İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2024: sömürülen ve yeni ciddi CVE kayıtları

264 kayıt · 13 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2024-33775
    35İzleyin

    An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    nagios · nagios xi1 May 2024

  • CVE-2024-26304
    52Planlayın

    There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central1 May 2024

  • CVE-2024-26305
    44Planlayın

    There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendin

    KritikCVSS 9,8İstismar yokEPSS %15

    arubanetworks · sd-wan1 May 2024

  • CVE-2024-33511
    43Planlayın

    There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execut

    KritikCVSS 9,8İstismar yokEPSS %14

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central1 May 2024

  • CVE-2024-33512
    43Planlayın

    There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated rem

    KritikCVSS 9,8İstismar yokEPSS %14

    hewlett packard enterprise (hpe) · aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central1 May 2024

  • CVE-2023-49606
    58Planlayın

    A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0.

    KritikCVSS 9,8Kavram kanıtıEPSS %63

    tinyproxy project · tinyproxy1 May 2024

  • CVE-2024-32962
    40Planlayın

    XML signature verification bypass due improper verification of signature / signature spoofing

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    node-saml · xml-crypto2 May 2024

  • CVE-2024-32114
    37İzleyin

    Apache ActiveMQ: Jolokia and REST API were not secured with default configuration

    YüksekCVSS 8,8Kavram kanıtıEPSS %7

    apache · activemq2 May 2024

  • CVE-2024-33911
    28İzleyin

    WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    weblizar · school management2 May 2024

  • CVE-2024-34061
    17İzleyin

    Reflected cross site scripting in changedetection.io

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    dgtlmoon · changedetection.io2 May 2024

  • CVE-2024-34144
    53Planlayın

    A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    jenkins · script security2 May 2024

  • CVE-2024-4406
    39İzleyin

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    mi · xiaomi 13 pro firmware2 May 2024

  • CVE-2023-50685
    30İzleyin

    An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port pa

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    2 May 2024

  • CVE-2024-31964
    30İzleyin

    A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conferen

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    2 May 2024

  • CVE-2024-0710
    21İzleyin

    GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    gravity wiz · gp unique id2 May 2024

  • CVE-2024-2667
    41Planlayın

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    instawp · instawp connect2 May 2024

  • CVE-2024-2876
    63Bu hafta

    Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    icegram · email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress2 May 2024

  • CVE-2024-3553
    26İzleyin

    Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    themeum · tutor lms2 May 2024

  • CVE-2023-27326
    32İzleyin

    Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability

    YüksekCVSS 8,2Kavram kanıtıEPSS %1

    parallels · parallels desktop2 May 2024

  • CVE-2023-27327
    30İzleyin

    Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    parallels · parallels desktop2 May 2024

  • CVE-2023-27346
    35İzleyin

    TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    tp-link · archer ax21 firmware2 May 2024

  • CVE-2023-27363
    45Planlayın

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %46

    foxit · pdf editor2 May 2024

  • CVE-2023-32148
    35İzleyin

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %28

    dlink · dir-2640 firmware2 May 2024

  • CVE-2023-32150
    35İzleyin

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability

    OrtaCVSS 6,8İstismar yokEPSS %26

    dlink · dir-2640 firmware2 May 2024

  • CVE-2023-32152
    35İzleyin

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %28

    dlink · dir-2640 firmware2 May 2024

  • CVE-2023-32153
    34İzleyin

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability

    OrtaCVSS 6,8İstismar yokEPSS %23

    dlink · dir-2640 firmware2 May 2024

  • CVE-2023-32164
    55Planlayın

    D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %84

    dlink · d-view 82 May 2024

  • CVE-2023-32165
    61Bu hafta

    D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %73

    dlink · d-view 82 May 2024

  • CVE-2023-32166
    54Planlayın

    D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %74

    dlink · d-view 82 May 2024

  • CVE-2023-32167
    49Planlayın

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %76

    dlink · d-view 82 May 2024

  • CVE-2023-32169
    56Planlayın

    D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %56

    dlink · d-view 82 May 2024

  • CVE-2023-35744
    36İzleyin

    D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    dlink · dap-2622 firmware2 May 2024

  • CVE-2023-38095
    55Planlayın

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %65

    netgear · prosafe network management system2 May 2024

  • CVE-2023-38096
    64Bu hafta

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    netgear · prosafe network management system2 May 2024

  • CVE-2023-38098
    39İzleyin

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %12

    netgear · prosafe network management system2 May 2024

  • CVE-2023-38099
    52Planlayın

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %56

    netgear · prosafe network management system2 May 2024

  • CVE-2023-38120
    36İzleyin

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    adtran · sr400ac firmware2 May 2024

  • CVE-2023-38124
    53Planlayın

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %59

    inductiveautomation · ignition2 May 2024

  • CVE-2023-39469
    46Planlayın

    PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %61

    papercut · papercut mf2 May 2024

  • CVE-2023-39473
    54Planlayın

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %62

    inductiveautomation · ignition2 May 2024

  • CVE-2023-39475
    58Planlayın

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %64

    inductiveautomation · ignition2 May 2024

  • CVE-2023-40477
    34İzleyin

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    rarlab · winrar2 May 2024

  • CVE-2023-40481
    35İzleyin

    7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %13

    7-zip · 7-zip2 May 2024

  • CVE-2023-40492
    61Bu hafta

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %83

    lg · simple editor2 May 2024

  • CVE-2023-40494
    61Bu hafta

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %83

    lg · simple editor2 May 2024

  • CVE-2023-40495
    53Planlayın

    LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %75

    lg · simple editor2 May 2024

  • CVE-2023-40496
    53Planlayın

    LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %75

    lg · simple editor2 May 2024

  • CVE-2023-40497
    60Bu hafta

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %69

    lg · simple editor2 May 2024

  • CVE-2023-40498
    65Bu hafta

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    lg · simple editor2 May 2024

  • CVE-2023-40502
    61Bu hafta

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %83

    lg · simple editor2 May 2024

  • CVE-2023-40504
    66Bu hafta

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %88

    lg · simple editor2 May 2024

  • CVE-2023-41182
    54Planlayın

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %62

    netgear · prosafe network management system2 May 2024

  • CVE-2023-41183
    39İzleyin

    NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %13

    netgear · rbr760 firmware2 May 2024

  • CVE-2023-42114
    29İzleyin

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %26

    exim · exim2 May 2024

  • CVE-2023-42115
    43Planlayın

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    exim · exim2 May 2024

  • CVE-2023-44412
    57Planlayın

    D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability

    YüksekCVSS 8,2İstismar yokEPSS %82

    dlink · d-view 82 May 2024

  • CVE-2023-44441
    39İzleyin

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %27

    gimp · gimp2 May 2024

  • CVE-2023-44442
    49Planlayın

    GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %61

    gimp · gimp2 May 2024

  • CVE-2023-44443
    59Planlayın

    GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %93

    gimp · gimp2 May 2024

  • CVE-2023-44444
    48Planlayın

    GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %56

    gimp · gimp2 May 2024

  • CVE-2023-44449
    51Planlayın

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %52

    netgear · prosafe network management system2 May 2024

  • CVE-2023-44450
    51Planlayın

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %53

    netgear · prosafe network management system2 May 2024

  • CVE-2023-44451
    32İzleyin

    Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    linuxmint · xreader2 May 2024

  • CVE-2023-44452
    31İzleyin

    Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    linuxmint · xreader2 May 2024

  • CVE-2023-50218
    52Planlayın

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %55

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50223
    51Planlayın

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %54

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50224
    62Bu hafta

    TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %20

    tp-link · tl-wr841n firmware2 May 2024

  • CVE-2023-50226
    31İzleyin

    Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    parallels · parallels desktop2 May 2024

  • CVE-2023-50231
    54Planlayın

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

    KritikCVSS 9,6İstismar yokEPSS %53

    netgear · prosafe network management system2 May 2024

  • CVE-2023-51587
    41Planlayın

    Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %36

    voltronicpower · viewpower2 May 2024

  • CVE-2023-51595
    53Planlayın

    Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %48

    voltronicpower · viewpower2 May 2024

  • CVE-2024-4439
    45Planlayın

    WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due t

    OrtaCVSS 6,1Kavram kanıtıEPSS %71

    wordpress · wordpress3 May 2024

  • CVE-2024-30851
    27İzleyin

    Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downl

    OrtaCVSS 6,5SilahlaştırılmışEPSS %4

    codesiddhant · jasmin-ransomware3 May 2024

  • CVE-2024-34469
    28İzleyin

    Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    rukovoditel · rukovoditel4 May 2024

  • CVE-2024-34474
    31İzleyin

    Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    5 May 2024

  • CVE-2024-4548
    48Planlayın

    Delta Electronics DIAEnergie SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %29

    deltaww · diaenergie6 May 2024

  • CVE-2024-33111
    21İzleyin

    D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    dlink · dir-845l firmware6 May 2024

  • CVE-2024-33113
    22İzleyin

    D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

    OrtaCVSS 5,3Kavram kanıtıEPSS %3

    dlink · dir-845l firmware6 May 2024

  • CVE-2024-34064
    21İzleyin

    Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    palletsprojects · jinja6 May 2024

  • CVE-2024-34069
    31İzleyin

    Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

    YüksekCVSS 7,5SilahlaştırılmışEPSS %3

    palletsprojects · werkzeug6 May 2024

  • CVE-2024-34470
    36İzleyin

    An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.

    YüksekCVSS 8,6Kavram kanıtıEPSS %6

    hsclabs · mailinspector6 May 2024

  • CVE-2024-34472
    22İzleyin

    An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    hsclabs · mailinspector6 May 2024

  • CVE-2024-34471
    21İzleyin

    An issue was discovered in HSC Mailinspector 5.2.17-3.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    hsclabs · mailinspector6 May 2024

  • CVE-2024-3661
    31İzleyin

    DHCP routing options can manipulate interface-based VPN traffic

    YüksekCVSS 7,6Kavram kanıtıEPSS %4

    fortinet · forticlient6 May 2024

  • CVE-2024-30973
    35İzleyin

    An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitiv

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    6 May 2024

  • CVE-2024-20866
    26İzleyin

    Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step.

    OrtaCVSS 6,6İstismar yokEPSS %0

    samsung · android7 May 2024

  • CVE-2023-46012
    39İzleyin

    Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    linksys · ea7500 firmware7 May 2024

  • CVE-2024-29889
    51Planlayın

    GLPI contains an SQL injection through the saved searches

    YüksekCVSS 8,1Kavram kanıtıEPSS %64

    glpi-project · glpi7 May 2024

  • CVE-2024-31456
    44Planlayın

    GLPI contains an authenticated SQL injection

    OrtaCVSS 6,5İstismar yokEPSS %59

    glpi-project · glpi7 May 2024

  • CVE-2024-32369
    17İzleyin

    SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive infor

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    hsclabs · mailinspector7 May 2024

  • CVE-2024-32370
    39İzleyin

    An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafte

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hsclabs · mailinspector7 May 2024

  • CVE-2024-32371
    30İzleyin

    An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain a

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    hsclabs · mailinspector7 May 2024

  • CVE-2024-23708
    31İzleyin

    In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has b

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android7 May 2024

  • CVE-2024-23709
    26İzleyin

    In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · android7 May 2024

  • CVE-2024-34568
    23İzleyin

    WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    themeqx · letterpress8 May 2024

  • CVE-2024-21793
    32İzleyin

    BIG-IP Central Manager OData Injection Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    f5 · big-ip next central manager8 May 2024

  • CVE-2024-26026
    32İzleyin

    BIG-IP Central Manager SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    f5 · big-ip next central manager8 May 2024

  • CVE-2024-32113
    99Hemen

    Apache OFBiz: Path traversal leading to RCE

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · ofbiz8 May 2024

  • CVE-2024-24787
    25İzleyin

    Arbitrary code execution during build on Darwin in cmd/go

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    go toolchain · cmd/go8 May 2024

  • CVE-2024-34257
    40Planlayın

    TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrar

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    totolink · ex1800t firmware8 May 2024