Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2024

264 records · 13 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 3

  • CVE-2024-33775
    35Monitor

    An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet.

    HighCVSS 8.8Proof of conceptEPSS 1%

    nagios · nagios xiMay 1, 2024

  • CVE-2024-26304
    52Plan

    There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba centralMay 1, 2024

  • CVE-2024-26305
    44Plan

    There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendin

    CriticalCVSS 9.8No exploitEPSS 15%

    arubanetworks · sd-wanMay 1, 2024

  • CVE-2024-33511
    43Plan

    There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execut

    CriticalCVSS 9.8No exploitEPSS 14%

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba centralMay 1, 2024

  • CVE-2024-33512
    43Plan

    There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated rem

    CriticalCVSS 9.8No exploitEPSS 14%

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba centralMay 1, 2024

  • CVE-2023-49606
    58Plan

    A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0.

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    tinyproxy project · tinyproxyMay 1, 2024

  • CVE-2024-32962
    40Plan

    XML signature verification bypass due improper verification of signature / signature spoofing

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    node-saml · xml-cryptoMay 2, 2024

  • CVE-2024-32114
    37Monitor

    Apache ActiveMQ: Jolokia and REST API were not secured with default configuration

    HighCVSS 8.8Proof of conceptEPSS 7%

    apache · activemqMay 2, 2024

  • CVE-2024-33911
    28Monitor

    WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability

    HighCVSS 7.2Proof of conceptEPSS 1%

    weblizar · school managementMay 2, 2024

  • CVE-2024-34061
    17Monitor

    Reflected cross site scripting in changedetection.io

    MediumCVSS 4.3Proof of conceptEPSS 1%

    dgtlmoon · changedetection.ioMay 2, 2024

  • CVE-2024-34144
    53Plan

    A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows

    CriticalCVSS 9.8Proof of conceptEPSS 48%

    jenkins · script securityMay 2, 2024

  • CVE-2024-4406
    39Monitor

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

    CriticalCVSS 9.6Proof of conceptEPSS 2%

    mi · xiaomi 13 pro firmwareMay 2, 2024

  • CVE-2023-50685
    30Monitor

    An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port pa

    HighCVSS 7.5Proof of conceptEPSS 1%

    May 2, 2024

  • CVE-2024-31964
    30Monitor

    A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conferen

    HighCVSS 7.5Proof of conceptEPSS 0%

    May 2, 2024

  • CVE-2024-0710
    21Monitor

    GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification

    MediumCVSS 5.3Proof of conceptEPSS 1%

    gravity wiz · gp unique idMay 2, 2024

  • CVE-2024-2667
    41Plan

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    instawp · instawp connectMay 2, 2024

  • CVE-2024-2876
    63This week

    Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

    CriticalCVSS 9.8Proof of conceptEPSS 80%

    icegram · email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressMay 2, 2024

  • CVE-2024-3553
    26Monitor

    Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update

    MediumCVSS 6.5Proof of conceptEPSS 0%

    themeum · tutor lmsMay 2, 2024

  • CVE-2023-27326
    32Monitor

    Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability

    HighCVSS 8.2Proof of conceptEPSS 1%

    parallels · parallels desktopMay 2, 2024

  • CVE-2023-27327
    30Monitor

    Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 0%

    parallels · parallels desktopMay 2, 2024

  • CVE-2023-27346
    35Monitor

    TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    tp-link · archer ax21 firmwareMay 2, 2024

  • CVE-2023-27363
    45Plan

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 46%

    foxit · pdf editorMay 2, 2024

  • CVE-2023-32148
    35Monitor

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability

    MediumCVSS 6.5No exploitEPSS 28%

    dlink · dir-2640 firmwareMay 2, 2024

  • CVE-2023-32150
    35Monitor

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability

    MediumCVSS 6.8No exploitEPSS 26%

    dlink · dir-2640 firmwareMay 2, 2024

  • CVE-2023-32152
    35Monitor

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability

    MediumCVSS 6.5No exploitEPSS 28%

    dlink · dir-2640 firmwareMay 2, 2024

  • CVE-2023-32153
    34Monitor

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability

    MediumCVSS 6.8No exploitEPSS 23%

    dlink · dir-2640 firmwareMay 2, 2024

  • CVE-2023-32164
    55Plan

    D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 84%

    dlink · d-view 8May 2, 2024

  • CVE-2023-32165
    61This week

    D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 73%

    dlink · d-view 8May 2, 2024

  • CVE-2023-32166
    54Plan

    D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability

    HighCVSS 8.1No exploitEPSS 74%

    dlink · d-view 8May 2, 2024

  • CVE-2023-32167
    49Plan

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability

    MediumCVSS 6.5No exploitEPSS 76%

    dlink · d-view 8May 2, 2024

  • CVE-2023-32169
    56Plan

    D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 56%

    dlink · d-view 8May 2, 2024

  • CVE-2023-35744
    36Monitor

    D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 3%

    dlink · dap-2622 firmwareMay 2, 2024

  • CVE-2023-38095
    55Plan

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 65%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-38096
    64This week

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 82%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-38098
    40Plan

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

    HighCVSS 8.8WeaponizedEPSS 12%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-38099
    52Plan

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 56%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-38120
    36Monitor

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 3%

    adtran · sr400ac firmwareMay 2, 2024

  • CVE-2023-38124
    53Plan

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 59%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-39469
    46Plan

    PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 61%

    papercut · papercut mfMay 2, 2024

  • CVE-2023-39473
    54Plan

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 62%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-39475
    58Plan

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 64%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-40477
    34Monitor

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 11%

    rarlab · winrarMay 2, 2024

  • CVE-2023-40481
    35Monitor

    7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 13%

    7-zip · 7-zipMay 2, 2024

  • CVE-2023-40492
    61This week

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 83%

    lg · simple editorMay 2, 2024

  • CVE-2023-40494
    61This week

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 83%

    lg · simple editorMay 2, 2024

  • CVE-2023-40495
    53Plan

    LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 75%

    lg · simple editorMay 2, 2024

  • CVE-2023-40496
    53Plan

    LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 75%

    lg · simple editorMay 2, 2024

  • CVE-2023-40497
    60This week

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 69%

    lg · simple editorMay 2, 2024

  • CVE-2023-40498
    65This week

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 85%

    lg · simple editorMay 2, 2024

  • CVE-2023-40502
    61This week

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 83%

    lg · simple editorMay 2, 2024

  • CVE-2023-40504
    66This week

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 88%

    lg · simple editorMay 2, 2024

  • CVE-2023-41182
    54Plan

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 62%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-41183
    39Monitor

    NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability

    HighCVSS 8.8No exploitEPSS 13%

    netgear · rbr760 firmwareMay 2, 2024

  • CVE-2023-42114
    29Monitor

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

    MediumCVSS 5.3No exploitEPSS 26%

    exim · eximMay 2, 2024

  • CVE-2023-42115
    43Plan

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    exim · eximMay 2, 2024

  • CVE-2023-44412
    57Plan

    D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability

    HighCVSS 8.2No exploitEPSS 82%

    dlink · d-view 8May 2, 2024

  • CVE-2023-44441
    39Monitor

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 27%

    gimp · gimpMay 2, 2024

  • CVE-2023-44442
    49Plan

    GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 61%

    gimp · gimpMay 2, 2024

  • CVE-2023-44443
    59Plan

    GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 93%

    gimp · gimpMay 2, 2024

  • CVE-2023-44444
    48Plan

    GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 56%

    gimp · gimpMay 2, 2024

  • CVE-2023-44449
    51Plan

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 52%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-44450
    51Plan

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 53%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-44451
    32Monitor

    Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 1%

    linuxmint · xreaderMay 2, 2024

  • CVE-2023-44452
    31Monitor

    Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 1%

    linuxmint · xreaderMay 2, 2024

  • CVE-2023-50218
    52Plan

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 55%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50223
    51Plan

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 54%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50224
    62This week

    TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

    MediumCVSS 6.5KEVWeaponizedEPSS 20%

    tp-link · tl-wr841n firmwareMay 2, 2024

  • CVE-2023-50226
    31Monitor

    Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 0%

    parallels · parallels desktopMay 2, 2024

  • CVE-2023-50231
    54Plan

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

    CriticalCVSS 9.6No exploitEPSS 53%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2023-51587
    41Plan

    Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 36%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51595
    53Plan

    Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 48%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2024-4439
    45Plan

    WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due t

    MediumCVSS 6.1Proof of conceptEPSS 71%

    wordpress · wordpressMay 3, 2024

  • CVE-2024-30851
    60This week

    Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downl

    MediumCVSS 6.5WeaponizedEPSS 4%

    codesiddhant · jasmin-ransomwareMay 3, 2024

  • CVE-2024-34469
    28Monitor

    Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

    HighCVSS 7.1Proof of conceptEPSS 0%

    rukovoditel · rukovoditelMay 4, 2024

  • CVE-2024-34474
    31Monitor

    Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM.

    HighCVSS 7.8Proof of conceptEPSS 0%

    May 5, 2024

  • CVE-2024-4548
    60This week

    Delta Electronics DIAEnergie SQL Injection

    CriticalCVSS 9.8WeaponizedEPSS 29%

    deltaww · diaenergieMay 6, 2024

  • CVE-2024-33111
    21Monitor

    D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    dlink · dir-845l firmwareMay 6, 2024

  • CVE-2024-33113
    22Monitor

    D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

    MediumCVSS 5.3Proof of conceptEPSS 3%

    dlink · dir-845l firmwareMay 6, 2024

  • CVE-2024-34064
    21Monitor

    Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

    MediumCVSS 5.4Proof of conceptEPSS 0%

    palletsprojects · jinjaMay 6, 2024

  • CVE-2024-34069
    60This week

    Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

    HighCVSS 7.5WeaponizedEPSS 3%

    palletsprojects · werkzeugMay 6, 2024

  • CVE-2024-34470
    36Monitor

    An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.

    HighCVSS 8.6Proof of conceptEPSS 6%

    hsclabs · mailinspectorMay 6, 2024

  • CVE-2024-34472
    22Monitor

    An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    hsclabs · mailinspectorMay 6, 2024

  • CVE-2024-34471
    21Monitor

    An issue was discovered in HSC Mailinspector 5.2.17-3.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    hsclabs · mailinspectorMay 6, 2024

  • CVE-2024-3661
    31Monitor

    DHCP routing options can manipulate interface-based VPN traffic

    HighCVSS 7.6Proof of conceptEPSS 4%

    fortinet · forticlientMay 6, 2024

  • CVE-2024-30973
    35Monitor

    An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitiv

    HighCVSS 8.8Proof of conceptEPSS 0%

    May 6, 2024

  • CVE-2024-20866
    26Monitor

    Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step.

    MediumCVSS 6.6No exploitEPSS 0%

    samsung · androidMay 7, 2024

  • CVE-2023-46012
    39Monitor

    Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    linksys · ea7500 firmwareMay 7, 2024

  • CVE-2024-29889
    51Plan

    GLPI contains an SQL injection through the saved searches

    HighCVSS 8.1Proof of conceptEPSS 64%

    glpi-project · glpiMay 7, 2024

  • CVE-2024-31456
    44Plan

    GLPI contains an authenticated SQL injection

    MediumCVSS 6.5No exploitEPSS 59%

    glpi-project · glpiMay 7, 2024

  • CVE-2024-32369
    17Monitor

    SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive infor

    MediumCVSS 4.3Proof of conceptEPSS 0%

    hsclabs · mailinspectorMay 7, 2024

  • CVE-2024-32370
    39Monitor

    An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafte

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    hsclabs · mailinspectorMay 7, 2024

  • CVE-2024-32371
    30Monitor

    An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain a

    HighCVSS 7.5Proof of conceptEPSS 0%

    hsclabs · mailinspectorMay 7, 2024

  • CVE-2024-23708
    31Monitor

    In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has b

    HighCVSS 7.8Proof of conceptEPSS 0%

    google · androidMay 7, 2024

  • CVE-2024-23709
    26Monitor

    In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    google · androidMay 7, 2024

  • CVE-2024-34568
    23Monitor

    WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9Proof of conceptEPSS 0%

    themeqx · letterpressMay 8, 2024

  • CVE-2024-21793
    32Monitor

    BIG-IP Central Manager OData Injection Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 7%

    f5 · big-ip next central managerMay 8, 2024

  • CVE-2024-26026
    32Monitor

    BIG-IP Central Manager SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 7%

    f5 · big-ip next central managerMay 8, 2024

  • CVE-2024-32113
    99Now

    Apache OFBiz: Path traversal leading to RCE

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    apache · ofbizMay 8, 2024

  • CVE-2024-24787
    25Monitor

    Arbitrary code execution during build on Darwin in cmd/go

    MediumCVSS 6.4Proof of conceptEPSS 0%

    go toolchain · cmd/goMay 8, 2024

  • CVE-2024-34257
    40Plan

    TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrar

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    totolink · ex1800t firmwareMay 8, 2024