İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2024: sömürülen ve yeni ciddi CVE kayıtları

206 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2024-22891
    40Planlayın

    Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    nteract · nteract1 Mar 2024

  • CVE-2024-25293
    37İzleyin

    mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    mjml · mjml app1 Mar 2024

  • CVE-2024-0692
    63Bu hafta

    SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %92

    solarwinds · security event manager1 Mar 2024

  • CVE-2024-27497
    43Planlayın

    Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

    YüksekCVSS 8,8Kavram kanıtıEPSS %26

    linksys · e2000 firmware1 Mar 2024

  • CVE-2024-2074
    25İzleyin

    Mini-Tmall 1 sql injection

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    1 Mar 2024

  • CVE-2024-20328
    46Planlayın

    ClamAV VirusEvent File Processing Command Injection Vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %84

    clamav · clamav1 Mar 2024

  • CVE-2023-49539
    24İzleyin

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · book store management system1 Mar 2024

  • CVE-2023-49540
    24İzleyin

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · book store management system1 Mar 2024

  • CVE-2023-49543
    39İzleyin

    Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functio

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    book store management system project · book store management system1 Mar 2024

  • CVE-2023-49544
    19İzleyin

    A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via ma

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    oretnom23 · customer support system1 Mar 2024

  • CVE-2023-49545
    30İzleyin

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the applicat

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oretnom23 · customer support system1 Mar 2024

  • CVE-2024-27743
    24İzleyin

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payloa

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    mayurik · petrol pump management1 Mar 2024

  • CVE-2024-27744
    24İzleyin

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payloa

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    mayurik · petrol pump management1 Mar 2024

  • CVE-2024-27746
    43Planlayın

    SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to th

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    mayurik · petrol pump management1 Mar 2024

  • CVE-2024-27747
    46Planlayın

    File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    mayurik · petrol pump management1 Mar 2024

  • CVE-2024-25438
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTM

    OrtaCVSS 6,1İstismar yokEPSS %0

    public knowledge project · open journal systems1 Mar 2024

  • CVE-2024-28088
    33İzleyin

    LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_ch

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    langchain · langchain3 Mar 2024

  • CVE-2024-20017
    53Planlayın

    In wlan service, there is a possible out of bounds write due to improper input validation.

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    mediatek · software development kit3 Mar 2024

  • CVE-2023-33105
    30İzleyin

    Configuration Issue in WLAN Host and Firmware

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    qualcomm · ar8035 firmware4 Mar 2024

  • CVE-2023-6241
    28İzleyin

    Mali GPU Kernel Driver allows improper GPU memory processing operations

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    arm · 5th gen gpu architecture kernel driver4 Mar 2024

  • CVE-2024-27198
    99Hemen

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    jetbrains · teamcity4 Mar 2024

  • CVE-2024-27199
    89Hemen

    In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %99

    jetbrains · teamcity4 Mar 2024

  • CVE-2023-49546
    35İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · customer support system4 Mar 2024

  • CVE-2023-49547
    39İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    oretnom23 · customer support system4 Mar 2024

  • CVE-2023-49548
    35İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · customer support system4 Mar 2024

  • CVE-2023-49968
    29İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_departme

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    oretnom23 · customer support system4 Mar 2024

  • CVE-2023-49969
    17İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    oretnom23 · customer support system4 Mar 2024

  • CVE-2023-49970
    39İzleyin

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?a

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    oretnom23 · customer support system4 Mar 2024

  • CVE-2024-25731
    30İzleyin

    The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    elinksmart · esmartcam4 Mar 2024

  • CVE-2024-27718
    31İzleyin

    SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    4 Mar 2024

  • CVE-2024-27564
    38İzleyin

    pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter.

    OrtaCVSS 6,5Kavram kanıtıEPSS %40

    dirk1983 · chatgpt5 Mar 2024

  • CVE-2024-23225
    61Bu hafta

    A memory corruption issue was addressed with improved validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    apple · ipados5 Mar 2024

  • CVE-2024-23296
    61Bu hafta

    A memory corruption issue was addressed with improved validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    apple · ipados5 Mar 2024

  • CVE-2024-2056
    44Planlayın

    Artica Proxy Loopback Services Remotely Accessible Unauthenticated

    KritikCVSS 9,8İstismar yokEPSS %16

    articatech · artica proxy5 Mar 2024

  • CVE-2023-38944
    44Planlayın

    An issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01.10_pt allows attackers to bypass the access

    KritikCVSS 9,8İstismar yokEPSS %15

    multilaser · re160v firmware5 Mar 2024

  • CVE-2023-43318
    35İzleyin

    TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification of the 'tid' and 'usrl

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    tp-link · tl-sg2210p firmware5 Mar 2024

  • CVE-2024-22889
    30İzleyin

    Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a cr

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    plone · plone5 Mar 2024

  • CVE-2023-49971
    24İzleyin

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a cra

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · customer support system5 Mar 2024

  • CVE-2023-49973
    24İzleyin

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a cra

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · customer support system5 Mar 2024

  • CVE-2023-49974
    24İzleyin

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a cra

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · customer support system5 Mar 2024

  • CVE-2023-49976
    21İzleyin

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a cra

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · customer support system5 Mar 2024

  • CVE-2023-49977
    21İzleyin

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a cra

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · customer support system5 Mar 2024

  • CVE-2024-20337
    41Planlayın

    A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carri

    YüksekCVSS 8,2İstismar yokEPSS %29

    cisco · secure client6 Mar 2024

  • CVE-2024-20338
    29İzleyin

    A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to ele

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    cisco · secure client6 Mar 2024

  • CVE-2024-28156
    45Planlayın

    Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-

    OrtaCVSS 5,4İstismar yokEPSS %79

    jenkins · build monitor view6 Mar 2024

  • CVE-2024-28157
    32İzleyin

    Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) v

    YüksekCVSS 8,0Kavram kanıtıEPSS %1

    jenkins · gitbucket6 Mar 2024

  • CVE-2024-25111
    50Planlayın

    SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

    YüksekCVSS 7,5İstismar yokEPSS %65

    squid-cache · squid6 Mar 2024

  • CVE-2024-27304
    39İzleyin

    pgx SQL Injection via Protocol Message Size Overflow

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    jackc · pgproto36 Mar 2024

  • CVE-2024-2173
    39İzleyin

    Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access

    YüksekCVSS 8,8İstismar yokEPSS %13

    google · chrome6 Mar 2024

  • CVE-2024-2174
    39İzleyin

    Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption

    YüksekCVSS 8,8İstismar yokEPSS %12

    google · chrome6 Mar 2024

  • CVE-2023-47415
    34İzleyin

    Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter.

    YüksekCVSS 7,5İstismar yokEPSS %13

    cypress · ctm-200 firmware6 Mar 2024

  • CVE-2023-49986
    18İzleyin

    A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute ar

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    oretnom23 · school fees management system6 Mar 2024

  • CVE-2023-49987
    21İzleyin

    A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execu

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · school fees management system6 Mar 2024

  • CVE-2023-49988
    30İzleyin

    Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    pratham-jaiswal · hotel booking management system6 Mar 2024

  • CVE-2023-49989
    39İzleyin

    Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    pratham-jaiswal · hotel booking management system6 Mar 2024

  • CVE-2023-51281
    21İzleyin

    Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script fir

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · customer support system6 Mar 2024

  • CVE-2023-48725
    41Planlayın

    A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7

    YüksekCVSS 8,8İstismar yokEPSS %19

    netgear · rax30 firmware7 Mar 2024

  • CVE-2024-22752
    32İzleyin

    Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    7 Mar 2024

  • CVE-2024-24035
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    setorinformatica · s.i.l.7 Mar 2024

  • CVE-2024-2044
    63Bu hafta

    Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

    KritikCVSS 9,9SilahlaştırılmışEPSS %79

    pgadmin · pgadmin 47 Mar 2024

  • CVE-2024-0258
    34İzleyin

    The issue was addressed with improved memory handling.

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    apple · ipad os7 Mar 2024

  • CVE-2024-27612
    27İzleyin

    Numbas editor before 7.3 mishandles editing of themes and extensions.

    OrtaCVSS 6,2Kavram kanıtıEPSS %10

    numbas · editor8 Mar 2024

  • CVE-2024-21899
    46Planlayın

    QTS, QuTS hero, QuTScloud

    KritikCVSS 9,8İstismar yokEPSS %24

    qnap · qts8 Mar 2024

  • CVE-2024-21901
    24İzleyin

    A SQL injection vulnerability has been reported to affect myQNAPcloud.

    OrtaCVSS 4,7İstismar yokEPSS %18

    qnap · myqnapcloud8 Mar 2024

  • CVE-2024-2330
    44Planlayın

    Netentsec NS-ASG Application Security Gateway index.php sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    netentsec · application security gateway9 Mar 2024

  • CVE-2024-28757
    31İzleyin

    libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityP

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    libexpat project · libexpat10 Mar 2024

  • CVE-2024-1441
    22İzleyin

    Libvirt: off-by-one error in udevlistinterfacesbystatus()

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 911 Mar 2024

  • CVE-2024-0670
    31İzleyin

    Privilege escalation in windows agent

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    checkmk · checkmk11 Mar 2024

  • CVE-2024-0039
    39İzleyin

    In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    google · android11 Mar 2024

  • CVE-2024-0044
    26İzleyin

    In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.

    OrtaCVSS 6,7Kavram kanıtıEPSS %1

    google · android11 Mar 2024

  • CVE-2023-6444
    22İzleyin

    Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    castos · seriously simple podcasting11 Mar 2024

  • CVE-2023-49785
    64Bu hafta

    NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

    KritikCVSS 9,8Kavram kanıtıEPSS %83

    nextchat · nextchat11 Mar 2024

  • CVE-2024-22127
    36İzleyin

    Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    sap · netweaver application server java11 Mar 2024

  • CVE-2024-26521
    19İzleyin

    HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    12 Mar 2024

  • CVE-2023-42789
    40Planlayın

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, Fort

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    fortinet · fortiproxy12 Mar 2024

  • CVE-2023-48788
    99Hemen

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    fortinet · forticlient enterprise management server12 Mar 2024

  • CVE-2024-1301
    31İzleyin

    Multiple Vulnerabilities in Badger Meter's Monitool

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    badgermeter · monitool12 Mar 2024

  • CVE-2024-1302
    22İzleyin

    Multiple Vulnerabilities in Badger Meter's Monitool

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    badgermeter · monitool12 Mar 2024

  • CVE-2024-1303
    26İzleyin

    Multiple Vulnerabilities in Badger Meter's Monitool

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    badgermeter · monitool12 Mar 2024

  • CVE-2024-1304
    24İzleyin

    Multiple Vulnerabilities in Badger Meter's Monitool

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    badgermeter · monitool12 Mar 2024

  • CVE-2024-21334
    45Planlayın

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %20

    microsoft · open management infrastructure12 Mar 2024

  • CVE-2024-21407
    37İzleyin

    Windows Hyper-V Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %16

    microsoft · windows 10 150712 Mar 2024

  • CVE-2024-26160
    25İzleyin

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

    OrtaCVSS 5,5Kavram kanıtıEPSS %11

    microsoft · windows 11 22h212 Mar 2024

  • CVE-2024-26169
    62Bu hafta

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150712 Mar 2024

  • CVE-2024-26170
    33İzleyin

    Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %6

    microsoft · windows 10 21h212 Mar 2024

  • CVE-2024-26185
    35İzleyin

    Windows Compressed Folder Tampering Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %30

    microsoft · windows 11 22h212 Mar 2024

  • CVE-2024-27317
    56Planlayın

    Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification

    KritikCVSS 9,9İstismar yokEPSS %56

    apache · pulsar12 Mar 2024

  • CVE-2024-28623
    24İzleyin

    RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    ritecms · ritecms13 Mar 2024

  • CVE-2024-2123
    32İzleyin

    Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %26

    ultimatemember · ultimate member13 Mar 2024

  • CVE-2024-25153
    52Planlayın

    Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    fortra · filecatalyst workflow13 Mar 2024

  • CVE-2023-6825
    41Planlayın

    File Manager And File Manager Pro (Multiple Versions) - Directory Traversal

    KritikCVSS 9,9Kavram kanıtıEPSS %5

    mndpsingh287 · file manager13 Mar 2024

  • CVE-2024-0368
    34İzleyin

    Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    wpmudev · hustle13 Mar 2024

  • CVE-2024-0683
    30İzleyin

    Bulgarisation for WooCommerce <= 3.0.14 - Missing Authorization

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    autopolis · bulgarisation for woocommerce13 Mar 2024

  • CVE-2024-1071
    66Bu hafta

    The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is v

    KritikCVSS 9,8SilahlaştırılmışEPSS %89

    ultimatemember · ultimate member13 Mar 2024

  • CVE-2024-1234
    21İzleyin

    Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    exclusiveaddons · exclusive addons for elementor13 Mar 2024

  • CVE-2024-1380
    36İzleyin

    Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export

    OrtaCVSS 5,3Kavram kanıtıEPSS %50

    relevanssi · relevanssi13 Mar 2024

  • CVE-2024-1751
    36İzleyin

    Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    themeum · tutor lms13 Mar 2024

  • CVE-2024-24549
    37İzleyin

    Apache Tomcat: HTTP/2 header handling DoS

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    apache · tomcat13 Mar 2024

  • CVE-2024-2194
    48Planlayın

    WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %67

    veronalabs · wp statistics – simple, privacy-friendly google analytics alternative13 Mar 2024

  • CVE-2024-2432
    28İzleyin

    GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    paloaltonetworks · globalprotect13 Mar 2024