

  • CVE-2024-25175
    24Monitor

    An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    kickdler · kickdlerMar 25, 2024

  • CVE-2024-29041
    24Monitor

    Express.js Open Redirect in malformed URLs

    MediumCVSS 6.1No exploitEPSS 0%

    openjsf · expressMar 25, 2024

  • CVE-2024-23722
    30Monitor

    In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-

    HighCVSS 7.5Proof of conceptEPSS 0%

    treasuredata · fluent bitMar 26, 2024

  • CVE-2023-28787
    38Monitor

    WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    expresstech · quiz and survey masterMar 26, 2024

  • CVE-2023-29386
    36Monitor

    WordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    julien crego · manager for icomoonMar 26, 2024

  • CVE-2023-47873
    29Monitor

    WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability

    HighCVSS 7.2Proof of conceptEPSS 2%

    wensolutions · wp child theme generatorMar 26, 2024

  • CVE-2023-48777
    36Monitor

    WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

    HighCVSS 8.8Proof of conceptEPSS 4%

    elementor · website builderMar 26, 2024

  • CVE-2024-2887
    35Monitor

    Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML

    HighCVSS 7.7Proof of conceptEPSS 17%

    google · chromeMar 26, 2024

  • CVE-2024-25734
    31Monitor

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    HighCVSS 7.5Proof of conceptEPSS 4%

    wyrestorm · apollo vx20 firmwareMar 26, 2024

  • CVE-2024-25735
    51Plan

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    CriticalCVSS 9.1Proof of conceptEPSS 50%

    wyrestorm · apollo vx20 firmwareMar 26, 2024

  • CVE-2024-25736
    31Monitor

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    HighCVSS 7.5Proof of conceptEPSS 4%

    wyrestorm · apollo vx20 firmwareMar 26, 2024

  • CVE-2023-40289
    33Monitor

    A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

    HighCVSS 7.2Proof of conceptEPSS 18%

    supermicro · x11ssm-f firmwareMar 27, 2024

  • CVE-2023-31634
    39Monitor

    In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    teslamate · teslamateMar 27, 2024

  • CVE-2024-30194
    24Monitor

    WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    sunshinephotocart · sunshine photo cartMar 27, 2024

  • CVE-2024-29931
    24Monitor

    WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    codecabin · wp go mapsMar 27, 2024

  • CVE-2024-2398
    45Plan

    HTTP/2 push headers memory-leak

    HighCVSS 8.6No exploitEPSS 36%

    haxx · curlMar 27, 2024

  • CVE-2024-28784
    21Monitor

    IBM QRadar cross-site scripting

    MediumCVSS 5.4Proof of conceptEPSS 0%

    ibm · qradar security information and event managerMar 27, 2024

  • CVE-2024-29792
    24Monitor

    WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    unlimited-elements · unlimited elements for elementorMar 27, 2024

  • CVE-2023-34020
    24Monitor

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability

    MediumCVSS 6.1Proof of conceptEPSS 0%

    uncannyowl · uncanny toolkit for learndashMar 27, 2024

  • CVE-2024-1540
    33Monitor

    Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

    HighCVSS 8.2Proof of conceptEPSS 1%

    gradio project · gradioMar 27, 2024

  • CVE-2024-28085
    14Monitor

    wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals t

    LowCVSS 3.3Proof of conceptEPSS 2%

    kernel · util-linuxMar 27, 2024

  • CVE-2024-28247
    26Monitor

    Pihole Authenticated Arbitrary File Read with root privileges

    MediumCVSS 6.5Proof of conceptEPSS 1%

    pi-hole · pi-holeMar 27, 2024

  • CVE-2024-2997
    21Monitor

    Bdtask Multi-Store Inventory Management System cross site scripting

    MediumCVSS 5.4Proof of conceptEPSS 1%

    bdtask · multi store inventory management systemMar 27, 2024

  • CVE-2024-3013
    15Monitor

    Teledyne FLIR AX8 User Registration test_login.php improper authorization

    LowCVSS 2.1No exploitEPSS 22%

    flir · flir ax8 firmwareMar 27, 2024

  • CVE-2024-29882
    24Monitor

    SRS DOM - XSS on JSONP callback

    MediumCVSS 6.1Proof of conceptEPSS 1%

    ossrs · simple realtime serverMar 28, 2024

  • CVE-2024-31138
    43Plan

    In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

    MediumCVSS 5.4No exploitEPSS 74%

    jetbrains · teamcityMar 28, 2024

  • CVE-2023-42931
    31Monitor

    The issue was addressed with improved checks.

    HighCVSS 7.8Proof of conceptEPSS 1%

    apple · macosMar 28, 2024

  • CVE-2024-23727
    33Monitor

    The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary

    HighCVSS 8.4Proof of conceptEPSS 0%

    Mar 28, 2024

  • CVE-2024-30490
    40Plan

    WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    metagauss · profilegridMar 29, 2024

  • CVE-2024-30491
    45Plan

    WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 32%

    metagauss · profilegridMar 29, 2024

  • CVE-2024-30498
    41Plan

    WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 10.0Proof of conceptEPSS 2%

    crmperks · crm perks formsMar 29, 2024

  • CVE-2024-27619
    29Monitor

    Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow.

    HighCVSS 7.3Proof of conceptEPSS 0%

    Mar 29, 2024