İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2024: sömürülen ve yeni ciddi CVE kayıtları

206 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2024-0799
    40Planlayın

    Authentication Bypass via wizardLogin in Arcserve Unified Data Protection

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    arcserve · udp13 Mar 2024

  • CVE-2024-0801
    43Planlayın

    Unauthenticated DoS in Arcserve Unified Data Protection

    YüksekCVSS 7,5Kavram kanıtıEPSS %41

    arcserve · udp13 Mar 2024

  • CVE-2024-2242
    24İzleyin

    Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    rocklobster · contact form 713 Mar 2024

  • CVE-2024-25228
    43Planlayın

    Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i

    YüksekCVSS 8,8İstismar yokEPSS %25

    vinchin · vinchin backup and recovery13 Mar 2024

  • CVE-2024-1222
    58Planlayın

    Incorrect authorization controls in PaperCut NG/MF APIs

    KritikCVSS 9,8İstismar yokEPSS %63

    papercut · papercut mf13 Mar 2024

  • CVE-2024-1883
    42Planlayın

    Reflected XSS in PaperCut NG/MF

    OrtaCVSS 6,1İstismar yokEPSS %61

    papercut · papercut mf14 Mar 2024

  • CVE-2024-1884
    37İzleyin

    Server Side Request Forgery in PaperCut NG/MF

    OrtaCVSS 6,5İstismar yokEPSS %37

    papercut · papercut mf14 Mar 2024

  • CVE-2024-0311
    22İzleyin

    A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    skyhigh · skyhigh client proxy14 Mar 2024

  • CVE-2023-42286
    39İzleyin

    There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system co

    KritikCVSS 9,8İstismar yokEPSS %0

    eyoucms · eyoucms14 Mar 2024

  • CVE-2024-26475
    22İzleyin

    An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    radare · radare214 Mar 2024

  • CVE-2024-26503
    36İzleyin

    Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code v

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    openeclass · openeclass14 Mar 2024

  • CVE-2024-25227
    39İzleyin

    SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), esca

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    abocms · abo.cms15 Mar 2024

  • CVE-2024-28752
    38İzleyin

    Apache CXF SSRF Vulnerability using the Aegis databinding

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    apache · cxf15 Mar 2024

  • CVE-2024-2193
    22İzleyin

    Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.

    OrtaCVSS 5,7Kavram kanıtıEPSS %1

    amd · cpu15 Mar 2024

  • CVE-2024-28253
    39İzleyin

    SpEL Injection in `PUT /api/v1/policies` in OpenMetadata

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    open-metadata · openmetadata15 Mar 2024

  • CVE-2024-28254
    49Planlayın

    SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata

    YüksekCVSS 8,8SilahlaştırılmışEPSS %45

    open-metadata · openmetadata15 Mar 2024

  • CVE-2024-28255
    61Bu hafta

    Authentication Bypass in OpenMetadata

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    open-metadata · openmetadata15 Mar 2024

  • CVE-2024-23298
    22İzleyin

    A logic issue was addressed with improved state management.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · xcode15 Mar 2024

  • CVE-2024-28640
    34İzleyin

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause

    YüksekCVSS 7,5İstismar yokEPSS %14

    totolink · x5000r firmware16 Mar 2024

  • CVE-2024-22513
    22İzleyin

    djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    16 Mar 2024

  • CVE-2024-20767
    89Hemen

    ColdFusion | Improper Access Control (CWE-284)

    YüksekCVSS 7,4KEVSilahlaştırılmışEPSS %98

    adobe · coldfusion18 Mar 2024

  • CVE-2024-27937
    25İzleyin

    glpi Users emails enumeration

    OrtaCVSS 4,3İstismar yokEPSS %27

    glpi-project · glpi18 Mar 2024

  • CVE-2024-27096
    44Planlayın

    SQL Injection in through the search engine

    OrtaCVSS 6,5İstismar yokEPSS %58

    glpi-project · glpi18 Mar 2024

  • CVE-2024-27098
    49Planlayın

    Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI

    KritikCVSS 9,6İstismar yokEPSS %35

    glpi-project · glpi18 Mar 2024

  • CVE-2024-27914
    24İzleyin

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    glpi-project · glpi18 Mar 2024

  • CVE-2024-23333
    31İzleyin

    LAM vulnerable to Authenticated Remote Code Execution

    OrtaCVSS 6,6İstismar yokEPSS %17

    ldap-account-manager · ldap account manager18 Mar 2024

  • CVE-2024-24578
    60Bu hafta

    RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %8

    raspberrymatic · raspberrymatic18 Mar 2024

  • CVE-2024-2621
    40Planlayın

    Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    kelixin communication command and dispatch project · kelixin communication command and dispatch18 Mar 2024

  • CVE-2024-22017
    29İzleyin

    setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    nodejs · node19 Mar 2024

  • CVE-2023-40278
    31İzleyin

    An issue was discovered in OpenClinic GA 5.247.01.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    openclinic ga project · openclinic ga19 Mar 2024

  • CVE-2023-40279
    31İzleyin

    An issue was discovered in OpenClinic GA 5.247.01.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    openclinic ga project · openclinic ga19 Mar 2024

  • CVE-2024-28734
    25İzleyin

    Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    19 Mar 2024

  • CVE-2024-29137
    24İzleyin

    WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    themefic · tourfic19 Mar 2024

  • CVE-2024-29138
    24İzleyin

    WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    dev.institute · restrict user access19 Mar 2024

  • CVE-2024-28595
    39İzleyin

    SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    walterjnr1 · employee management system19 Mar 2024

  • CVE-2024-2169
    32İzleyin

    Implementations of UDP application protocols are susceptible to network loops and denial of service

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    mikrotik · routeros-tftp19 Mar 2024

  • CVE-2024-28715
    35İzleyin

    Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 functio

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    html-js · doracms19 Mar 2024

  • CVE-2024-2387
    24İzleyin

    Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Script

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    nasirahmed · afi – the easiest integration plugin19 Mar 2024

  • CVE-2023-7246
    21İzleyin

    System Dashboard < 2.8.10 - XSS via Header Injection

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    bowo · system dashboard20 Mar 2024

  • CVE-2024-0337
    24İzleyin

    Travelpayouts <= 1.1.15 - Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    travelpayouts · travelpayouts20 Mar 2024

  • CVE-2024-1800
    47Planlayın

    Progress Telerik Report Server Deserialization

    YüksekCVSS 8,8SilahlaştırılmışEPSS %40

    progress · telerik report server20 Mar 2024

  • CVE-2023-51444
    29İzleyin

    GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    geoserver · geoserver20 Mar 2024

  • CVE-2024-2625
    41Planlayın

    Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via

    YüksekCVSS 8,8İstismar yokEPSS %21

    google · chrome20 Mar 2024

  • CVE-2024-28231
    30İzleyin

    Manipulated DATA Submessage causes a heap-buffer-overflow error

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    eprosima · fast dds20 Mar 2024

  • CVE-2023-49978
    35İzleyin

    Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions res

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · customer support system20 Mar 2024

  • CVE-2023-49979
    30İzleyin

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the applicat

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    mayurik · best student management system20 Mar 2024

  • CVE-2023-49980
    30İzleyin

    A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files wit

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    mayurik · best student result management system20 Mar 2024

  • CVE-2023-49981
    30İzleyin

    A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oretnom23 · school fees management system20 Mar 2024

  • CVE-2023-49982
    35İzleyin

    Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · school fees management system20 Mar 2024

  • CVE-2023-49983
    27İzleyin

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to exec

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    oretnom23 · school fees management system20 Mar 2024

  • CVE-2023-49984
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to e

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · school fees management system20 Mar 2024

  • CVE-2023-49985
    26İzleyin

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to exec

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oretnom23 · school fees management system20 Mar 2024

  • CVE-2024-27292
    51Planlayın

    Docassemble unauthorized access through URL manipulation

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    jhpyle · docassemble20 Mar 2024

  • CVE-2024-2053
    43Planlayın

    Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    articatech · artica proxy20 Mar 2024

  • CVE-2024-2054
    63Bu hafta

    Artica Proxy Unauthenticated PHP Deserialization Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    articatech · artica proxy20 Mar 2024

  • CVE-2024-1538
    38İzleyin

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    YüksekCVSS 8,8İstismar yokEPSS %10

    filemanagerpro · file manager21 Mar 2024

  • CVE-2024-27956
    67Bu hafta

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    valvepress · automatic21 Mar 2024

  • CVE-2024-27921
    53Planlayın

    Grav File Upload Path Traversal vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %60

    getgrav · grav21 Mar 2024

  • CVE-2024-28116
    37İzleyin

    Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    getgrav · grav21 Mar 2024

  • CVE-2024-29272
    29İzleyin

    Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and o

    OrtaCVSS 6,5Kavram kanıtıEPSS %9

    vvveb · vvvebjs22 Mar 2024

  • CVE-2024-29275
    40Planlayın

    SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive i

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    seacms · seacms22 Mar 2024

  • CVE-2024-29943
    46Planlayın

    An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    mozilla · firefox22 Mar 2024

  • CVE-2024-2448
    52Planlayın

    LoadMaster Command Injection Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %55

    progress · loadmaster22 Mar 2024

  • CVE-2024-2449
    34İzleyin

    LoadMaster Cross-Site Request Forgery (CSRF)

    YüksekCVSS 7,5İstismar yokEPSS %12

    progress · loadmaster22 Mar 2024

  • CVE-2024-29059
    90Hemen

    .NET Framework Information Disclosure Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %98

    microsoft · .net framework22 Mar 2024

  • CVE-2024-24725
    50Planlayın

    Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the mod

    YüksekCVSS 8,8SilahlaştırılmışEPSS %51

    gibbonedu · gibbon23 Mar 2024

  • CVE-2024-2862
    54Planlayın

    Password reset vulnerability without authorization on LG LED Assistant

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    lg · lg led assistant25 Mar 2024

  • CVE-2024-2863
    58Planlayın

    Path traversal via file upload on LG LED Assistant

    KritikCVSS 9,8Kavram kanıtıEPSS %63

    lg · lg led assistant25 Mar 2024

  • CVE-2024-25175
    24İzleyin

    An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    kickdler · kickdler25 Mar 2024

  • CVE-2024-29041
    24İzleyin

    Express.js Open Redirect in malformed URLs

    OrtaCVSS 6,1İstismar yokEPSS %0

    openjsf · express25 Mar 2024

  • CVE-2024-23722
    30İzleyin

    In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    treasuredata · fluent bit26 Mar 2024

  • CVE-2023-28787
    38İzleyin

    WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    expresstech · quiz and survey master26 Mar 2024

  • CVE-2023-29386
    36İzleyin

    WordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    julien crego · manager for icomoon26 Mar 2024

  • CVE-2023-47873
    29İzleyin

    WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    wensolutions · wp child theme generator26 Mar 2024

  • CVE-2023-48777
    36İzleyin

    WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    elementor · website builder26 Mar 2024

  • CVE-2024-2887
    35İzleyin

    Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML

    YüksekCVSS 7,7Kavram kanıtıEPSS %17

    google · chrome26 Mar 2024

  • CVE-2024-25734
    31İzleyin

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    wyrestorm · apollo vx20 firmware26 Mar 2024

  • CVE-2024-25735
    51Planlayın

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    KritikCVSS 9,1Kavram kanıtıEPSS %50

    wyrestorm · apollo vx20 firmware26 Mar 2024

  • CVE-2024-25736
    31İzleyin

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    wyrestorm · apollo vx20 firmware26 Mar 2024

  • CVE-2023-40289
    33İzleyin

    A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.

    YüksekCVSS 7,2Kavram kanıtıEPSS %18

    supermicro · x11ssm-f firmware27 Mar 2024

  • CVE-2023-31634
    39İzleyin

    In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    teslamate · teslamate27 Mar 2024

  • CVE-2024-30194
    24İzleyin

    WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    sunshinephotocart · sunshine photo cart27 Mar 2024

  • CVE-2024-29931
    24İzleyin

    WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    codecabin · wp go maps27 Mar 2024

  • CVE-2024-2398
    45Planlayın

    HTTP/2 push headers memory-leak

    YüksekCVSS 8,6İstismar yokEPSS %36

    haxx · curl27 Mar 2024

  • CVE-2024-28784
    21İzleyin

    IBM QRadar cross-site scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    ibm · qradar security information and event manager27 Mar 2024

  • CVE-2024-29792
    24İzleyin

    WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    unlimited-elements · unlimited elements for elementor27 Mar 2024

  • CVE-2023-34020
    24İzleyin

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    uncannyowl · uncanny toolkit for learndash27 Mar 2024

  • CVE-2024-1540
    33İzleyin

    Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

    YüksekCVSS 8,2Kavram kanıtıEPSS %1

    gradio project · gradio27 Mar 2024

  • CVE-2024-28085
    14İzleyin

    wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals t

    DüşükCVSS 3,3Kavram kanıtıEPSS %2

    kernel · util-linux27 Mar 2024

  • CVE-2024-28247
    26İzleyin

    Pihole Authenticated Arbitrary File Read with root privileges

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    pi-hole · pi-hole27 Mar 2024

  • CVE-2024-2997
    21İzleyin

    Bdtask Multi-Store Inventory Management System cross site scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    bdtask · multi store inventory management system27 Mar 2024

  • CVE-2024-3013
    15İzleyin

    Teledyne FLIR AX8 User Registration test_login.php improper authorization

    DüşükCVSS 2,1İstismar yokEPSS %22

    flir · flir ax8 firmware27 Mar 2024

  • CVE-2024-29882
    24İzleyin

    SRS DOM - XSS on JSONP callback

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    ossrs · simple realtime server28 Mar 2024

  • CVE-2024-31138
    43Planlayın

    In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

    OrtaCVSS 5,4İstismar yokEPSS %74

    jetbrains · teamcity28 Mar 2024

  • CVE-2023-42931
    31İzleyin

    The issue was addressed with improved checks.

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    apple · macos28 Mar 2024

  • CVE-2024-23727
    33İzleyin

    The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    28 Mar 2024

  • CVE-2024-30490
    40Planlayın

    WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    metagauss · profilegrid29 Mar 2024

  • CVE-2024-30491
    45Planlayın

    WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %32

    metagauss · profilegrid29 Mar 2024

  • CVE-2024-30498
    41Planlayın

    WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    crmperks · crm perks forms29 Mar 2024

  • CVE-2024-27619
    29İzleyin

    Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow.

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    29 Mar 2024