İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2024: sömürülen ve yeni ciddi CVE kayıtları

218 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2024-31819
    60Bu hafta

    An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the sub

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    wwbn · avideo10 Nis 2024

  • CVE-2024-31982
    49Planlayın

    XWiki Platform: Remote code execution as guest via DatabaseSearch

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    xwiki · xwiki10 Nis 2024

  • CVE-2024-31984
    60Bu hafta

    XWiki Platform: Remote code execution through space title and Solr space facet

    YüksekCVSS 8,8İstismar yokEPSS %82

    xwiki · xwiki10 Nis 2024

  • CVE-2024-31997
    57Planlayın

    XWiki Platform remote code execution from account through UIExtension parameters

    YüksekCVSS 8,8İstismar yokEPSS %73

    xwiki · xwiki10 Nis 2024

  • CVE-2024-29399
    30İzleyin

    An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a cr

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    gnu · savane11 Nis 2024

  • CVE-2024-0881
    26İzleyin

    Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access

    OrtaCVSS 5,4Kavram kanıtıEPSS %16

    pickplugins · post grid11 Nis 2024

  • CVE-2024-22722
    28İzleyin

    Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    formtools · form tools11 Nis 2024

  • CVE-2024-25376
    31İzleyin

    An issue discovered in Thesycon Software Solutions Gmbh & Co.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    thesycon · tusbaudio11 Nis 2024

  • CVE-2024-25852
    40Planlayın

    Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access contro

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    linksys · re7000 firmware11 Nis 2024

  • CVE-2024-22734
    24İzleyin

    An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensit

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    amcsgroup · trux waste management12 Nis 2024

  • CVE-2024-22526
    22İzleyin

    Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service (DoS) via exr image file.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    bandisoft · bandiview12 Nis 2024

  • CVE-2024-3400
    100Hemen

    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    paloaltonetworks · pan-os12 Nis 2024

  • CVE-2024-3054
    40Planlayın

    WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization

    YüksekCVSS 7,2İstismar yokEPSS %41

    wpvivid · migration\, backup\, staging12 Nis 2024

  • CVE-2023-51409
    58Planlayın

    WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %63

    meowapps · ai engine12 Nis 2024

  • CVE-2024-31839
    60Bu hafta

    Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler

    OrtaCVSS 4,8SilahlaştırılmışEPSS %8

    tiagorlampert · chaos12 Nis 2024

  • CVE-2024-3690
    35İzleyin

    PHPGurukul Small CRM Change Password sql injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    phpgurukul · small crm12 Nis 2024

  • CVE-2024-32019
    40Planlayın

    ndsudo: local privilege escalation via untrusted search path

    YüksekCVSS 8,8SilahlaştırılmışEPSS %1

    netdata · netdata12 Nis 2024

  • CVE-2024-26817
    22İzleyin

    amdkfd: use calloc instead of kzalloc to avoid integer overflow

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel13 Nis 2024

  • CVE-2024-3721
    51Planlayın

    TBK DVR-4104/DVR-4216 os command injection

    OrtaCVSS 6,3İstismar yokEPSS %86

    tbk · dvr-410413 Nis 2024

  • CVE-2024-1655
    36İzleyin

    ASUS WiFi Router - OS Command Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    asus · expertwifi ebm6315 Nis 2024

  • CVE-2024-0399
    33İzleyin

    WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    vanquish · woocommerce customers manager15 Nis 2024

  • CVE-2024-32128
    38İzleyin

    WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    realtyna · realtyna organic idx plugin15 Nis 2024

  • CVE-2024-32136
    30İzleyin

    WordPress BWL Advanced FAQ Manager plugin <= 2.0.3 - Auth. SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %1

    xenioushk · bwl advanced faq manager15 Nis 2024

  • CVE-2024-32104
    17İzleyin

    WordPress NextMove Lite plugin <= 2.18.1 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    xlplugins · nextmove15 Nis 2024

  • CVE-2023-45503
    21İzleyin

    SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service (DoS),

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    macs cms project · macs cms15 Nis 2024

  • CVE-2024-31497
    25İzleyin

    In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui

    OrtaCVSS 5,9Kavram kanıtıEPSS %5

    putty · putty15 Nis 2024

  • CVE-2024-30656
    30İzleyin

    An issue in Fireboltt Dream Wristphone BSW202_FB_AAC_v2.0_20240110-20240110-1956 allows attackers to cause a Denial of Service (DoS) via a c

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    fireboltt · dream firmware15 Nis 2024

  • CVE-2024-1183
    27İzleyin

    SSRF Vulnerability in gradio-app/gradio

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    gradio project · gradio15 Nis 2024

  • CVE-2024-1483
    31İzleyin

    Path Traversal Vulnerability in mlflow/mlflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    lfprojects · mlflow15 Nis 2024

  • CVE-2024-1561
    33İzleyin

    Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    gradio project · gradio15 Nis 2024

  • CVE-2024-1601
    51Planlayın

    SQL Injection in parisneo/lollms-webui

    KritikCVSS 9,8İstismar yokEPSS %40

    lollms · lollms-webui15 Nis 2024

  • CVE-2024-1739
    36İzleyin

    Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary

    KritikCVSS 9,1İstismar yokEPSS %0

    lunary · lunary15 Nis 2024

  • CVE-2024-2083
    50Planlayın

    Directory Traversal in zenml-io/zenml

    KritikCVSS 9,9Kavram kanıtıEPSS %37

    zenml · zenml15 Nis 2024

  • CVE-2024-22262
    32İzleyin

    CVE-2024-22262: Spring Framework URL Parsing with Host Validation

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    spring · spring framework16 Nis 2024

  • CVE-2024-3867
    24İzleyin

    Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    tainacan · tainacan interface16 Nis 2024

  • CVE-2024-32022
    40Planlayın

    Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    bmaltais · kohya ss16 Nis 2024

  • CVE-2023-40000
    40Planlayın

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %54

    litespeedtech · litespeed cache16 Nis 2024

  • CVE-2024-3660
    40Planlayın

    Arbitrary code injection vulnerability in Keras framework < 2.13

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    keras · keras16 Nis 2024

  • CVE-2024-21006
    32İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    oracle · weblogic server16 Nis 2024

  • CVE-2024-21107
    26İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    oracle · vm virtualbox16 Nis 2024

  • CVE-2024-21111
    32İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    oracle · vm virtualbox16 Nis 2024

  • CVE-2024-29291
    0İzleyin

    An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log.

    Kavram kanıtıEPSS %1

    16 Nis 2024

  • CVE-2024-31680
    35İzleyin

    File Upload vulnerability in Shibang Communications Co., Ltd.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    16 Nis 2024

  • CVE-2024-3833
    40Planlayın

    Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption

    YüksekCVSS 8,8İstismar yokEPSS %17

    google · chrome17 Nis 2024

  • CVE-2023-39367
    39İzleyin

    An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU).

    YüksekCVSS 7,2İstismar yokEPSS %37

    peplink · smart reader firmware17 Nis 2024

  • CVE-2024-2961
    55Planlayın

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converti

    YüksekCVSS 7,3SilahlaştırılmışEPSS %88

    gnu · glibc17 Nis 2024

  • CVE-2024-28185
    60Bu hafta

    Judge0 vulnerable to Sandbox Escape via Symbolic Link

    KritikCVSS 10,0SilahlaştırılmışEPSS %7

    judge0 · judge018 Nis 2024

  • CVE-2024-28189
    60Bu hafta

    Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link

    KritikCVSS 10,0SilahlaştırılmışEPSS %7

    judge0 · judge018 Nis 2024

  • CVE-2024-29021
    42Planlayın

    SSRF into Sandbox Escape through Unsafe Default Configuration

    KritikCVSS 9,0İstismar yokEPSS %20

    judge0 · judge018 Nis 2024

  • CVE-2024-32462
    33İzleyin

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    flatpak · flatpak18 Nis 2024

  • CVE-2024-3742
    34İzleyin

    Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    electrolink · compact dab transmitter18 Nis 2024

  • CVE-2024-31750
    45Planlayın

    SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    f-logic · datacube3 firmware18 Nis 2024

  • CVE-2024-23535
    55Planlayın

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary

    YüksekCVSS 8,8İstismar yokEPSS %68

    ivanti · avalanche18 Nis 2024

  • CVE-2024-24992
    56Planlayın

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary

    YüksekCVSS 8,8İstismar yokEPSS %70

    ivanti · avalanche18 Nis 2024

  • CVE-2024-24994
    55Planlayın

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary

    YüksekCVSS 8,8İstismar yokEPSS %68

    ivanti · avalanche18 Nis 2024

  • CVE-2024-24996
    49Planlayın

    A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to e

    KritikCVSS 9,8İstismar yokEPSS %32

    ivanti · avalanche18 Nis 2024

  • CVE-2024-1065
    23İzleyin

    Mali GPU Kernel Driver allows improper GPU memory processing operations

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    arm · 5th gen gpu architecture kernel driver19 Nis 2024

  • CVE-2023-50260
    47Planlayın

    Wazuh's vulnerability in host_deny AR script allows arbitrary command execution

    YüksekCVSS 8,8İstismar yokEPSS %41

    wazuh · wazuh19 Nis 2024

  • CVE-2024-29028
    21İzleyin

    memos vulnerable to an SSRF in /o/get/httpmeta

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    usememos · memos19 Nis 2024

  • CVE-2024-29030
    21İzleyin

    memos vulnerable to an SSRF in /api/resource

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    usememos · memos19 Nis 2024

  • CVE-2024-22640
    30İzleyin

    TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    tcpdf project · tcpdf19 Nis 2024

  • CVE-2024-29029
    24İzleyin

    memos vulnerable to an SSRF in /o/get/image

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    usememos · memos19 Nis 2024

  • CVE-2024-27348
    99Hemen

    Apache HugeGraph-Server: Command execution in gremlin

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · hugegraph22 Nis 2024

  • CVE-2024-31666
    40Planlayın

    An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    flusity · flusity22 Nis 2024

  • CVE-2024-32238
    55Planlayın

    H3C ER8300G2-X is vulnerable to Incorrect Access Control.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    22 Nis 2024

  • CVE-2024-32399
    31İzleyin

    Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via

    YüksekCVSS 7,6Kavram kanıtıEPSS %3

    22 Nis 2024

  • CVE-2024-4040
    100Hemen

    Unauthenticated arbitrary file read and remote code execution in CrushFTP

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    crushftp · crushftp22 Nis 2024

  • CVE-2024-32394
    39İzleyin

    An issue in ruijie.com/cn RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S_07150910 and RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S

    YüksekCVSS 8,8İstismar yokEPSS %12

    22 Nis 2024

  • CVE-2024-32459
    40Planlayın

    FreeRDP Out-Of-Bounds Read in ncrush_decompress

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    freerdp · freerdp22 Nis 2024

  • CVE-2024-32461
    41Planlayın

    LibreNMS vulnerable to time-based SQL injection that leads to database extraction

    YüksekCVSS 8,8İstismar yokEPSS %19

    librenms · librenms22 Nis 2024

  • CVE-2024-32479
    31İzleyin

    LibreNMS's Improper Sanitization on Service template name leads to Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %34

    librenms · librenms22 Nis 2024

  • CVE-2024-32480
    34İzleyin

    LibreNMS's Time-Based Blind SQL injection leads to database extraction

    YüksekCVSS 7,2İstismar yokEPSS %20

    librenms · librenms22 Nis 2024

  • CVE-2024-3177
    11İzleyin

    Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

    DüşükCVSS 2,7Kavram kanıtıEPSS %2

    kubernetes · kubernetes22 Nis 2024

  • CVE-2024-3293
    35İzleyin

    rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    rtcamp · rtmedia for wordpress, buddypress and bbpress22 Nis 2024

  • CVE-2024-31077
    37İzleyin

    Forminator prior to 1.29.3 contains a SQL injection vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %30

    incsub · forminator23 Nis 2024

  • CVE-2024-31804
    26İzleyin

    An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local attacker to escalate privileges via the Program.

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    23 Nis 2024

  • CVE-2024-32258
    36İzleyin

    The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authen

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    23 Nis 2024

  • CVE-2024-32709
    39İzleyin

    WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    plechev andrey · wp-recall24 Nis 2024

  • CVE-2024-32825
    31İzleyin

    WordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    simply static · simply static24 Nis 2024

  • CVE-2023-47504
    40Planlayın

    WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    elementor · website builder24 Nis 2024

  • CVE-2024-20353
    85Hemen

    A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %69

    cisco · adaptive security appliance software24 Nis 2024

  • CVE-2024-20359
    60Bu hafta

    A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adap

    OrtaCVSS 6,0KEVSilahlaştırılmışEPSS %18

    cisco · adaptive security appliance software24 Nis 2024

  • CVE-2024-20356
    43Planlayın

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote a

    YüksekCVSS 8,7Kavram kanıtıEPSS %29

    cisco · cisco unified computing system (standalone)24 Nis 2024

  • CVE-2024-2434
    39İzleyin

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    YüksekCVSS 8,1İstismar yokEPSS %23

    gitlab · gitlab25 Nis 2024

  • CVE-2024-2829
    38İzleyin

    Inefficient Regular Expression Complexity in GitLab

    YüksekCVSS 7,5İstismar yokEPSS %25

    gitlab · gitlab25 Nis 2024

  • CVE-2024-4024
    39İzleyin

    Authentication Bypass by Assumed-Immutable Data in GitLab

    YüksekCVSS 8,8İstismar yokEPSS %14

    gitlab · gitlab25 Nis 2024

  • CVE-2024-32651
    66Bu hafta

    Server Side Template Injection in Jinja2 allows Remote Command Execution

    KritikCVSS 10,0Kavram kanıtıEPSS %85

    dgtlmoon · changedetection.io25 Nis 2024

  • CVE-2024-32868
    32İzleyin

    ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    zitadel · zitadel25 Nis 2024

  • CVE-2023-51364
    42Planlayın

    QTS, QuTS hero, QuTScloud

    YüksekCVSS 7,5İstismar yokEPSS %39

    qnap · qts26 Nis 2024

  • CVE-2023-51365
    40Planlayın

    QTS, QuTS hero, QuTScloud

    YüksekCVSS 7,5İstismar yokEPSS %34

    qnap · qts26 Nis 2024

  • CVE-2024-33344
    45Planlayın

    D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to e

    KritikCVSS 9,8İstismar yokEPSS %19

    dlink · dir-822\+ firmware26 Nis 2024

  • CVE-2024-4236
    39İzleyin

    Tenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflow

    YüksekCVSS 8,8İstismar yokEPSS %14

    tenda · ax1803 firmware26 Nis 2024

  • CVE-2024-30804
    39İzleyin

    An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via craft

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    26 Nis 2024

  • CVE-2024-4257
    30İzleyin

    BlueNet Technology Clinical Browsing System deleteStudy.php sql injection

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    bluenettechnology · clinical browsing system27 Nis 2024

  • CVE-2024-33883
    16İzleyin

    The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

    OrtaCVSS 4,0Kavram kanıtıEPSS %0

    28 Nis 2024

  • CVE-2024-1874
    47Planlayın

    Command injection via array-ish $command parameter of proc_open()

    KritikCVSS 9,4Kavram kanıtıEPSS %32

    php · php29 Nis 2024

  • CVE-2024-2756
    37İzleyin

    __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

    OrtaCVSS 6,5İstismar yokEPSS %38

    php group · php29 Nis 2024

  • CVE-2024-33648
    26İzleyin

    WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    kemory grubb · recencio book reviews29 Nis 2024

  • CVE-2024-33559
    38İzleyin

    WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    8theme · xstore29 Nis 2024

  • CVE-2024-33575
    21İzleyin

    WordPress User Meta plugin <= 3.0 - Sensitive Data Exposure vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    user meta · user meta29 Nis 2024