İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2024: sömürülen ve yeni ciddi CVE kayıtları

185 kayıt · 15 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2023-6000
    25İzleyin

    Popup Builder < 4.2.3 - Unauthenticated Stored XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    sygnoos · popup builder1 Oca 2024

  • CVE-2023-6421
    31İzleyin

    Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    w3eden · download manager1 Oca 2024

  • CVE-2023-50094
    39İzleyin

    reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    yogeshojha · rengine1 Oca 2024

  • CVE-2024-0195
    45Planlayın

    spider-flow FunctionController.java FunctionService.saveFunction code injection

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    ssssssss · spider-flow2 Oca 2024

  • CVE-2024-21907
    40Planlayın

    Improper Handling of Exceptional Conditions in Newtonsoft.Json

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    newtonsoft · json.net3 Oca 2024

  • CVE-2024-21633
    31İzleyin

    Arbitrary file write on Decoding

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    apktool · apktool3 Oca 2024

  • CVE-2023-49442
    51Planlayın

    Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POS

    KritikCVSS 9,8İstismar yokEPSS %38

    jeecg · jeecg3 Oca 2024

  • CVE-2024-0223
    38İzleyin

    Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8İstismar yokEPSS %10

    google · chrome3 Oca 2024

  • CVE-2024-21641
    18İzleyin

    Flarum's Logout Route allows open redirects

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    flarum · flarum5 Oca 2024

  • CVE-2024-0264
    44Planlayın

    SourceCodester Clinic Queuing System LoginRegistration.php authorization

    KritikCVSS 9,8İstismar yokEPSS %18

    oretnom23 · clinic queuing system7 Oca 2024

  • CVE-2024-0265
    41Planlayın

    SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

    YüksekCVSS 8,8İstismar yokEPSS %20

    oretnom23 · clinic queuing system7 Oca 2024

  • CVE-2023-7212
    39İzleyin

    DeDeCMS Backend file_class.php unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    dedecms · dedecms7 Oca 2024

  • CVE-2024-0287
    39İzleyin

    Kashipara Food Management System itemBillPdf.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %0

    kashipara · food management system7 Oca 2024

  • CVE-2024-0305
    50Planlayın

    Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    ncast project · ncast8 Oca 2024

  • CVE-2024-21644
    43Planlayın

    pyLoad unauthenticated flask configuration leakage

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    pyload · pyload8 Oca 2024

  • CVE-2024-21645
    28İzleyin

    pyLoad Log Injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %24

    pyload · pyload8 Oca 2024

  • CVE-2023-47211
    48Planlayın

    A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.

    YüksekCVSS 8,6Kavram kanıtıEPSS %47

    zohocorp · manageengine firewall analyzer8 Oca 2024

  • CVE-2024-21650
    67Bu hafta

    XWiki Remote Code Execution vulnerability via user registration

    KritikCVSS 9,8Kavram kanıtıEPSS %93

    xwiki · xwiki8 Oca 2024

  • CVE-2022-3328
    28İzleyin

    Race condition in snap-confine's must_mkdir_and_open_with_perms()

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    canonical · snapd8 Oca 2024

  • CVE-2023-6505
    42Planlayın

    Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    codexonics · prime mover8 Oca 2024

  • CVE-2023-6750
    31İzleyin

    Clone < 2.4.3 - Unauthenticated Backup Download

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    backupbliss · clone8 Oca 2024

  • CVE-2023-52271
    26İzleyin

    The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via a

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    topazevolution · antifraud8 Oca 2024

  • CVE-2022-45354
    41Planlayın

    WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

    YüksekCVSS 7,5Kavram kanıtıEPSS %38

    wpchill · download monitor8 Oca 2024

  • CVE-2022-2586
    64Bu hafta

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %10

    siemens · simatic s7-1500 tm mfp firmware8 Oca 2024

  • CVE-2022-2588
    33İzleyin

    It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before free

    YüksekCVSS 7,8Kavram kanıtıEPSS %5

    linux · linux kernel8 Oca 2024

  • CVE-2022-2602
    28İzleyin

    io_uring UAF, Unix SCM garbage collection

    YüksekCVSS 7,0Kavram kanıtıEPSS %1

    linux · linux kernel8 Oca 2024

  • CVE-2023-50643
    40Planlayın

    An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnsp

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    evernote · evernote8 Oca 2024

  • CVE-2023-49237
    45Planlayın

    An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices.

    KritikCVSS 9,8İstismar yokEPSS %18

    trendnet · tv-ip1314pi firmware9 Oca 2024

  • CVE-2022-48618
    58Planlayın

    The issue was addressed with improved checks.

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %0

    apple · ipados9 Oca 2024

  • CVE-2024-20656
    32İzleyin

    Visual Studio Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %3

    microsoft · visual studio9 Oca 2024

  • CVE-2024-20666
    27İzleyin

    BitLocker Security Feature Bypass Vulnerability

    OrtaCVSS 6,6Kavram kanıtıEPSS %3

    microsoft · windows 10 15079 Oca 2024

  • CVE-2024-20674
    40Planlayın

    Windows Kerberos Security Feature Bypass Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    microsoft · windows 10 15079 Oca 2024

  • CVE-2024-20696
    30İzleyin

    Windows libarchive Remote Code Execution Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %3

    microsoft · windows 10 18099 Oca 2024

  • CVE-2024-20697
    51Planlayın

    Windows libarchive Remote Code Execution Vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %72

    microsoft · windows 11 22h29 Oca 2024

  • CVE-2024-20698
    34İzleyin

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %8

    microsoft · windows 10 18099 Oca 2024

  • CVE-2024-21305
    17İzleyin

    Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

    OrtaCVSS 4,4Kavram kanıtıEPSS %1

    microsoft · windows 10 18099 Oca 2024

  • CVE-2024-21306
    24İzleyin

    Microsoft Bluetooth Driver Spoofing Vulnerability

    OrtaCVSS 5,7Kavram kanıtıEPSS %5

    microsoft · windows 10 21h29 Oca 2024

  • CVE-2024-21310
    34İzleyin

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 10 18099 Oca 2024

  • CVE-2024-21318
    44Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %30

    microsoft · sharepoint server9 Oca 2024

  • CVE-2024-21320
    33İzleyin

    Windows Themes Spoofing Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %22

    microsoft · windows 10 15079 Oca 2024

  • CVE-2024-0352
    61Bu hafta

    Likeshop HTTP POST Request File.php userFormImage unrestricted upload

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    likeshop · likeshop9 Oca 2024

  • CVE-2023-31446
    57Planlayın

    In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized.

    KritikCVSS 9,8Kavram kanıtıEPSS %61

    cassianetworks · xc1000 firmware9 Oca 2024

  • CVE-2024-0364
    39İzleyin

    PHPGurukul Hospital Management System query-details.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %0

    phpgurukul · hospital management system9 Oca 2024

  • CVE-2023-49471
    35İzleyin

    Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    barassistant · bar assistant10 Oca 2024

  • CVE-2023-48728
    25İzleyin

    A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master com

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    wwbn · avideo10 Oca 2024

  • CVE-2023-48783
    28İzleyin

    An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 and

    OrtaCVSS 5,4İstismar yokEPSS %22

    fortinet · fortiportal10 Oca 2024

  • CVE-2023-31488
    39İzleyin

    Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    cisco · ironport email security appliance10 Oca 2024

  • CVE-2023-51126
    48Planlayın

    Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value param

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    flir · flir ax8 firmware10 Oca 2024

  • CVE-2023-51127
    30İzleyin

    FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    flir · flir ax8 firmware10 Oca 2024

  • CVE-2023-28197
    13İzleyin

    An access issue was addressed with additional sandbox restrictions.

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    apple · macos10 Oca 2024

  • CVE-2023-41974
    62Bu hafta

    A use-after-free issue was addressed with improved memory management.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    apple · ipados10 Oca 2024

  • CVE-2023-42829
    22İzleyin

    The issue was addressed with additional restrictions on the observability of app states.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · macos10 Oca 2024

  • CVE-2023-51123
    46Planlayın

    An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the se

    KritikCVSS 9,8İstismar yokEPSS %24

    dlink · dir-815 firmware10 Oca 2024

  • CVE-2023-51073
    32İzleyin

    An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/upda

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    buffalo · ls210d firmware10 Oca 2024

  • CVE-2023-4372
    26İzleyin

    LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %16

    litespeedtech · litespeed cache11 Oca 2024

  • CVE-2023-6266
    31İzleyin

    Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    backupbliss · backup migration11 Oca 2024

  • CVE-2023-6567
    45Planlayın

    LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    thimpress · learnpress11 Oca 2024

  • CVE-2023-6634
    42Planlayın

    LearnPress <= 4.2.5.7 - Command Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    thimpress · learnpress11 Oca 2024

  • CVE-2023-6875
    66Bu hafta

    POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API

    KritikCVSS 9,8SilahlaştırılmışEPSS %90

    wpexperts · post smtp11 Oca 2024

  • CVE-2023-20573
    12İzleyin

    Debug Exception Delivery in Secure Nested Paging

    DüşükCVSS 3,2Kavram kanıtıEPSS %0

    amd · epyc 7763 firmware11 Oca 2024

  • CVE-2024-22198
    36İzleyin

    Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    nginxui · nginx ui11 Oca 2024

  • CVE-2023-46474
    34İzleyin

    File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uplo

    YüksekCVSS 7,2Kavram kanıtıEPSS %21

    sigb · pmb11 Oca 2024

  • CVE-2024-21591
    44Planlayın

    Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %17

    juniper · junos11 Oca 2024

  • CVE-2023-40362
    17İzleyin

    An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    centralsquare · click2gov building permit12 Oca 2024

  • CVE-2023-50919
    60Bu hafta

    An issue was discovered on GL.iNet devices before version 4.5.0.

    KritikCVSS 9,8SilahlaştırılmışEPSS %47

    gl-inet · gl-ax1800 firmware12 Oca 2024

  • CVE-2023-7028
    97Hemen

    Weak Password Recovery Mechanism for Forgotten Password in GitLab

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    gitlab · gitlab12 Oca 2024

  • CVE-2024-21887
    96Hemen

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an aut

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure12 Oca 2024

  • CVE-2023-46805
    92Hemen

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to acc

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure12 Oca 2024

  • CVE-2024-0230
    9İzleyin

    A session management issue was addressed with improved checks.

    DüşükCVSS 2,4Kavram kanıtıEPSS %1

    apple · magic keyboard firmware12 Oca 2024

  • CVE-2023-50072
    21İzleyin

    A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    openkm · openkm12 Oca 2024

  • CVE-2024-0522
    35İzleyin

    Allegro RomPager HTTP POST Request cross-site request forgery

    YüksekCVSS 8,8İstismar yokEPSS %0

    allegrosoft · rompager14 Oca 2024

  • CVE-2024-0527
    39İzleyin

    CXBSoft Url-shorting HTTP POST Request update_go.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %0

    cxbsoft · url-shorting14 Oca 2024

  • CVE-2024-0546
    60Bu hafta

    EasyFTP LIST Command denial of service

    YüksekCVSS 7,5SilahlaştırılmışEPSS %6

    easyftp · easyftp15 Oca 2024

  • CVE-2023-50290
    47Planlayın

    Apache Solr: Host environment variables are published via the Metrics API

    OrtaCVSS 6,5Kavram kanıtıEPSS %68

    apache · solr15 Oca 2024

  • CVE-2023-6620
    32İzleyin

    Post SMTP < 2.8.7 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %14

    wpexperts · post smtp15 Oca 2024

  • CVE-2023-6623
    54Planlayın

    Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    wpdeveloper · essential blocks15 Oca 2024

  • CVE-2024-22207
    22İzleyin

    Default swagger-ui configuration exposes all files in the module

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    smartbear · swagger ui15 Oca 2024

  • CVE-2023-47459
    26İzleyin

    An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagem

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    knovos · discovery15 Oca 2024

  • CVE-2023-47460
    35İzleyin

    SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Servi

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    knovos · discovery15 Oca 2024

  • CVE-2023-48104
    24İzleyin

    Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    alinto · sogo15 Oca 2024

  • CVE-2023-51810
    30İzleyin

    SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    stackideas · easydiscuss15 Oca 2024

  • CVE-2023-22527
    99Hemen

    A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    atlassian · confluence data center16 Oca 2024

  • CVE-2011-10005
    40Planlayın

    EasyFTP MKD Command buffer overflow

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    easyftp server project · easyftp server16 Oca 2024

  • CVE-2024-0569
    21İzleyin

    Totolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure

    OrtaCVSS 5,3İstismar yokEPSS %0

    totolink · t8 firmware16 Oca 2024

  • CVE-2024-0582
    35İzleyin

    Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    linux · linux kernel16 Oca 2024

  • CVE-2022-1609
    58Planlayın

    The School Management < 9.9.7 - Unauthenticated RCE via REST api

    KritikCVSS 9,8Kavram kanıtıEPSS %64

    weblizar · school management16 Oca 2024

  • CVE-2023-1405
    30İzleyin

    Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    strategy11 · formidable forms16 Oca 2024

  • CVE-2023-2252
    10İzleyin

    Directorist < 7.5.4 - Admin+ LFI

    DüşükCVSS 2,7Kavram kanıtıEPSS %1

    wpwax · directorist16 Oca 2024

  • CVE-2023-5558
    24İzleyin

    LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    thimpress · learnpress16 Oca 2024

  • CVE-2023-6592
    21İzleyin

    FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    ninjateam · fastdup16 Oca 2024

  • CVE-2024-0235
    32İzleyin

    EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %37

    myeventon · eventon16 Oca 2024

  • CVE-2023-22512
    34İzleyin

    This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server.

    YüksekCVSS 7,5İstismar yokEPSS %14

    atlassian · confluence data center16 Oca 2024

  • CVE-2024-0200
    61Bu hafta

    Unsafe Reflection in Github Enterprise Server leading to Command Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    github · enterprise server16 Oca 2024

  • CVE-2024-0507
    55Planlayın

    Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

    YüksekCVSS 8,8Kavram kanıtıEPSS %65

    github · enterprise server16 Oca 2024

  • CVE-2024-0517
    42Planlayın

    Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a cr

    YüksekCVSS 8,8İstismar yokEPSS %21

    google · chrome16 Oca 2024

  • CVE-2024-0519
    66Bu hafta

    Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3

    google · chrome16 Oca 2024

  • CVE-2024-22411
    21İzleyin

    Cross site scripting in Action messages on Avo

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    avohq · avo16 Oca 2024

  • CVE-2023-48858
    24İzleyin

    A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web scrip

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    abocms · abo.cms17 Oca 2024

  • CVE-2023-6548
    66Bu hafta

    Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLI

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3

    citrix · netscaler application delivery controller17 Oca 2024

  • CVE-2023-5914
    47Planlayın

      Cross-site scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %75

    cloud · citrix storefront17 Oca 2024