İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2024: sömürülen ve yeni ciddi CVE kayıtları

180 kayıt · 13 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-36042
    39İzleyin

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthentic

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    silverpeas · silverpeas3 Haz 2024

  • CVE-2024-3829
    36İzleyin

    Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    qdrant · qdrant3 Haz 2024

  • CVE-2021-3899
    31İzleyin

    There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute ar

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    canonical · apport3 Haz 2024

  • CVE-2024-34051
    22İzleyin

    A Reflected Cross-site scripting (XSS) vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote atta

    OrtaCVSS 4,6İstismar yokEPSS %11

    3 Haz 2024

  • CVE-2024-29972
    66Bu hafta

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions b

    KritikCVSS 9,8Kavram kanıtıEPSS %89

    zyxel · nas326 firmware3 Haz 2024

  • CVE-2024-29973
    65Bu hafta

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    zyxel · nas326 firmware3 Haz 2024

  • CVE-2024-29974
    46Planlayın

    ** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versio

    KritikCVSS 9,8İstismar yokEPSS %22

    zyxel · nas326 firmware3 Haz 2024

  • CVE-2024-0757
    21İzleyin

    Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    elearningfreak · insert or embed articulate content4 Haz 2024

  • CVE-2024-4180
    37İzleyin

    The Events Calendar < 6.4.0.1 - Reflected XSS

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    stellarwp · the events calendar4 Haz 2024

  • CVE-2024-36104
    62Bu hafta

    Apache OFBiz: Path traversal leading to a RCE

    KritikCVSS 9,1Kavram kanıtıEPSS %87

    apache · ofbiz4 Haz 2024

  • CVE-2024-4253
    37İzleyin

    Command Injection in gradio-app/gradio

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    gradio project · gradio4 Haz 2024

  • CVE-2024-5420
    35İzleyin

    Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro

    YüksekCVSS 8,3Kavram kanıtıEPSS %5

    seh computertechnik · utnserver pro4 Haz 2024

  • CVE-2024-5421
    35İzleyin

    Authenticated Command Injection

    YüksekCVSS 8,7Kavram kanıtıEPSS %3

    seh computertechnik · utnserver pro4 Haz 2024

  • CVE-2024-37054
    35İzleyin

    Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    lfprojects · mlflow4 Haz 2024

  • CVE-2024-4254
    28İzleyin

    Secrets Exfiltration in gradio-app/gradio

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    gradio project · gradio4 Haz 2024

  • CVE-2023-51511
    26İzleyin

    WordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    booster · booster for woocommerce4 Haz 2024

  • CVE-2024-25600
    66Bu hafta

    WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

    KritikCVSS 10,0SilahlaştırılmışEPSS %88

    codeer limited · bricks builder4 Haz 2024

  • CVE-2024-28999
    34İzleyin

    SolarWinds Platform Race Condition Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    solarwinds · solarwinds platform4 Haz 2024

  • CVE-2024-36857
    31İzleyin

    Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    homebrew · jan4 Haz 2024

  • CVE-2024-36858
    40Planlayın

    An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    homebrew · jan4 Haz 2024

  • CVE-2024-36675
    36İzleyin

    LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    lylme · lylme spage4 Haz 2024

  • CVE-2024-5483
    21İzleyin

    LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    thimpress · learnpress4 Haz 2024

  • CVE-2024-4295
    42Planlayın

    Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    icegram · email subscribers \& newsletters5 Haz 2024

  • CVE-2024-3469
    24İzleyin

    GP Premium <= 2.4.0 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    generatepress · generatepress5 Haz 2024

  • CVE-2024-36837
    32İzleyin

    SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    crmeb · crmeb5 Haz 2024

  • CVE-2024-20404
    28İzleyin

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF at

    OrtaCVSS 5,3Kavram kanıtıEPSS %22

    cisco · finesse5 Haz 2024

  • CVE-2024-20405
    24İzleyin

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored X

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    cisco · finesse5 Haz 2024

  • CVE-2024-5324
    35İzleyin

    XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    xootix · login\/signup popup5 Haz 2024

  • CVE-2024-5153
    39İzleyin

    Startklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    web-shop-host · startklar elmentor addons6 Haz 2024

  • CVE-2024-28995
    90Hemen

    SolarWinds Serv-U L Directory Transversal Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    solarwinds · serv-u6 Haz 2024

  • CVE-2024-34832
    41Planlayın

    Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    cubecart · cubecart6 Haz 2024

  • CVE-2024-37152
    31İzleyin

    Unauthenticated Access to sensitive settings in Argo CD

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    argoproj · argo cd6 Haz 2024

  • CVE-2024-4325
    45Planlayın

    Server-Side Request Forgery (SSRF) in gradio-app/gradio

    YüksekCVSS 8,6Kavram kanıtıEPSS %37

    gradio project · gradio6 Haz 2024

  • CVE-2024-5452
    47Planlayın

    RCE via Property/Class Pollution in lightning-ai/pytorch-lightning

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    lightningai · pytorch lightning6 Haz 2024

  • CVE-2024-5505
    49Planlayın

    NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %46

    netgear · prosafe network management system6 Haz 2024

  • CVE-2024-0520
    36İzleyin

    Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    lfprojects · mlflow6 Haz 2024

  • CVE-2024-1873
    40Planlayın

    Path Traversal and Denial of Service in parisneo/lollms-webui

    KritikCVSS 9,1İstismar yokEPSS %13

    lollms · lollms web ui6 Haz 2024

  • CVE-2024-2928
    37İzleyin

    Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    lfprojects · mlflow6 Haz 2024

  • CVE-2024-3234
    40Planlayın

    Path Traversal in gaizhenbiao/chuanhuchatgpt

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    gaizhenbiao · chuanhuchatgpt6 Haz 2024

  • CVE-2024-3408
    62Bu hafta

    Authentication Bypass and RCE in man-group/dtale

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    man · d-tale6 Haz 2024

  • CVE-2024-3429
    47Planlayın

    Path Traversal in parisneo/lollms

    KritikCVSS 9,8İstismar yokEPSS %28

    lollms · lollms6 Haz 2024

  • CVE-2024-4320
    49Planlayın

    Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    lollms · lollms web ui6 Haz 2024

  • CVE-2024-4890
    19İzleyin

    Blind SQL Injection in berriai/litellm

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    litellm · litellm6 Haz 2024

  • CVE-2024-5124
    30İzleyin

    Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    gaizhenbiao · chuanhuchatgpt6 Haz 2024

  • CVE-2024-5328
    37İzleyin

    SSRF Vulnerability in lunary-ai/lunary

    KritikCVSS 9,3İstismar yokEPSS %0

    lunary · lunary6 Haz 2024

  • CVE-2024-36774
    28İzleyin

    An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    monstra · monstra6 Haz 2024

  • CVE-2024-36823
    30İzleyin

    The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    ninjaframework · ninja6 Haz 2024

  • CVE-2024-37383
    76Bu hafta

    Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %73

    roundcube · webmail7 Haz 2024

  • CVE-2024-4620
    40Planlayın

    ArForms < 6.6 - Unauthenticated RCE

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    reputeinfosystems · arforms7 Haz 2024

  • CVE-2024-4610
    61Bu hafta

    Mali GPU Kernel Driver allows improper GPU memory processing operations

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    arm · bifrost gpu kernel driver7 Haz 2024

  • CVE-2024-30163
    42Planlayın

    Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    invisioncommunity · invisioncommunity7 Haz 2024

  • CVE-2023-7261
    31İzleyin

    Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · updater7 Haz 2024

  • CVE-2024-35693
    24İzleyin

    WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code4recovery · 12 step meeting list8 Haz 2024

  • CVE-2024-35694
    24İzleyin

    WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    amauri · wpmobile.app8 Haz 2024

  • CVE-2024-4146
    39İzleyin

    Incorrect Authorization in lunary-ai/lunary

    KritikCVSS 9,8İstismar yokEPSS %0

    lunary · lunary8 Haz 2024

  • CVE-2024-30539
    39İzleyin

    WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    getawesomesupport · awesome support9 Haz 2024

  • CVE-2024-25092
    35İzleyin

    WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    xlplugins · nextmove9 Haz 2024

  • CVE-2024-30464
    35İzleyin

    WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    wpzoom · social icons widget9 Haz 2024

  • CVE-2024-30485
    35İzleyin

    WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    xlplugins · finale9 Haz 2024

  • CVE-2024-5458
    25İzleyin

    Filter bypass in filter_var (FILTER_VALIDATE_URL)

    OrtaCVSS 5,3İstismar yokEPSS %12

    php · php9 Haz 2024

  • CVE-2024-5585
    44Planlayın

    Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

    YüksekCVSS 8,8İstismar yokEPSS %28

    php · php9 Haz 2024

  • CVE-2024-4577
    99Hemen

    Argument Injection in PHP-CGI

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    php · php9 Haz 2024

  • CVE-2024-36971
    62Bu hafta

    net: fix __dst_negative_advice() race

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    linux · linux kernel10 Haz 2024

  • CVE-2024-37051
    31İzleyin

    GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    jetbrains · aqua10 Haz 2024

  • CVE-2024-3850
    19İzleyin

    Uniview NVR301-04S2-P4 Cross-site Scripting

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    uniview · nvr301-04s2-p4 firmware10 Haz 2024

  • CVE-2024-36412
    41Planlayın

    SuiteCRM unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    salesagility · suitecrm10 Haz 2024

  • CVE-2024-36416
    31İzleyin

    SuiteCRM v4 API Excessive log data DOS

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    salesagility · suitecrm10 Haz 2024

  • CVE-2024-37014
    58Planlayın

    Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and p

    KritikCVSS 9,8Kavram kanıtıEPSS %63

    langflow · langflow10 Haz 2024

  • CVE-2024-37393
    31İzleyin

    Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    securenvoy · multi-factor authentication solutions10 Haz 2024

  • CVE-2024-27815
    32İzleyin

    An out-of-bounds write issue was addressed with improved input validation.

    YüksekCVSS 7,8Kavram kanıtıEPSS %2

    apple · ipados10 Haz 2024

  • CVE-2024-35242
    36İzleyin

    Composer vulnerable to command injection via malicious git/hg branch names

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    composer · composer10 Haz 2024

  • CVE-2024-2473
    21İzleyin

    WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    wpserveur · wps hide login10 Haz 2024

  • CVE-2024-29855
    42Planlayın

    Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

    KritikCVSS 9,0Kavram kanıtıEPSS %21

    veeam · recovery orchestrator11 Haz 2024

  • CVE-2024-21754
    18İzleyin

    A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all ver

    OrtaCVSS 4,4Kavram kanıtıEPSS %3

    fortinet · fortiproxy11 Haz 2024

  • CVE-2024-30052
    18İzleyin

    Visual Studio Remote Code Execution Vulnerability

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    microsoft · visual studio 201911 Haz 2024

  • CVE-2024-30080
    52Planlayın

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %43

    microsoft · windows 10 150711 Haz 2024

  • CVE-2024-30085
    40Planlayın

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8SilahlaştırılmışEPSS %14

    microsoft · windows 10 180911 Haz 2024

  • CVE-2024-30088
    78Bu hafta

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %68

    microsoft · windows 10 150711 Haz 2024

  • CVE-2024-30090
    29İzleyin

    Microsoft Streaming Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %1

    microsoft · windows 10 150711 Haz 2024

  • CVE-2024-35250
    69Bu hafta

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %25

    microsoft · windows 10 150711 Haz 2024

  • CVE-2024-36821
    28İzleyin

    Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    linksys · velop whw0101 firmware11 Haz 2024

  • CVE-2024-3183
    33İzleyin

    Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    redhat · enterprise linux12 Haz 2024

  • CVE-2024-4898
    40Planlayın

    InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User C

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    instawp · instawp connect12 Haz 2024

  • CVE-2024-36840
    37İzleyin

    SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    12 Haz 2024

  • CVE-2024-5909
    27İzleyin

    Cortex XDR Agent: Local Windows User Can Disable the Agent

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    paloaltonetworks · cortex xdr agent12 Haz 2024

  • CVE-2024-3922
    55Planlayın

    Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    dokan · dokan12 Haz 2024

  • CVE-2024-3032
    24İzleyin

    Themify Builder < 7.5.8 - Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    themify · builder13 Haz 2024

  • CVE-2024-3552
    59Planlayın

    Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %67

    salephpscripts · web directory free13 Haz 2024

  • CVE-2024-34102
    99Hemen

    XXE can expose crypt key and other secrets granting full admin access

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · commerce13 Haz 2024

  • CVE-2024-34112
    37İzleyin

    ColdFusion CFDOCUMENT file retrieval / access control bypass

    YüksekCVSS 7,5İstismar yokEPSS %23

    adobe · coldfusion13 Haz 2024

  • CVE-2024-36587
    31İzleyin

    Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    13 Haz 2024

  • CVE-2024-5947
    27İzleyin

    Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    deepseaelectronics · dse855 firmware13 Haz 2024

  • CVE-2024-32896
    62Bu hafta

    there is a possible way to bypass due to a logic error in the code.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    google · android13 Haz 2024

  • CVE-2024-31777
    40Planlayın

    File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.p

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    openeclass · openeclass13 Haz 2024

  • CVE-2024-3080
    52Planlayın

    ASUS Router - Improper Authentication

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    asus · zenwifi xt813 Haz 2024

  • CVE-2024-27162
    30İzleyin

    Toshiba printers provide a web interface that will load the JavaScript file.

    OrtaCVSS 6,1İstismar yokEPSS %21

    toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)14 Haz 2024

  • CVE-2024-27172
    47Planlayın

    Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %26

    toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)14 Haz 2024

  • CVE-2024-27173
    40Planlayın

    Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)14 Haz 2024

  • CVE-2024-5961
    21İzleyin

    Reflected XSS in 2ClickPortal

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    trol intermedia sp. z o.o. sp. k. · 2clickportal14 Haz 2024

  • CVE-2024-3912
    39İzleyin

    ASUS Router - Upload arbitrary firmware

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    asus · dsl-n17u14 Haz 2024