İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2024: sömürülen ve yeni ciddi CVE kayıtları

218 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2023-51572
    51Planlayın

    Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %38

    voltronicpower · viewpower1 Nis 2024

  • CVE-2023-51573
    53Planlayın

    Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %45

    voltronicpower · viewpower1 Nis 2024

  • CVE-2024-0637
    57Planlayın

    Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %72

    centreon · centreon web1 Nis 2024

  • CVE-2024-23115
    48Planlayın

    Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %67

    centreon · centreon web1 Nis 2024

  • CVE-2024-23116
    44Planlayın

    Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %53

    centreon · centreon web1 Nis 2024

  • CVE-2024-23117
    44Planlayın

    Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %53

    centreon · centreon web1 Nis 2024

  • CVE-2024-23118
    44Planlayın

    Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %53

    centreon · centreon web1 Nis 2024

  • CVE-2024-29276
    49Planlayın

    An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDes

    KritikCVSS 9,8İstismar yokEPSS %32

    2 Nis 2024

  • CVE-2024-2389
    67Bu hafta

    Flowmon Unauthenticated Command Injection Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    progress · flowmon2 Nis 2024

  • CVE-2024-30350
    13İzleyin

    Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    foxit · pdf editor2 Nis 2024

  • CVE-2024-24724
    47Planlayın

    Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    gibbonedu · gibbon2 Nis 2024

  • CVE-2024-2879
    36İzleyin

    The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    kreaturamedia · layerslider3 Nis 2024

  • CVE-2024-30998
    39İzleyin

    SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain se

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    phpgurukul · men salon management system3 Nis 2024

  • CVE-2024-28515
    39İzleyin

    Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of cs

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    3 Nis 2024

  • CVE-2024-28589
    26İzleyin

    An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbi

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    3 Nis 2024

  • CVE-2024-25096
    39İzleyin

    WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    canto · canto3 Nis 2024

  • CVE-2024-30568
    53Planlayın

    Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    netgear · r6850 firmware3 Nis 2024

  • CVE-2024-30569
    31İzleyin

    An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentica

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    netgear · r6850 firmware3 Nis 2024

  • CVE-2024-30570
    21İzleyin

    An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    netgear · r6850 firmware3 Nis 2024

  • CVE-2024-30571
    34İzleyin

    An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any au

    YüksekCVSS 7,5İstismar yokEPSS %13

    netgear · r6850 firmware3 Nis 2024

  • CVE-2024-27674
    31İzleyin

    Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an un

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    macro-expert · macro expert3 Nis 2024

  • CVE-2024-2653
    57Planlayın

    amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag

    YüksekCVSS 8,2İstismar yokEPSS %83

    amphp · amphp/http-client3 Nis 2024

  • CVE-2024-2758
    47Planlayın

    Tempesta FW rate limits are not enabled by default.

    OrtaCVSS 6,3İstismar yokEPSS %72

    tempesta · tempesta fw3 Nis 2024

  • CVE-2024-3272
    98Hemen

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    dlink · dns-320l firmware3 Nis 2024

  • CVE-2024-3273
    99Hemen

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    dlink · dns-320l firmware3 Nis 2024

  • CVE-2024-3274
    31İzleyin

    D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %33

    d-link · dns-320l3 Nis 2024

  • CVE-2024-29375
    39İzleyin

    CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to t

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    4 Nis 2024

  • CVE-2024-25503
    18İzleyin

    Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sens

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    4 Nis 2024

  • CVE-2023-36643
    21İzleyin

    Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow compon

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    itb-pim · tradepro4 Nis 2024

  • CVE-2023-36644
    21İzleyin

    Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    itb-pim · tradepro4 Nis 2024

  • CVE-2023-36645
    39İzleyin

    SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer funct

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    itb-pim · tradepro4 Nis 2024

  • CVE-2024-27919
    56Planlayın

    HTTP/2: memory exhaustion due to CONTINUATION frame flood

    YüksekCVSS 7,5İstismar yokEPSS %86

    envoyproxy · envoy4 Nis 2024

  • CVE-2024-3116
    59Planlayın

    Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

    KritikCVSS 9,8SilahlaştırılmışEPSS %65

    pgadmin · pgadmin 44 Nis 2024

  • CVE-2024-28182
    46Planlayın

    Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

    OrtaCVSS 5,3İstismar yokEPSS %84

    nghttp2 · nghttp24 Nis 2024

  • CVE-2023-38709
    30İzleyin

    Apache HTTP Server: HTTP response splitting

    YüksekCVSS 7,3Kavram kanıtıEPSS %3

    apache · http server4 Nis 2024

  • CVE-2024-27316
    57Planlayın

    Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

    YüksekCVSS 7,5Kavram kanıtıEPSS %91

    apache · http server4 Nis 2024

  • CVE-2024-30255
    56Planlayın

    HTTP/2: CPU exhaustion due to CONTINUATION frame flood

    YüksekCVSS 7,5Kavram kanıtıEPSS %87

    envoyproxy · envoy4 Nis 2024

  • CVE-2023-45288
    58Planlayın

    HTTP/2 CONTINUATION flood in net/http

    YüksekCVSS 7,5Kavram kanıtıEPSS %91

    go standard library · net/http4 Nis 2024

  • CVE-2024-30270
    32İzleyin

    mailcow Path Traversal and Arbitrary Code Execution Vulnerability

    OrtaCVSS 6,2Kavram kanıtıEPSS %27

    mailcow · mailcow\4 Nis 2024

  • CVE-2024-21894
    45Planlayın

    A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated mal

    KritikCVSS 9,8İstismar yokEPSS %18

    ivanti · connect secure4 Nis 2024

  • CVE-2024-31211
    40Planlayın

    Remote Code Execution in `WP_HTML_Token`

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    wordpress · wordpress4 Nis 2024

  • CVE-2023-52235
    35İzleyin

    SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a re

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    5 Nis 2024

  • CVE-2024-22363
    30İzleyin

    SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    5 Nis 2024

  • CVE-2024-29863
    31İzleyin

    A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    5 Nis 2024

  • CVE-2024-3217
    36İzleyin

    WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    wpdirectorykit · wp directory kit5 Nis 2024

  • CVE-2023-49965
    27İzleyin

    SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    5 Nis 2024

  • CVE-2024-31218
    39İzleyin

    Missing Authentication for Critical Function in Webhood backend

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    webhood-io · webhood5 Nis 2024

  • CVE-2024-3346
    40Planlayın

    Byzoro Smart S80 webmailattach.php os command injection

    OrtaCVSS 6,3İstismar yokEPSS %49

    byzoro · smart s805 Nis 2024

  • CVE-2024-31848
    41Planlayın

    A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, whic

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    cdata · api server5 Nis 2024

  • CVE-2024-31849
    41Planlayın

    A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which c

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    cdata · connect5 Nis 2024

  • CVE-2024-31850
    35İzleyin

    A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could

    YüksekCVSS 8,6Kavram kanıtıEPSS %3

    cdata · arc5 Nis 2024

  • CVE-2024-31851
    35İzleyin

    A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which coul

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    cdata · sync5 Nis 2024

  • CVE-2024-29745
    52Planlayın

    there is a possible Information Disclosure due to uninitialized data.

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %0

    google · android5 Nis 2024

  • CVE-2024-29748
    61Bu hafta

    there is a possible way to bypass due to a logic error in the code.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    google · android5 Nis 2024

  • CVE-2024-3378
    31İzleyin

    iboss Secure Web Gateway Login Portal login cross site scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %22

    iboss · secure web gateway6 Nis 2024

  • CVE-2024-3156
    39İzleyin

    Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds m

    YüksekCVSS 8,8İstismar yokEPSS %12

    google · chrome6 Nis 2024

  • CVE-2024-0406
    31İzleyin

    Mholt/archiver: path traversal vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    mholt · archiver6 Nis 2024

  • CVE-2024-27620
    31İzleyin

    An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API.

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    6 Nis 2024

  • CVE-2024-28741
    58Planlayın

    Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php co

    YüksekCVSS 8,8SilahlaştırılmışEPSS %78

    6 Nis 2024

  • CVE-2024-26574
    31İzleyin

    Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script t

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    wondershare · filmora8 Nis 2024

  • CVE-2024-31817
    47Planlayın

    In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStat

    YüksekCVSS 7,5İstismar yokEPSS %55

    totolink · ex200 firmware8 Nis 2024

  • CVE-2024-30269
    26İzleyin

    DataEase has database configuration information exposure vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    dataease · dataease8 Nis 2024

  • CVE-2024-2511
    39İzleyin

    Unbounded memory growth with session handling in TLSv1.3

    OrtaCVSS 5,9İstismar yokEPSS %52

    openssl · openssl8 Nis 2024

  • CVE-2023-7164
    31İzleyin

    BackWPup < 4.0.4 - Unauthenticated Backup Download

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    inpsyde · backwpup8 Nis 2024

  • CVE-2024-27630
    30İzleyin

    Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    gnu · savane8 Nis 2024

  • CVE-2024-27631
    24İzleyin

    Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/userg

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    gnu · savane8 Nis 2024

  • CVE-2024-27632
    35İzleyin

    An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    gnu · savane8 Nis 2024

  • CVE-2024-27983
    58Planlayın

    An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 f

    YüksekCVSS 8,2Kavram kanıtıEPSS %87

    nodejs · node8 Nis 2024

  • CVE-2023-6319
    30İzleyin

    Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

    YüksekCVSS 7,2Kavram kanıtıEPSS %6

    lg · webos9 Nis 2024

  • CVE-2023-49074
    34İzleyin

    A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.

    YüksekCVSS 7,5İstismar yokEPSS %13

    tp-link · eap225 firmware9 Nis 2024

  • CVE-2024-21409
    30İzleyin

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %2

    microsoft · .net framework9 Nis 2024

  • CVE-2024-26158
    35İzleyin

    Microsoft Install Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · windows 10 15079 Nis 2024

  • CVE-2024-26209
    26İzleyin

    Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

    OrtaCVSS 5,5İstismar yokEPSS %14

    microsoft · windows 10 15079 Nis 2024

  • CVE-2024-26212
    49Planlayın

    DHCP Server Service Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %62

    microsoft · windows server 20089 Nis 2024

  • CVE-2024-26218
    35İzleyin

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    microsoft · windows 10 18099 Nis 2024

  • CVE-2024-26229
    34İzleyin

    Windows CSC Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %9

    microsoft · windows 10 15079 Nis 2024

  • CVE-2024-26230
    38İzleyin

    Windows Telephony Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %24

    microsoft · windows 10 15079 Nis 2024

  • CVE-2024-26256
    57Planlayın

    Libarchive Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %87

    libarchive · libarchive9 Nis 2024

  • CVE-2024-29050
    31İzleyin

    Windows Cryptographic Services Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 10 15079 Nis 2024

  • CVE-2024-29988
    79Bu hafta

    SmartScreen Prompt Security Feature Bypass Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %45

    microsoft · windows 10 18099 Nis 2024

  • CVE-2024-29990
    41Planlayın

    Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

    KritikCVSS 9,0İstismar yokEPSS %18

    microsoft · azure kubernetes service confidential containers9 Nis 2024

  • CVE-2024-24576
    46Planlayın

    Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    fedoraproject · fedora9 Nis 2024

  • CVE-2024-0588
    17İzleyin

    Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    strangerstudios · paid memberships pro9 Nis 2024

  • CVE-2024-1813
    39İzleyin

    Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    presstigers · simple job board9 Nis 2024

  • CVE-2024-2340
    29İzleyin

    Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing

    OrtaCVSS 5,3Kavram kanıtıEPSS %27

    theme-fusion · avada9 Nis 2024

  • CVE-2024-3097
    32İzleyin

    WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %38

    imagely · nextgen gallery9 Nis 2024

  • CVE-2024-3136
    41Planlayın

    MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    stylemixthemes · masterstudy lms9 Nis 2024

  • CVE-2024-27665
    21İzleyin

    Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    9 Nis 2024

  • CVE-2024-31309
    58Planlayın

    Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack

    YüksekCVSS 7,5İstismar yokEPSS %94

    apache · traffic server10 Nis 2024

  • CVE-2024-24809
    50Planlayın

    Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type

    YüksekCVSS 8,5SilahlaştırılmışEPSS %54

    traccar · traccar10 Nis 2024

  • CVE-2024-27474
    35İzleyin

    Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF).

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    leantime · leantime10 Nis 2024

  • CVE-2024-29296
    21İzleyin

    A user enumeration vulnerability was found in Portainer CE 2.19.4.

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    portainer · portainer10 Nis 2024

  • CVE-2024-1520
    53Planlayın

    OS Command Injection in parisneo/lollms-webui

    KritikCVSS 9,8İstismar yokEPSS %48

    lollms · lollms web ui10 Nis 2024

  • CVE-2024-1600
    47Planlayın

    Local File Inclusion in parisneo/lollms-webui

    KritikCVSS 9,3İstismar yokEPSS %32

    lollms · lollms web ui10 Nis 2024

  • CVE-2024-1728
    56Planlayın

    Local File Inclusion in gradio-app/gradio

    YüksekCVSS 7,5Kavram kanıtıEPSS %85

    gradio project · gradio10 Nis 2024

  • CVE-2024-3385
    30İzleyin

    PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled

    YüksekCVSS 7,5İstismar yokEPSS %0

    paloaltonetworks · pan-os10 Nis 2024

  • CVE-2024-3568
    39İzleyin

    Arbitrary Code Execution via Deserialization in huggingface/transformers

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    huggingface · transformers10 Nis 2024

  • CVE-2024-31214
    43Planlayın

    Traccar's unrestricted file upload vulnerability in device image upload could lead to remote code execution

    KritikCVSS 9,6SilahlaştırılmışEPSS %17

    traccar · traccar10 Nis 2024

  • CVE-2024-29269
    37İzleyin

    An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    telesquare · tlr-2005ksh firmware10 Nis 2024

  • CVE-2024-31465
    58Planlayın

    XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet

    YüksekCVSS 8,8İstismar yokEPSS %75

    xwiki · xwiki10 Nis 2024