İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2024: sömürülen ve yeni ciddi CVE kayıtları

186 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-4007
    34İzleyin

    Hard coded default credential contained in install package

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    abb · aspect-ent-12 firmware1 Tem 2024

  • CVE-2024-6050
    21İzleyin

    Reflected XSS in SOWA OPAC

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    sokrates · sowa opac1 Tem 2024

  • CVE-2024-36401
    99Hemen

    Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    geoserver · geoserver1 Tem 2024

  • CVE-2024-36420
    31İzleyin

    GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    flowiseai · flowise1 Tem 2024

  • CVE-2024-20399
    57Planlayın

    Cisco NX-OS Software CLI Command Injection Vulnerability

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %4

    cisco · nx-os1 Tem 2024

  • CVE-2024-6387
    62Bu hafta

    Openssh: regresshion - race condition in ssh allows rce/dos

    YüksekCVSS 8,1Kavram kanıtıEPSS %99

    sonicwall · sma 6200 firmware1 Tem 2024

  • CVE-2024-36985
    40Planlayın

    Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

    YüksekCVSS 8,8SilahlaştırılmışEPSS %6

    splunk · splunk1 Tem 2024

  • CVE-2024-36991
    34İzleyin

    Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    splunk · splunk1 Tem 2024

  • CVE-2024-38472
    51Planlayın

    Apache HTTP Server on WIndows UNC SSRF

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    apache · http server1 Tem 2024

  • CVE-2024-38473
    40Planlayın

    Apache HTTP Server proxy encoding problem

    YüksekCVSS 8,1Kavram kanıtıEPSS %25

    apache · http server1 Tem 2024

  • CVE-2024-38474
    40Planlayın

    Apache HTTP Server weakness with encoded question marks in backreferences

    KritikCVSS 9,8İstismar yokEPSS %2

    apache · http server1 Tem 2024

  • CVE-2024-38475
    96Hemen

    Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %99

    apache · http server1 Tem 2024

  • CVE-2024-38476
    51Planlayın

    Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    apache · http server1 Tem 2024

  • CVE-2024-39573
    41Planlayın

    Apache HTTP Server: mod_rewrite proxy handler substitution

    YüksekCVSS 7,5İstismar yokEPSS %37

    apache · http server1 Tem 2024

  • CVE-2024-28200
    40Planlayın

    N-central Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    n-able · n-central1 Tem 2024

  • CVE-2024-38366
    45Planlayın

    CoacoaPods trunk RCE in email verification system rfc-822

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    cocoapods · trunk.cocoapods.org1 Tem 2024

  • CVE-2024-38367
    41Planlayın

    CoacoaPods trunk sessions verification step could be manipulated for owner session hijacking

    KritikCVSS 9,6İstismar yokEPSS %11

    cocoapods · trunk.cocoapods.org1 Tem 2024

  • CVE-2024-38368
    41Planlayın

    Trunk's 'Claim your pod' could be used to obtain un-used pods

    KritikCVSS 9,3İstismar yokEPSS %14

    cocoapods · trunk.cocoapods.org1 Tem 2024

  • CVE-2024-37762
    39İzleyin

    MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution.

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    machform · machform1 Tem 2024

  • CVE-2024-37763
    21İzleyin

    MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can vie

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    machform · machform1 Tem 2024

  • CVE-2024-37764
    21İzleyin

    MachForm up to version 19 is affected by an authenticated stored cross-site scripting.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    machform · machform1 Tem 2024

  • CVE-2024-37765
    35İzleyin

    Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    machform · machform1 Tem 2024

  • CVE-2024-39309
    45Planlayın

    ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    parse-community · parse-server1 Tem 2024

  • CVE-2024-4836
    31İzleyin

    LFI in sites managed by Edito CMS

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    edito · edito cms2 Tem 2024

  • CVE-2024-36404
    62Bu hafta

    GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions

    KritikCVSS 9,8Kavram kanıtıEPSS %76

    geotools · geotools2 Tem 2024

  • CVE-2024-39143
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious propert

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    coderberg · residencecms2 Tem 2024

  • CVE-2024-39891
    60Bu hafta

    In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %1

    twilio · authy2 Tem 2024

  • CVE-2022-25477
    22İzleyin

    Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Read

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    realtek · rtsper2 Tem 2024

  • CVE-2022-25479
    22İzleyin

    Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Read

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    realtek · rtsper2 Tem 2024

  • CVE-2024-38537
    39İzleyin

    Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    ethyca · fides2 Tem 2024

  • CVE-2024-32937
    47Planlayın

    An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1

    KritikCVSS 9,8İstismar yokEPSS %26

    grandstream · gxp2135 firmware3 Tem 2024

  • CVE-2024-37726
    27İzleyin

    Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    3 Tem 2024

  • CVE-2024-39248
    21İzleyin

    A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload i

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    fikeulous · simpcms3 Tem 2024

  • CVE-2024-39844
    40Planlayın

    In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    3 Tem 2024

  • CVE-2024-31223
    21İzleyin

    Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    ethyca · fides3 Tem 2024

  • CVE-2024-29510
    40Planlayın

    Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

    OrtaCVSS 6,3SilahlaştırılmışEPSS %27

    artifex · ghostscript3 Tem 2024

  • CVE-2024-39211
    21İzleyin

    Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response contains a user_emai

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    4 Tem 2024

  • CVE-2024-39929
    33İzleyin

    Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking

    OrtaCVSS 5,4Kavram kanıtıEPSS %41

    exim · exim4 Tem 2024

  • CVE-2024-39930
    41Planlayın

    The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution.

    KritikCVSS 9,9Kavram kanıtıEPSS %7

    gogs · gogs4 Tem 2024

  • CVE-2024-39931
    55Planlayın

    Gogs through 0.13.0 allows deletion of internal files.

    KritikCVSS 9,9İstismar yokEPSS %52

    gogs · gogs4 Tem 2024

  • CVE-2024-39932
    44Planlayın

    Gogs through 0.13.0 allows argument injection during the previewing of changes.

    KritikCVSS 9,9İstismar yokEPSS %17

    gogs · gogs4 Tem 2024

  • CVE-2024-39943
    47Planlayın

    rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if

    YüksekCVSS 8,8Kavram kanıtıEPSS %39

    rejetto · http file server4 Tem 2024

  • CVE-2024-6209
    42Planlayın

    unauthorized file access

    KritikCVSS 9,4Kavram kanıtıEPSS %17

    abb · aspect-ent-12 firmware5 Tem 2024

  • CVE-2024-6298
    43Planlayın

    remote code execution

    KritikCVSS 9,4Kavram kanıtıEPSS %19

    abb · aspect-ent-12 firmware5 Tem 2024

  • CVE-2024-23997
    38İzleyin

    Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    lukasbach · yana5 Tem 2024

  • CVE-2024-23998
    38İzleyin

    goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.vue.

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    goanother · another redis desktop manager5 Tem 2024

  • CVE-2024-39210
    30İzleyin

    Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    mayurik · best house rental management system5 Tem 2024

  • CVE-2024-34361
    36İzleyin

    Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    pi-hole · pi-hole5 Tem 2024

  • CVE-2024-39689
    30İzleyin

    Certifi removes GLOBALTRUST root certificate

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    certifi · certifi5 Tem 2024

  • CVE-2024-6095
    24İzleyin

    SSRF and Partial LFI in /models/apply Endpoint in mudler/localai

    OrtaCVSS 5,8Kavram kanıtıEPSS %2

    mudler · localai6 Tem 2024

  • CVE-2024-3651
    30İzleyin

    Denial of Service via Quadratic Complexity in kjd/idna

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    kjd · internationalized domain names in applications7 Tem 2024

  • CVE-2024-37389
    28İzleyin

    Apache NiFi: Improper Neutralization of Input in Parameter Context Description

    OrtaCVSS 5,4İstismar yokEPSS %24

    apache · nifi8 Tem 2024

  • CVE-2024-1305
    44Planlayın

    tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use

    KritikCVSS 9,8İstismar yokEPSS %15

    openvpn · tap-windows68 Tem 2024

  • CVE-2024-6409
    36İzleyin

    Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

    YüksekCVSS 7,0İstismar yokEPSS %27

    red hat · red hat enterprise linux 98 Tem 2024

  • CVE-2024-5488
    40Planlayın

    SEOPress < 7.9 - Unauthenticated Object Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    seopress · seopress9 Tem 2024

  • CVE-2024-5633
    30İzleyin

    Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the sa

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    longse technology · lbh30fe200w9 Tem 2024

  • CVE-2024-3596
    40Planlayın

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    KritikCVSS 9,0Kavram kanıtıEPSS %14

    freeradius · freeradius9 Tem 2024

  • CVE-2024-30081
    35İzleyin

    Windows NTLM Spoofing Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %23

    microsoft · windows 10 15079 Tem 2024

  • CVE-2024-38023
    44Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %52

    microsoft · sharepoint server9 Tem 2024

  • CVE-2024-38024
    42Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %45

    microsoft · sharepoint server9 Tem 2024

  • CVE-2024-38030
    41Planlayın

    Windows Themes Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %51

    microsoft · windows 10 15079 Tem 2024

  • CVE-2024-38041
    23İzleyin

    Windows Kernel Information Disclosure Vulnerability

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    microsoft · windows 10 16079 Tem 2024

  • CVE-2024-38054
    34İzleyin

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · windows 10 15079 Tem 2024

  • CVE-2024-38060
    40Planlayın

    Windows Imaging Component Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · windows 10 15079 Tem 2024

  • CVE-2024-38071
    41Planlayın

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %35

    microsoft · windows server 20089 Tem 2024

  • CVE-2024-38077
    64Bu hafta

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    microsoft · windows server 20089 Tem 2024

  • CVE-2024-38080
    63Bu hafta

    Windows Hyper-V Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    microsoft · windows 11 21h29 Tem 2024

  • CVE-2024-38094
    73Bu hafta

    Microsoft SharePoint Remote Code Execution Vulnerability

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %50

    microsoft · sharepoint server9 Tem 2024

  • CVE-2024-38112
    85Hemen

    Windows MSHTML Platform Spoofing Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %84

    microsoft · windows 10 15079 Tem 2024

  • CVE-2023-48194
    39İzleyin

    Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    tenda · ac8 firmware9 Tem 2024

  • CVE-2024-31317
    31İzleyin

    In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to u

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android9 Tem 2024

  • CVE-2024-31320
    31İzleyin

    In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation d

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android9 Tem 2024

  • CVE-2024-39031
    21İzleyin

    In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    silverpeas · silverpeas9 Tem 2024

  • CVE-2024-39069
    31İzleyin

    An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    9 Tem 2024

  • CVE-2024-39614
    39İzleyin

    An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.

    YüksekCVSS 7,5Kavram kanıtıEPSS %28

    djangoproject · django10 Tem 2024

  • CVE-2024-3799
    38İzleyin

    Shell command injection in Phoniebox

    YüksekCVSS 8,7İstismar yokEPSS %14

    phoniebox · phoniebox10 Tem 2024

  • CVE-2024-40332
    35İzleyin

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord

    YüksekCVSS 8,8İstismar yokEPSS %0

    idccms · idccms10 Tem 2024

  • CVE-2024-4879
    97Hemen

    Jelly Template Injection Vulnerability in ServiceNow UI Macros

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %99

    servicenow · servicenow10 Tem 2024

  • CVE-2024-5178
    37İzleyin

    Incomplete Input Validation in SecurelyAccess API

    OrtaCVSS 6,9İstismar yokEPSS %33

    servicenow · now platform10 Tem 2024

  • CVE-2024-5217
    96Hemen

    Incomplete Input Validation in GlideExpression Script

    KritikCVSS 9,2KEVSilahlaştırılmışEPSS %99

    servicenow · servicenow10 Tem 2024

  • CVE-2024-37770
    36İzleyin

    14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function.

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    b1ackc4t · 14finger10 Tem 2024

  • CVE-2024-6646
    41Planlayın

    Netgear WN604 Web Interface downloadFile.php information disclosure

    OrtaCVSS 6,9Kavram kanıtıEPSS %45

    netgear · wn60410 Tem 2024

  • CVE-2024-37147
    17İzleyin

    GLPI allows Authenticated File Upload to Restricted Tickets

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    glpi-project · glpi10 Tem 2024

  • CVE-2024-5910
    95Hemen

    Expedition: Missing Authentication Leads to Admin Account Takeover

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %91

    paloaltonetworks · expedition10 Tem 2024

  • CVE-2024-6235
    43Planlayın

    Sensitive information disclosure

    KritikCVSS 9,4Kavram kanıtıEPSS %21

    citrix · netscaler console10 Tem 2024

  • CVE-2024-37148
    38İzleyin

    GLPI allows account takeover via SQL Injection in AJAX scripts

    YüksekCVSS 8,1İstismar yokEPSS %20

    glpi-project · glpi10 Tem 2024

  • CVE-2024-37149
    41Planlayın

    GLPI allows remote code execution through the plugin loader

    YüksekCVSS 8,8İstismar yokEPSS %21

    glpi-project · glpi10 Tem 2024

  • CVE-2024-38353
    21İzleyin

    CodiMD - Missing Image Access Controls and Unauthorized Image Access

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    hackmd · codimd10 Tem 2024

  • CVE-2024-6036
    39İzleyin

    Denial of Service in gaizhenbiao/chuanhuchatgpt

    KritikCVSS 9,1İstismar yokEPSS %10

    gaizhenbiao · chuanhuchatgpt10 Tem 2024

  • CVE-2024-6037
    39İzleyin

    Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

    KritikCVSS 9,1İstismar yokEPSS %10

    gaizhenbiao · chuanhuchatgpt10 Tem 2024

  • CVE-2024-6624
    40Planlayın

    JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    parorrey · json api user11 Tem 2024

  • CVE-2024-6485
    25İzleyin

    XSS in Bootstrap button component

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    bootstrap · bootstrap11 Tem 2024

  • CVE-2024-6396
    55Planlayın

    Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    aimstack · aim11 Tem 2024

  • CVE-2024-6555
    21İzleyin

    WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    timersys · wp popups – wordpress popup builder12 Tem 2024

  • CVE-2024-39903
    31İzleyin

    Local File Inclusion in Solara

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    widgetti · solara12 Tem 2024

  • CVE-2024-39914
    46Planlayın

    FOG has a command injection in /fog/management/export.php?filename=

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    fogproject · fogproject12 Tem 2024

  • CVE-2024-40110
    40Planlayın

    Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimag

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    nikhil-bhalerao · poultry farm management system12 Tem 2024

  • CVE-2024-3753
    23İzleyin

    Hostel < 1.1.5.3 - Reflected XSS

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    kibokolabs · hostel13 Tem 2024

  • CVE-2024-21513
    35İzleyin

    Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving valu

    YüksekCVSS 8,5Kavram kanıtıEPSS %1

    langchain · langchain-experimental15 Tem 2024

  • CVE-2024-6289
    24İzleyin

    WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    wpserveur · wps hide login15 Tem 2024