İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2024: sömürülen ve yeni ciddi CVE kayıtları

264 kayıt · 13 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2023-43040
    40Planlayın

    IBM Spectrum Fusion HCI improper access control

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    ibm · storage fusion hci14 May 2024

  • CVE-2023-46870
    29İzleyin

    extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    14 May 2024

  • CVE-2023-52654
    18İzleyin

    io_uring/af_unix: disable sending io_uring over sockets

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    linux · linux kernel14 May 2024

  • CVE-2024-0087
    41Planlayın

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file.

    YüksekCVSS 8,8İstismar yokEPSS %19

    nvidia · triton inference server14 May 2024

  • CVE-2024-0088
    38İzleyin

    NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access is

    YüksekCVSS 8,1İstismar yokEPSS %18

    nvidia · triton inference server14 May 2024

  • CVE-2024-22774
    31İzleyin

    An issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker to escalate privileges via the ccsservice.ex

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    14 May 2024

  • CVE-2024-25641
    54Planlayın

    Cacti RCE vulnerability when importing packages

    YüksekCVSS 7,2SilahlaştırılmışEPSS %86

    cacti · cacti14 May 2024

  • CVE-2024-27398
    31İzleyin

    Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel14 May 2024

  • CVE-2024-27460
    27İzleyin

    A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.

    OrtaCVSS 6,7Kavram kanıtıEPSS %1

    hp · poly plantronics hub14 May 2024

  • CVE-2024-27804
    22İzleyin

    The issue was addressed with improved memory handling.

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    apple · ipados14 May 2024

  • CVE-2024-27821
    18İzleyin

    A path handling issue was addressed with improved validation.

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    apple · ipados14 May 2024

  • CVE-2024-27822
    40Planlayın

    A logic issue was addressed with improved restrictions.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %1

    apple · macos14 May 2024

  • CVE-2024-28075
    55Planlayın

    SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution

    YüksekCVSS 8,0İstismar yokEPSS %78

    solarwinds · access rights manager14 May 2024

  • CVE-2024-29895
    70Bu hafta

    Cacti command injection in cmd_realtime.php

    KritikCVSS 10,0Kavram kanıtıEPSS %98

    cacti · cacti14 May 2024

  • CVE-2024-2257
    36İzleyin

    Password Policy Bypass Vulnerability in Digisol Router

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    digisol · digisol router dg-gr132114 May 2024

  • CVE-2024-2454
    36İzleyin

    Allocation of Resources Without Limits or Throttling in GitLab

    OrtaCVSS 6,5İstismar yokEPSS %33

    gitlab · gitlab14 May 2024

  • CVE-2024-2651
    36İzleyin

    Inefficient Regular Expression Complexity in GitLab

    OrtaCVSS 6,5İstismar yokEPSS %33

    gitlab · gitlab14 May 2024

  • CVE-2024-31444
    25İzleyin

    Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database

    OrtaCVSS 5,4İstismar yokEPSS %14

    cacti · cacti14 May 2024

  • CVE-2024-31445
    43Planlayın

    SQL Injection vulnerability in automation_get_new_graphs_sql

    YüksekCVSS 8,8İstismar yokEPSS %26

    cacti · cacti14 May 2024

  • CVE-2024-31458
    36İzleyin

    Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database

    YüksekCVSS 8,0İstismar yokEPSS %12

    cacti · cacti14 May 2024

  • CVE-2024-31771
    31İzleyin

    Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    totalav · totalav14 May 2024

  • CVE-2024-32700
    41Planlayın

    WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    kognetiks · kognetiks chatbot for wordpress14 May 2024

  • CVE-2024-32735
    41Planlayın

    CyberPower PowerPanel Enterprise Missing Authentication

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    cyberpower · powerpanel14 May 2024

  • CVE-2024-32736
    32İzleyin

    CyberPower PowerPanel Enterprise SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    cyberpower · powerpanel14 May 2024

  • CVE-2024-32737
    32İzleyin

    CyberPower PowerPanel Enterprise SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    cyberpower · powerpanel14 May 2024

  • CVE-2024-32738
    31İzleyin

    CyberPower PowerPanel Enterprise SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    cyberpower · powerpanel14 May 2024

  • CVE-2024-32739
    32İzleyin

    CyberPower PowerPanel Enterprise SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    cyberpower · powerpanel14 May 2024

  • CVE-2024-32964
    52Planlayın

    lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability

    KritikCVSS 9,0Kavram kanıtıEPSS %52

    lobehub · lobe chat14 May 2024

  • CVE-2024-34070
    38İzleyin

    Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    froxlor · froxlor14 May 2024

  • CVE-2024-34218
    20İzleyin

    TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost functio

    DüşükCVSS 3,8İstismar yokEPSS %17

    totolink · cp450 firmware14 May 2024

  • CVE-2024-34219
    40Planlayın

    TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log

    YüksekCVSS 8,6İstismar yokEPSS %20

    totolink · cp450 firmware14 May 2024

  • CVE-2024-34220
    30İzleyin

    Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oretnom23 · human resource management system14 May 2024

  • CVE-2024-34221
    35İzleyin

    Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · human resource management system14 May 2024

  • CVE-2024-34222
    23İzleyin

    Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    oretnom23 · human resource management system14 May 2024

  • CVE-2024-34223
    17İzleyin

    Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    oretnom23 · human resource management system14 May 2024

  • CVE-2024-34224
    29İzleyin

    Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 all

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    oretnom23 · computer laboratory management system14 May 2024

  • CVE-2024-34225
    24İzleyin

    Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oretnom23 · computer laboratory management system14 May 2024

  • CVE-2024-34226
    37İzleyin

    SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    oretnom23 · visitor management system14 May 2024

  • CVE-2024-34310
    35İzleyin

    Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    14 May 2024

  • CVE-2024-34351
    32İzleyin

    Next.js Server-Side Request Forgery in Server Actions

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    vercel · next.js14 May 2024

  • CVE-2024-34359
    46Planlayın

    llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

    KritikCVSS 9,6İstismar yokEPSS %26

    abetlen · llama-cpp-python14 May 2024

  • CVE-2024-35205
    31İzleyin

    The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them t

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    14 May 2024

  • CVE-2024-3806
    40Planlayın

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    p-themes · porto14 May 2024

  • CVE-2024-4041
    24İzleyin

    Yoast SEO <= 22.5 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    yoast · yoast seo – advanced seo with real-time guidance and built-in ai14 May 2024

  • CVE-2024-4044
    35İzleyin

    Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio

    YüksekCVSS 7,8İstismar yokEPSS %14

    ni · flexlogger14 May 2024

  • CVE-2024-4068
    30İzleyin

    Memory Exhaustion in braces

    YüksekCVSS 7,5İstismar yokEPSS %1

    jonschlinkert · braces14 May 2024

  • CVE-2024-4231
    27İzleyin

    Incorrect Access Control Vulnerability in Digisol Router

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    digisol · digisol router dg-gr132114 May 2024

  • CVE-2024-4232
    21İzleyin

    Password Storage in Plaintext Vulnerability in Digisol Router

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    digisol · digisol router dg-gr132114 May 2024

  • CVE-2024-4434
    50Planlayın

    LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    thimpress · learnpress14 May 2024

  • CVE-2024-4671
    71Bu hafta

    Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to pot

    KritikCVSS 9,6KEVSilahlaştırılmışEPSS %8

    google · chrome14 May 2024

  • CVE-2024-4701
    46Planlayın

    Path Traversal vulnerability via File Uploads in Genie

    KritikCVSS 9,9Kavram kanıtıEPSS %24

    netflix · genie14 May 2024

  • CVE-2024-0762
    31İzleyin

    Potential buffer overflow when handling UEFI variables

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    intel · celeron 3865u14 May 2024

  • CVE-2024-34716
    41Planlayın

    PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

    OrtaCVSS 6,1Kavram kanıtıEPSS %56

    prestashop · prestashop14 May 2024

  • CVE-2024-4761
    68Bu hafta

    Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %11

    google · chrome14 May 2024

  • CVE-2023-24203
    21İzleyin

    Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · simple customer relationship management system14 May 2024

  • CVE-2024-30038
    40Planlayın

    Win32k Elevation of Privilege Vulnerability

    YüksekCVSS 7,8SilahlaştırılmışEPSS %2

    microsoft · windows 10 150714 May 2024

  • CVE-2024-30040
    66Bu hafta

    Windows MSHTML Platform Security Feature Bypass Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150714 May 2024

  • CVE-2024-30043
    47Planlayın

    Microsoft SharePoint Server Information Disclosure Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    microsoft · sharepoint server14 May 2024

  • CVE-2024-30044
    53Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %83

    microsoft · sharepoint server14 May 2024

  • CVE-2024-30050
    24İzleyin

    Windows Mark of the Web Security Feature Bypass Vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %11

    microsoft · windows 10 150714 May 2024

  • CVE-2024-30051
    63Bu hafta

    Windows DWM Core Library Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    microsoft · windows 10 150714 May 2024

  • CVE-2024-4367
    56Planlayın

    A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.

    YüksekCVSS 8,8Kavram kanıtıEPSS %70

    mozilla · firefox14 May 2024

  • CVE-2024-32002
    45Planlayın

    Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

    KritikCVSS 9,0Kavram kanıtıEPSS %29

    git · git14 May 2024

  • CVE-2024-32004
    31İzleyin

    Git vulnerable to Remote Code Execution while cloning special-crafted local repositories

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    git-scm · git14 May 2024

  • CVE-2024-3822
    19İzleyin

    Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    mranderson · base64 encoder\/decoder15 May 2024

  • CVE-2024-4947
    73Bu hafta

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf

    KritikCVSS 9,6KEVSilahlaştırılmışEPSS %15

    google · chrome15 May 2024

  • CVE-2024-3435
    33İzleyin

    Path Traversal in parisneo/lollms-webui

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    lollms · lollms web ui16 May 2024

  • CVE-2024-3848
    43Planlayın

    Path Traversal Bypass in mlflow/mlflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %43

    lfprojects · mlflow16 May 2024

  • CVE-2024-4322
    39İzleyin

    Path Traversal in parisneo/lollms-webui

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    lollms · lollms web ui16 May 2024

  • CVE-2024-4391
    21İzleyin

    Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widge

    OrtaCVSS 5,4İstismar yokEPSS %0

    leevio · happy addons for elementor16 May 2024

  • CVE-2024-4351
    35İzleyin

    Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    themeum · tutor lms16 May 2024

  • CVE-2024-4999
    41Planlayın

    Ligowave Unity/Pro/Mimo/APC Arbitrary Command Injection

    KritikCVSS 9,4İstismar yokEPSS %12

    ligowave · unity16 May 2024

  • CVE-2024-31142
    35İzleyin

    x86: Incorrect logic for BTC/SRSO mitigations

    YüksekCVSS 7,5İstismar yokEPSS %17

    xen · xen16 May 2024

  • CVE-2024-34582
    24İzleyin

    Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    16 May 2024

  • CVE-2024-34958
    26İzleyin

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    idccms · idccms16 May 2024

  • CVE-2024-35176
    22İzleyin

    REXML contains a denial of service vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    ruby-lang · rexml16 May 2024

  • CVE-2024-3640
    28İzleyin

    Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    rockwell automation · factorytalk® remote access™16 May 2024

  • CVE-2024-4956
    35İzleyin

    Nexus Repository 3 - Path Traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    sonatype · nexus repository16 May 2024

  • CVE-2024-22476
    51Planlayın

    Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially

    KritikCVSS 10,0Kavram kanıtıEPSS %35

    16 May 2024

  • CVE-2024-3231
    24İzleyin

    Popup4Phone <= 1.3.2 - Unauthenticated Stored XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    ivanweb · popup4phone17 May 2024

  • CVE-2023-37999
    40Planlayın

    WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    hasthemes · ht mega17 May 2024

  • CVE-2023-41954
    34İzleyin

    WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    properfraction · profilepress17 May 2024

  • CVE-2024-31351
    39İzleyin

    WordPress Copymatic plugin <= 1.6 - Unauthenticated Arbitrary File Upload vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    copymatic · copymatic17 May 2024

  • CVE-2023-46197
    26İzleyin

    WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosure

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    supsystic · popup17 May 2024

  • CVE-2024-22145
    35İzleyin

    WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    instawp · instawp connect17 May 2024

  • CVE-2024-24882
    40Planlayın

    WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    themegrill · masteriyo17 May 2024

  • CVE-2024-27954
    59Planlayın

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %72

    wp automatic · automatic17 May 2024

  • CVE-2024-32507
    35İzleyin

    WordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    hamid alinia · login with phone number17 May 2024

  • CVE-2024-33644
    39İzleyin

    WordPress Customify Site Library plugin <= 0.0.9 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    wpcustomify · customify site library17 May 2024

  • CVE-2024-34370
    28İzleyin

    WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    wpfactory · ean for woocommerce17 May 2024

  • CVE-2024-22120
    58Planlayın

    Time Based SQL Injection in Zabbix Server Audit Log

    YüksekCVSS 8,8Kavram kanıtıEPSS %76

    zabbix · zabbix17 May 2024

  • CVE-2024-32830
    30İzleyin

    WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    themekraft · buddyforms17 May 2024

  • CVE-2024-34982
    40Planlayın

    An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code v

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    lylme · lylme spage17 May 2024

  • CVE-2024-31974
    25İzleyin

    The com.solarized.firedown (aka Solarized FireDown Browser & Downloader) application 1.0.76 for Android allows a remote attacker to execute

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    17 May 2024

  • CVE-2024-34241
    19İzleyin

    A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admi

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    rocketsoft · rocket lms17 May 2024

  • CVE-2024-2771
    40Planlayın

    Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    fluentforms · contact form18 May 2024

  • CVE-2024-2782
    30İzleyin

    Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    fluentforms · contact form18 May 2024

  • CVE-2024-4323
    47Planlayın

    Fluent Bit Memory Corruption Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    treasuredata · fluent bit20 May 2024

  • CVE-2024-33901
    26İzleyin

    Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database vi

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    keepassxc · keepassxc20 May 2024

  • CVE-2024-4875
    17İzleyin

    HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    hasthemes · ht mega21 May 2024