İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2024: sömürülen ve yeni ciddi CVE kayıtları

177 kayıt · 11 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-24945
    24İzleyin

    A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute ar

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    remyandrade · travel journal using php and mysql with source code1 Şub 2024

  • CVE-2024-22927
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    eyoucms · eyoucms1 Şub 2024

  • CVE-2023-46344
    21İzleyin

    A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate th

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    solar-log · 2000 pm\+ firmware1 Şub 2024

  • CVE-2024-22899
    36İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime func

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    vinchin · vinchin backup and recovery1 Şub 2024

  • CVE-2024-23746
    39İzleyin

    Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments (b

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    miro · miro1 Şub 2024

  • CVE-2024-22319
    62Bu hafta

    IBM Operational Decision Manager JDNI injection

    KritikCVSS 9,8Kavram kanıtıEPSS %76

    ibm · operational decision manager1 Şub 2024

  • CVE-2024-22320
    57Planlayın

    IBM Operational Decision Manager code execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %73

    ibm · operational decision manager1 Şub 2024

  • CVE-2024-21485
    21İzleyin

    Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the packa

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    plotly · dash2 Şub 2024

  • CVE-2023-47564
    32İzleyin

    An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central.

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    qnap · qsync central2 Şub 2024

  • CVE-2023-6387
    30İzleyin

    Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    silabs · gecko software development kit2 Şub 2024

  • CVE-2024-24760
    29İzleyin

    Mailcow Docker Container Exposure to Local Network

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    mailcow · mailcow\2 Şub 2024

  • CVE-2023-49950
    21İzleyin

    The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a cust

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    logpoint · siem3 Şub 2024

  • CVE-2023-51504
    21İzleyin

    WordPress Dan's Embedder for Google Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    dandulaney · dan\'s embedder for google calendar5 Şub 2024

  • CVE-2021-4436
    41Planlayın

    3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    wp3dprinting · 3dprint lite5 Şub 2024

  • CVE-2024-23108
    63Bu hafta

    An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    fortinet · fortisiem5 Şub 2024

  • CVE-2023-47355
    30İzleyin

    The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    eyuepcanyilmaz · root quick reboot5 Şub 2024

  • CVE-2024-24397
    21İzleyin

    Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrar

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    stimulsoft · dashboards.js5 Şub 2024

  • CVE-2024-24396
    24İzleyin

    Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrar

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    stimulsoft · dashboard.js5 Şub 2024

  • CVE-2024-22567
    40Planlayın

    File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

    YüksekCVSS 8,8İstismar yokEPSS %17

    mingsoft · mcms5 Şub 2024

  • CVE-2023-6700
    35İzleyin

    Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    cookieinformation · wp-gdpr-compliance5 Şub 2024

  • CVE-2023-6846
    40Planlayın

    File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %15

    filemanagerpro · file manager5 Şub 2024

  • CVE-2023-6933
    55Planlayın

    Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %68

    wpengine · better search replace5 Şub 2024

  • CVE-2023-6985
    35İzleyin

    10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin Installation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    10web · ai assistant5 Şub 2024

  • CVE-2023-6989
    56Planlayın

    Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    getshieldsecurity · shield security5 Şub 2024

  • CVE-2024-0324
    31İzleyin

    User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    cozmoslabs · profile builder5 Şub 2024

  • CVE-2024-0509
    24İzleyin

    WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    hwk · wp 404 auto redirect to similar post5 Şub 2024

  • CVE-2024-1208
    23İzleyin

    LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API

    OrtaCVSS 5,3Kavram kanıtıEPSS %5

    learndash · learndash5 Şub 2024

  • CVE-2024-1209
    22İzleyin

    LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    learndash · learndash5 Şub 2024

  • CVE-2024-1210
    22İzleyin

    LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    learndash · learndash5 Şub 2024

  • CVE-2024-24398
    40Planlayın

    Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    stimulsoft · dashboards.php5 Şub 2024

  • CVE-2023-46359
    65Bu hafta

    An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attac

    KritikCVSS 9,8Kavram kanıtıEPSS %87

    hardy-barth · cph2 echarge firmware5 Şub 2024

  • CVE-2023-47889
    31İzleyin

    The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    binhdrm26 · super reboot5 Şub 2024

  • CVE-2024-24112
    40Planlayın

    xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    exrick · xmall5 Şub 2024

  • CVE-2024-22853
    40Planlayın

    D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain r

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    dlink · go-rt-ac750 firmware5 Şub 2024

  • CVE-2024-23673
    30İzleyin

    Apache Sling Servlets Resolver: Malicious code execution via path traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    apache · sling servlets resolver6 Şub 2024

  • CVE-2024-23917
    55Planlayın

    In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

    KritikCVSS 9,8Kavram kanıtıEPSS %54

    jetbrains · teamcity6 Şub 2024

  • CVE-2024-24942
    31İzleyin

    In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

    OrtaCVSS 5,3İstismar yokEPSS %31

    jetbrains · teamcity6 Şub 2024

  • CVE-2024-0684
    22İzleyin

    Coreutils: heap overflow in split --line-bytes with very long lines

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    gnu · coreutils6 Şub 2024

  • CVE-2024-24590
    36İzleyin

    Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a mali

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    clear · clearml6 Şub 2024

  • CVE-2023-43482
    29İzleyin

    A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    tp-link · er7206 firmware6 Şub 2024

  • CVE-2024-22241
    30İzleyin

    Aria Operations for Networks contains a cross site scripting vulnerability.

    OrtaCVSS 4,8İstismar yokEPSS %37

    vmware · aria operations for networks6 Şub 2024

  • CVE-2024-22514
    35İzleyin

    An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    ispyconnect · agent dvr6 Şub 2024

  • CVE-2024-22515
    35İzleyin

    Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    ispyconnect · agent dvr6 Şub 2024

  • CVE-2024-1283
    45Planlayın

    Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a

    KritikCVSS 9,8İstismar yokEPSS %21

    google · chrome6 Şub 2024

  • CVE-2024-1269
    24İzleyin

    SourceCodester Product Management System supplier.php cross site scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    remyandrade · product management system6 Şub 2024

  • CVE-2023-40355
    21İzleyin

    Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allo

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    axigen · axigen mobile webmail7 Şub 2024

  • CVE-2024-24131
    24İzleyin

    SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    superwebmailer · superwebmailer7 Şub 2024

  • CVE-2024-20290
    40Planlayın

    A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS)

    YüksekCVSS 7,5İstismar yokEPSS %33

    cisco · secure endpoint7 Şub 2024

  • CVE-2024-24816
    24İzleyin

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    ckeditor · ckeditor7 Şub 2024

  • CVE-2024-24824
    45Planlayın

    graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

    YüksekCVSS 8,8Kavram kanıtıEPSS %34

    graylog · graylog7 Şub 2024

  • CVE-2024-24488
    22İzleyin

    An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password c

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    tendacn · cp3 firmware7 Şub 2024

  • CVE-2023-48974
    39İzleyin

    Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    axigen · axigen mail server7 Şub 2024

  • CVE-2024-24034
    24İzleyin

    Setor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter, allows remote attackers to execute arbitrary

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    setorinformatica · s.i.l8 Şub 2024

  • CVE-2024-24871
    21İzleyin

    WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    creativethemes · blocksy8 Şub 2024

  • CVE-2024-22836
    48Planlayın

    An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier.

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    akaunting · akaunting8 Şub 2024

  • CVE-2024-24494
    32İzleyin

    Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pr

    OrtaCVSS 6,1Kavram kanıtıEPSS %25

    remyandrade · daily habit tracker8 Şub 2024

  • CVE-2024-24495
    39İzleyin

    SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafte

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    remyandrade · daily habit tracker8 Şub 2024

  • CVE-2024-24496
    45Planlayın

    An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php,

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    remyandrade · daily habit tracker8 Şub 2024

  • CVE-2024-22318
    22İzleyin

    IBM i Access Client Solutions information disclosure

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    ibm · i access client solutions8 Şub 2024

  • CVE-2024-25003
    32İzleyin

    KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds check

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    9bis · kitty9 Şub 2024

  • CVE-2024-25004
    32İzleyin

    KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds check

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    9bis · kitty9 Şub 2024

  • CVE-2024-23749
    32İzleyin

    KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitizat

    YüksekCVSS 7,8Kavram kanıtıEPSS %4

    9bis · kitty9 Şub 2024

  • CVE-2024-21762
    94Hemen

    A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    fortinet · fortiproxy9 Şub 2024

  • CVE-2023-50386
    60Bu hafta

    Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

    YüksekCVSS 8,8SilahlaştırılmışEPSS %83

    apache · solr9 Şub 2024

  • CVE-2024-1247
    19İzleyin

    Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    concretecms · concrete cms9 Şub 2024

  • CVE-2024-21490
    31İzleyin

    This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    angularjs · angular.js10 Şub 2024

  • CVE-2024-23724
    37İzleyin

    Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG prof

    KritikCVSS 9,0Kavram kanıtıEPSS %3

    ghost · ghost10 Şub 2024

  • CVE-2024-24926
    35İzleyin

    WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    unitedthemes · brooklyn12 Şub 2024

  • CVE-2023-46615
    39İzleyin

    WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    kallidan · kd coming soon12 Şub 2024

  • CVE-2023-6036
    40Planlayın

    Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    miniorange · web3 - crypto wallet login \& nft token gating12 Şub 2024

  • CVE-2024-0250
    24İzleyin

    Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    deconf · analytics insights12 Şub 2024

  • CVE-2024-0566
    29İzleyin

    Smart Manager < 8.28.0 - Admin+ SQL Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    storeapps · smart manager12 Şub 2024

  • CVE-2024-23759
    53Planlayın

    Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopf

    KritikCVSS 9,8SilahlaştırılmışEPSS %47

    gambio · gambio12 Şub 2024

  • CVE-2023-49339
    26İzleyin

    Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retri

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    ellucian · banner12 Şub 2024

  • CVE-2023-47218
    60Bu hafta

    QTS, QuTS hero, QuTScloud

    YüksekCVSS 8,3SilahlaştırılmışEPSS %89

    qnap · qts12 Şub 2024

  • CVE-2023-50358
    27İzleyin

    QTS, QuTS hero, QuTScloud

    OrtaCVSS 5,8İstismar yokEPSS %13

    qnap · qts12 Şub 2024

  • CVE-2024-22024
    61Bu hafta

    An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and

    YüksekCVSS 8,3Kavram kanıtıEPSS %94

    ivanti · connect secure13 Şub 2024

  • CVE-2023-45206
    24İzleyin

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zimbra · collaboration13 Şub 2024

  • CVE-2024-21338
    79Bu hafta

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %59

    microsoft · windows 10 180913 Şub 2024

  • CVE-2024-21345
    41Planlayın

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    microsoft · windows server 2022 23h213 Şub 2024

  • CVE-2024-21351
    68Bu hafta

    Windows SmartScreen Security Feature Bypass Vulnerability

    YüksekCVSS 7,6KEVSilahlaştırılmışEPSS %27

    microsoft · windows 10 150713 Şub 2024

  • CVE-2024-21357
    40Planlayın

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %26

    microsoft · windows 10 150713 Şub 2024

  • CVE-2024-21371
    31İzleyin

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %10

    microsoft · windows 10 150713 Şub 2024

  • CVE-2024-21378
    38İzleyin

    Microsoft Outlook Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    microsoft · 365 apps13 Şub 2024

  • CVE-2024-21410
    73Bu hafta

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %12

    microsoft · exchange server13 Şub 2024

  • CVE-2024-21412
    92Hemen

    Internet Shortcut Files Security Feature Bypass Vulnerability

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99

    microsoft · windows 10 180913 Şub 2024

  • CVE-2024-21413
    97Hemen

    Microsoft Outlook Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    microsoft · 365 apps13 Şub 2024

  • CVE-2023-31346
    24İzleyin

    Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    amd · epyc 7773x firmware13 Şub 2024

  • CVE-2024-24142
    39İzleyin

    Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    rems · school task manager13 Şub 2024

  • CVE-2024-25125
    30İzleyin

    Absolute path traversal vulnerability in digdag server

    OrtaCVSS 5,3İstismar yokEPSS %29

    treasuredata · digdag13 Şub 2024

  • CVE-2023-50387
    60Bu hafta

    Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser

    YüksekCVSS 7,5Kavram kanıtıEPSS %99

    redhat · enterprise linux14 Şub 2024

  • CVE-2023-50868
    52Planlayın

    The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a den

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    netapp · hci baseboard management controller14 Şub 2024

  • CVE-2024-25617
    56Planlayın

    Denial of Service in HTTP Header parser in squid proxy

    YüksekCVSS 7,5İstismar yokEPSS %88

    squid-cache · squid14 Şub 2024

  • CVE-2022-23093
    27İzleyin

    Stack overflow in ping(8)

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    freebsd · freebsd15 Şub 2024

  • CVE-2024-24386
    28İzleyin

    An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder.

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    vitalpbx · vitalpbx15 Şub 2024

  • CVE-2024-23113
    88Hemen

    A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, Fo

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %61

    fortinet · fortiproxy15 Şub 2024

  • CVE-2024-23478
    56Planlayın

    SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

    YüksekCVSS 8,0İstismar yokEPSS %81

    solarwinds · access rights manager15 Şub 2024

  • CVE-2023-40109
    31İzleyin

    In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android15 Şub 2024

  • CVE-2024-0030
    22İzleyin

    In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    google · android15 Şub 2024

  • CVE-2024-0040
    31İzleyin

    In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    google · android15 Şub 2024