İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2024: sömürülen ve yeni ciddi CVE kayıtları

167 kayıt · 21 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-7339
    37İzleyin

    TVT DVR TD-2104TS-CL queryDevInfo information disclosure

    OrtaCVSS 6,9Kavram kanıtıEPSS %32

    provision-isr · sh-4050a5-5l\(mm\) firmware1 Ağu 2024

  • CVE-2024-6529
    28İzleyin

    Ultimate Classified Listings < 1.4 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    webcodingplace · ultimate classified listings1 Ağu 2024

  • CVE-2024-6242
    32İzleyin

    Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

    YüksekCVSS 7,3İstismar yokEPSS %11

    rockwell automation · controllogix® 5580 (1756-l8z)1 Ağu 2024

  • CVE-2024-39646
    24İzleyin

    WordPress Custom 404 Pro plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    kunalnagar · custom 404 pro1 Ağu 2024

  • CVE-2024-42461
    36İzleyin

    In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    elliptic project · elliptic2 Ağu 2024

  • CVE-2024-38878
    30İzleyin

    A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivi

    OrtaCVSS 6,9İstismar yokEPSS %11

    siemens · omnivise t3000 application server2 Ağu 2024

  • CVE-2024-41127
    38İzleyin

    Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    monkeytype · monkeytype2 Ağu 2024

  • CVE-2024-7029
    46Planlayın

    Command Injection in AVTech AVM1203 (IP Camera)

    YüksekCVSS 8,7Kavram kanıtıEPSS %38

    avtech · avm1203 firmware2 Ağu 2024

  • CVE-2024-7314
    55Planlayın

    anji-plus AJ-Report Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    anji-plus · report2 Ağu 2024

  • CVE-2024-33896
    29İzleyin

    Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper paramet

    YüksekCVSS 7,2Kavram kanıtıEPSS %4

    hms-networks · ewon cosy\+ firmware2 Ağu 2024

  • CVE-2024-7463
    37İzleyin

    TOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflow

    YüksekCVSS 8,7İstismar yokEPSS %10

    totolink · cp900 firmware4 Ağu 2024

  • CVE-2024-7464
    27İzleyin

    TOTOLINK CP900 Telnet Service setTelnetCfg command injection

    OrtaCVSS 5,3İstismar yokEPSS %19

    totolink · cp900 firmware4 Ağu 2024

  • CVE-2024-7467
    28İzleyin

    Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injection

    OrtaCVSS 5,3İstismar yokEPSS %23

    raisecom · msg2300 firmware4 Ağu 2024

  • CVE-2024-7468
    28İzleyin

    Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injection

    OrtaCVSS 5,3İstismar yokEPSS %24

    raisecom · msg2300 firmware4 Ağu 2024

  • CVE-2024-7469
    28İzleyin

    Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injection

    OrtaCVSS 5,3İstismar yokEPSS %24

    raisecom · msg2300 firmware5 Ağu 2024

  • CVE-2024-7470
    28İzleyin

    Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injection

    OrtaCVSS 5,3İstismar yokEPSS %24

    raisecom · msg2300 firmware5 Ağu 2024

  • CVE-2024-39713
    35İzleyin

    A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

    YüksekCVSS 8,6Kavram kanıtıEPSS %3

    rocket.chat · rocket.chat5 Ağu 2024

  • CVE-2024-38856
    99Hemen

    Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · ofbiz5 Ağu 2024

  • CVE-2023-31355
    24İzleyin

    Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allo

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    amd · epyc 7203 firmware5 Ağu 2024

  • CVE-2024-21978
    31İzleyin

    Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakag

    YüksekCVSS 7,9Kavram kanıtıEPSS %0

    amd · epyc 7203 firmware5 Ağu 2024

  • CVE-2024-21980
    31İzleyin

    Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC

    YüksekCVSS 7,9Kavram kanıtıEPSS %0

    amd · epyc 7203 firmware5 Ağu 2024

  • CVE-2024-40498
    39İzleyin

    SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the re

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    5 Ağu 2024

  • CVE-2024-42008
    47Planlayın

    A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote att

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    roundcube · webmail5 Ağu 2024

  • CVE-2024-42009
    92Hemen

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %82

    roundcube · webmail5 Ağu 2024

  • CVE-2024-42010
    50Planlayın

    mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in ren

    YüksekCVSS 7,5İstismar yokEPSS %66

    5 Ağu 2024

  • CVE-2024-41958
    28İzleyin

    Two-Factor Authentication (2FA) Bypass in mailcow: dockerized

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    mailcow · mailcow\5 Ağu 2024

  • CVE-2024-6781
    49Planlayın

    Calibre Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    calibre-ebook · calibre6 Ağu 2024

  • CVE-2024-6782
    64Bu hafta

    Calibre Remote Code Execution

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    calibre · calibre6 Ağu 2024

  • CVE-2024-6886
    50Planlayın

    Inproper Sanitation of field leading to stored XSS

    KritikCVSS 10,0Kavram kanıtıEPSS %32

    gitea · gitea open source git server6 Ağu 2024

  • CVE-2024-7008
    32İzleyin

    Calibre Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %25

    calibre-ebook · calibre6 Ağu 2024

  • CVE-2024-7009
    32İzleyin

    Calibre SQL Injection

    YüksekCVSS 7,1İstismar yokEPSS %13

    calibre-ebook · calibre6 Ağu 2024

  • CVE-2024-6651
    29İzleyin

    WordPress File Upload < 4.24.8 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %15

    iptanus · wordpress file upload6 Ağu 2024

  • CVE-2024-36424
    22İzleyin

    K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer deref

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    k7computing · k7 ultimate security6 Ağu 2024

  • CVE-2024-39225
    43Planlayın

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %14

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2024-39226
    45Planlayın

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %20

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2024-28739
    34İzleyin

    An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

    YüksekCVSS 7,2İstismar yokEPSS %18

    koha · koha6 Ağu 2024

  • CVE-2024-38206
    30İzleyin

    Microsoft Copilot Studio Information Disclosure Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %12

    microsoft · copilot studio6 Ağu 2024

  • CVE-2024-43044
    44Planlayın

    Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    jenkins · jenkins7 Ağu 2024

  • CVE-2024-7061
    31İzleyin

    Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking.

    YüksekCVSS 7,8İstismar yokEPSS %0

    okta · verify7 Ağu 2024

  • CVE-2024-6892
    24İzleyin

    Journyx Reflected Cross Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    journyx · journyx7 Ağu 2024

  • CVE-2024-6893
    40Planlayın

    Journyx Unauthenticated XML External Entities Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    journyx · journyx7 Ağu 2024

  • CVE-2024-7150
    35İzleyin

    Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    10web · slider8 Ağu 2024

  • CVE-2024-42365
    40Planlayın

    Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan

    YüksekCVSS 8,8SilahlaştırılmışEPSS %4

    asterisk · asterisk8 Ağu 2024

  • CVE-2024-30188
    34İzleyin

    Apache DolphinScheduler: Resource File Read And Write Vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %5

    apache · dolphinscheduler12 Ağu 2024

  • CVE-2024-38200
    32İzleyin

    Microsoft Office Spoofing Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %20

    microsoft · 365 apps12 Ağu 2024

  • CVE-2024-41570
    40Planlayın

    An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network t

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    havocframework · havoc12 Ağu 2024

  • CVE-2024-42370
    33İzleyin

    Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    litestar-org · litestar12 Ağu 2024

  • CVE-2024-7694
    59Planlayın

    TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %1

    teamt5 · threatsonar anti-ransomware12 Ağu 2024

  • CVE-2024-27442
    31İzleyin

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

    YüksekCVSS 7,8İstismar yokEPSS %0

    zimbra · collaboration12 Ağu 2024

  • CVE-2024-27443
    61Bu hafta

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %24

    zimbra · collaboration12 Ağu 2024

  • CVE-2024-36877
    32İzleyin

    Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    12 Ağu 2024

  • CVE-2024-41651
    32İzleyin

    An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality.

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    prestashop · prestashop12 Ağu 2024

  • CVE-2024-7399
    97Hemen

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %91

    samsung · magicinfo 9 server12 Ağu 2024

  • CVE-2024-40892
    28İzleyin

    Firewalla BTLE Weak Credentials

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    firewalla · box software12 Ağu 2024

  • CVE-2024-41710
    70Bu hafta

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %41

    mitel · 6970 firmware12 Ağu 2024

  • CVE-2024-6768
    28İzleyin

    Denial of Service in CLFS.sys

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    microsoft · windows 1012 Ağu 2024

  • CVE-2024-43360
    41Planlayın

    ZoneMinder Time-based SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    zoneminder · zoneminder12 Ağu 2024

  • CVE-2024-7094
    50Planlayın

    JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %37

    rabilal · js help desk – ai-powered support & ticketing system12 Ağu 2024

  • CVE-2024-41730
    62Bu hafta

    Missing Authentication check in SAP BusinessObjects Business Intelligence Platform

    KritikCVSS 9,8İstismar yokEPSS %75

    sap · business objects business intelligence platform13 Ağu 2024

  • CVE-2024-7715
    29İzleyin

    D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection

    OrtaCVSS 5,3İstismar yokEPSS %26

    d-link · dns-12013 Ağu 2024

  • CVE-2024-43160
    41Planlayın

    WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    berqwp · berqwp13 Ağu 2024

  • CVE-2024-38063
    60Bu hafta

    Windows TCP/IP Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %70

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38106
    60Bu hafta

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %6

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38107
    61Bu hafta

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38127
    31İzleyin

    Windows Hyper-V Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38143
    17İzleyin

    Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

    OrtaCVSS 4,2Kavram kanıtıEPSS %1

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38144
    45Planlayın

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38148
    40Planlayın

    Windows Secure Channel Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · windows 11 21h213 Ağu 2024

  • CVE-2024-38178
    72Bu hafta

    Scripting Engine Memory Corruption Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %41

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38189
    67Bu hafta

    Microsoft Project Remote Code Execution Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %8

    microsoft · 365 apps13 Ağu 2024

  • CVE-2024-38193
    70Bu hafta

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %28

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-38197
    31İzleyin

    Microsoft Teams for iOS Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %16

    microsoft · teams13 Ağu 2024

  • CVE-2024-38213
    60Bu hafta

    Windows Mark of the Web Security Feature Bypass Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %13

    microsoft · windows 10 150713 Ağu 2024

  • CVE-2024-7593
    99Hemen

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    ivanti · virtual traffic manager13 Ağu 2024

  • CVE-2024-28986
    94Hemen

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84

    solarwinds · web help desk13 Ağu 2024

  • CVE-2024-37399
    38İzleyin

    A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, re

    YüksekCVSS 7,5İstismar yokEPSS %27

    ivanti · avalanche13 Ağu 2024

  • CVE-2024-38653
    58Planlayın

    XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.

    YüksekCVSS 7,5Kavram kanıtıEPSS %91

    ivanti · avalanche13 Ağu 2024

  • CVE-2024-7808
    27İzleyin

    code-projects Job Portal logindbc.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    fabian · job portal14 Ağu 2024

  • CVE-2024-7815
    20İzleyin

    CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

    OrtaCVSS 5,1Kavram kanıtıEPSS %1

    online railway reservation system project · online railway reservation system15 Ağu 2024

  • CVE-2024-7828
    39İzleyin

    D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow

    YüksekCVSS 8,7İstismar yokEPSS %16

    dlink · dns-120 firmware15 Ağu 2024

  • CVE-2024-7262
    68Bu hafta

    Arbitrary Code Execution in WPS Office

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %2

    kingsoft · wps office15 Ağu 2024

  • CVE-2024-42948
    33İzleyin

    Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function.

    YüksekCVSS 7,5İstismar yokEPSS %10

    tenda · fh1201 firmware15 Ağu 2024

  • CVE-2024-32231
    25İzleyin

    Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.

    OrtaCVSS 6,3Kavram kanıtıEPSS %1

    stashapp · stash15 Ağu 2024

  • CVE-2024-34739
    31İzleyin

    In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the c

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android15 Ağu 2024

  • CVE-2024-34740
    31İzleyin

    In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer ove

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android15 Ağu 2024

  • CVE-2024-34741
    31İzleyin

    In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensa

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android15 Ağu 2024

  • CVE-2024-6460
    40Planlayın

    Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    tradedoubler · grow16 Ağu 2024

  • CVE-2024-42758
    21İzleyin

    A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki (Open

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    16 Ağu 2024

  • CVE-2024-7646
    43Planlayın

    A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `ex

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    kubernetes · ingress-nginx16 Ağu 2024

  • CVE-2024-42849
    26İzleyin

    An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    silverpeas · silverpeas16 Ağu 2024

  • CVE-2024-42850
    39İzleyin

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    silverpeas · silverpeas16 Ağu 2024

  • CVE-2024-7703
    25İzleyin

    ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    OrtaCVSS 6,4Kavram kanıtıEPSS %1

    reputeinfosystems · armember – membership plugin, content restriction, member levels, user profile & user signup17 Ağu 2024

  • CVE-2024-44083
    30İzleyin

    ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    hex-rays · ida pro19 Ağu 2024

  • CVE-2024-6330
    40Planlayın

    GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    geomywp · geo my wordpress19 Ağu 2024

  • CVE-2024-7922
    27İzleyin

    D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection

    OrtaCVSS 5,3İstismar yokEPSS %19

    dell · dns-120 firmware19 Ağu 2024

  • CVE-2024-42657
    30İzleyin

    An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encry

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    nepstech · ntpl-xpon1gfevn firmware19 Ağu 2024

  • CVE-2024-42658
    39İzleyin

    An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's para

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    nepstech · ntpl-xpon1gfevn firmware19 Ağu 2024

  • CVE-2024-43400
    21İzleyin

    XWiki Platform allows XSS through XClass name in string properties

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    xwiki · xwiki19 Ağu 2024

  • CVE-2024-23729
    24İzleyin

    The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute arbitrary JavaScript

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    heytap · internet browser19 Ağu 2024

  • CVE-2024-42812
    44Planlayın

    In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi.

    KritikCVSS 9,8İstismar yokEPSS %15

    dlink · dir-860l firmware19 Ağu 2024