İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2024: sömürülen ve yeni ciddi CVE kayıtları

163 kayıt · 13 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-7354
    24İzleyin

    Ninja Forms 3.8.6-3.8.10 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    ninjaforms · ninja forms2 Eyl 2024

  • CVE-2024-42471
    31İzleyin

    Arbitrary File Write via artifact extraction in actions/artifact

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    github · actions\/artifact2 Eyl 2024

  • CVE-2024-44947
    22İzleyin

    fuse: Initialize beyond-EOF page contents before setting uptodate

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel2 Eyl 2024

  • CVE-2024-45388
    47Planlayın

    Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    hoverfly · hoverfly2 Eyl 2024

  • CVE-2024-45622
    50Planlayın

    ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    2 Eyl 2024

  • CVE-2024-7261
    42Planlayın

    The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4

    KritikCVSS 9,8İstismar yokEPSS %11

    zyxel · nwa110ax firmware2 Eyl 2024

  • CVE-2024-6473
    33İzleyin

    DLL Hijacking in Yandex Browser

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    yandex · yandex browser3 Eyl 2024

  • CVE-2024-6232
    31İzleyin

    Regular-expression DoS when parsing TarFile headers

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    python · python3 Eyl 2024

  • CVE-2024-8381
    40Planlayın

    A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environmen

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    mozilla · firefox3 Eyl 2024

  • CVE-2024-34463
    20İzleyin

    BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets.

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    3 Eyl 2024

  • CVE-2024-6119
    50Planlayın

    Possible denial of service in X.509 name checks

    YüksekCVSS 7,5İstismar yokEPSS %66

    openssl · openssl3 Eyl 2024

  • CVE-2024-6926
    40Planlayın

    Viral Signup <= 2.1 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    wow-company · viral signup4 Eyl 2024

  • CVE-2024-7786
    22İzleyin

    Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    automattic · sensei lms4 Eyl 2024

  • CVE-2024-45195
    90Hemen

    Apache OFBiz: Confused controller-view authorization logic (forced browsing)

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    apache · ofbiz4 Eyl 2024

  • CVE-2024-45507
    68Bu hafta

    Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

    KritikCVSS 9,8Kavram kanıtıEPSS %96

    apache · ofbiz4 Eyl 2024

  • CVE-2024-8289
    39İzleyin

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeove

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    multivendorx · multivendorx4 Eyl 2024

  • CVE-2024-44400
    43Planlayın

    A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical.

    KritikCVSS 9,8İstismar yokEPSS %14

    dlink · di-8400 firmware4 Eyl 2024

  • CVE-2024-20439
    98Hemen

    A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by us

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    cisco · smart license utility4 Eyl 2024

  • CVE-2024-20440
    46Planlayın

    A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    cisco · smart license utility4 Eyl 2024

  • CVE-2024-42642
    26İzleyin

    Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    crucial · mx500 firmware4 Eyl 2024

  • CVE-2024-7627
    33İzleyin

    Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    bitapps · file manager4 Eyl 2024

  • CVE-2024-6846
    21İzleyin

    SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    webdigit · chatbot with chatgpt5 Eyl 2024

  • CVE-2024-8465
    30İzleyin

    SQL injection vulnerability in Job Portal

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    phpgurukul · job portal5 Eyl 2024

  • CVE-2024-45589
    23İzleyin

    RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote at

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    identityautomation · rapididentity5 Eyl 2024

  • CVE-2024-24759
    37İzleyin

    MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding

    KritikCVSS 9,1Kavram kanıtıEPSS %4

    mindsdb · mindsdb5 Eyl 2024

  • CVE-2024-7591
    40Planlayın

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %39

    kemptechnologies · loadmaster5 Eyl 2024

  • CVE-2024-8517
    67Bu hafta

    SPIP Bigup Multipart File Upload OS Command Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    spip · spip6 Eyl 2024

  • CVE-2023-45038
    35İzleyin

    An improper authentication vulnerability has been reported to affect Music Station.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    qnap · music station6 Eyl 2024

  • CVE-2024-36138
    32İzleyin

    Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child

    YüksekCVSS 8,1İstismar yokEPSS %1

    nodejs · node7 Eyl 2024

  • CVE-2024-40711
    96Hemen

    A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    veeam · veeam backup \& replication7 Eyl 2024

  • CVE-2024-6924
    40Planlayın

    TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    themetechmount · truebooker8 Eyl 2024

  • CVE-2024-6928
    40Planlayın

    Opti Marketing <= 2.0.9 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    opti.marketing · opti marketing8 Eyl 2024

  • CVE-2024-44333
    39İzleyin

    D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400

    YüksekCVSS 8,8İstismar yokEPSS %12

    9 Eyl 2024

  • CVE-2024-44334
    45Planlayın

    D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400

    YüksekCVSS 8,8İstismar yokEPSS %31

    9 Eyl 2024

  • CVE-2024-44335
    39İzleyin

    D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v2

    YüksekCVSS 8,8İstismar yokEPSS %12

    9 Eyl 2024

  • CVE-2024-44849
    53Planlayın

    Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    qualitor · qualitor9 Eyl 2024

  • CVE-2024-44902
    40Planlayın

    A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    thinkphp · thinkphp9 Eyl 2024

  • CVE-2024-44087
    39İzleyin

    A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP

    KritikCVSS 9,2İstismar yokEPSS %10

    siemens · automation license manager v510 Eyl 2024

  • CVE-2024-37728
    31İzleyin

    Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attack

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    10 Eyl 2024

  • CVE-2024-44867
    30İzleyin

    phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpok · phpok10 Eyl 2024

  • CVE-2024-44815
    18İzleyin

    Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash F

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    hathway · skyworth cm5100-511 firmware10 Eyl 2024

  • CVE-2024-45590
    30İzleyin

    body-parser vulnerable to denial of service when url encoding is enabled

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    openjsf · body-parser10 Eyl 2024

  • CVE-2024-45591
    22İzleyin

    XWiki Platform document history including authors of any page exposed to unauthorized actors

    OrtaCVSS 5,3Kavram kanıtıEPSS %3

    xwiki · xwiki10 Eyl 2024

  • CVE-2024-38014
    63Bu hafta

    Windows Installer Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %6

    microsoft · windows 10 150710 Eyl 2024

  • CVE-2024-38018
    50Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %51

    microsoft · sharepoint server10 Eyl 2024

  • CVE-2024-38217
    60Bu hafta

    Windows Mark of the Web Security Feature Bypass Vulnerability

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %10

    microsoft · windows 10 150710 Eyl 2024

  • CVE-2024-38226
    60Bu hafta

    Microsoft Publisher Security Feature Bypass Vulnerability

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %2

    microsoft · office 201910 Eyl 2024

  • CVE-2024-43454
    35İzleyin

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %21

    microsoft · windows server 200810 Eyl 2024

  • CVE-2024-43461
    81Hemen

    Windows MSHTML Platform Spoofing Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %54

    microsoft · windows 10 150710 Eyl 2024

  • CVE-2024-43464
    39İzleyin

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %36

    microsoft · sharepoint server10 Eyl 2024

  • CVE-2024-43491
    43Planlayın

    Microsoft Windows Update Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %12

    microsoft · windows 10 150710 Eyl 2024

  • CVE-2024-44871
    33İzleyin

    An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via up

    YüksekCVSS 7,2Kavram kanıtıEPSS %16

    mozilo · mozilocms10 Eyl 2024

  • CVE-2024-34831
    24İzleyin

    cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    gibbonedu · gibbon10 Eyl 2024

  • CVE-2024-45409
    42Planlayın

    The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    onelogin · ruby-saml10 Eyl 2024

  • CVE-2024-8232
    38İzleyin

    iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type

    YüksekCVSS 8,7Kavram kanıtıEPSS %13

    ininet solutions gmbh · spidercontrol scada web server10 Eyl 2024

  • CVE-2024-8503
    63Bu hafta

    VICIdial Unauthenticated SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %79

    vicidial · vicidial10 Eyl 2024

  • CVE-2024-8504
    58Planlayın

    VICIdial Authenticated Remote Code Execution

    YüksekCVSS 8,8SilahlaştırılmışEPSS %76

    vicidial · vicidial10 Eyl 2024

  • CVE-2024-8190
    85Hemen

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated att

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %88

    ivanti · cloud services appliance10 Eyl 2024

  • CVE-2024-8191
    45Planlayın

    SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker

    KritikCVSS 9,8İstismar yokEPSS %20

    ivanti · endpoint manager10 Eyl 2024

  • CVE-2024-27115
    41Planlayın

    Remote Code Execution through File Upload in SOPlanning before 1.52.02

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    soplanning · soplanning11 Eyl 2024

  • CVE-2024-8636
    35İzleyin

    Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome11 Eyl 2024

  • CVE-2024-44466
    42Planlayın

    COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.

    KritikCVSS 9,8İstismar yokEPSS %10

    comfast · cf-xr11 firmware11 Eyl 2024

  • CVE-2024-44541
    40Planlayın

    evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    11 Eyl 2024

  • CVE-2024-29847
    55Planlayın

    Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenti

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-32840
    36İzleyin

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %25

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-32845
    35İzleyin

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %24

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-32848
    41Planlayın

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %43

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-34779
    35İzleyin

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %24

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-34783
    41Planlayın

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %43

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-34785
    36İzleyin

    An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin p

    YüksekCVSS 7,2İstismar yokEPSS %25

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-37397
    50Planlayın

    An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allow

    YüksekCVSS 8,2İstismar yokEPSS %59

    ivanti · endpoint manager11 Eyl 2024

  • CVE-2024-8522
    60Bu hafta

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    YüksekCVSS 7,5SilahlaştırılmışEPSS %62

    thimpress · learnpress12 Eyl 2024

  • CVE-2024-8529
    60Bu hafta

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    YüksekCVSS 7,5SilahlaştırılmışEPSS %12

    thimpress · learnpress12 Eyl 2024

  • CVE-2024-45846
    36İzleyin

    An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    mindsdb · mindsdb12 Eyl 2024

  • CVE-2024-40457
    36İzleyin

    No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file.

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    12 Eyl 2024

  • CVE-2024-45826
    38İzleyin

    ThinManager® Code Execution Vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %12

    rockwellautomation · thinmanager12 Eyl 2024

  • CVE-2024-8124
    42Planlayın

    Inefficient Regular Expression Complexity in GitLab

    YüksekCVSS 7,5İstismar yokEPSS %40

    gitlab · gitlab12 Eyl 2024

  • CVE-2024-45383
    20İzleyin

    A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.36

    OrtaCVSS 5,0Kavram kanıtıEPSS %1

    microsoft · high definition audio bus driver12 Eyl 2024

  • CVE-2024-6678
    36İzleyin

    Authentication Bypass by Spoofing in GitLab

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    gitlab · gitlab12 Eyl 2024

  • CVE-2024-45607
    25İzleyin

    whatsapp-api-js fails to validate message's signature

    OrtaCVSS 5,3İstismar yokEPSS %14

    secreto31126 · whatsapp-api-js12 Eyl 2024

  • CVE-2024-38816
    36İzleyin

    CVE-2024-38816: Path traversal vulnerability in functional web frameworks

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    spring · spring13 Eyl 2024

  • CVE-2024-41874
    48Planlayın

    ColdFusion | Deserialization of Untrusted Data (CWE-502)

    KritikCVSS 9,8İstismar yokEPSS %30

    adobe · coldfusion13 Eyl 2024

  • CVE-2024-46048
    44Planlayın

    Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

    KritikCVSS 9,8İstismar yokEPSS %17

    tenda · fh451 firmware13 Eyl 2024

  • CVE-2024-6587
    40Planlayın

    SSRF in berriai/litellm

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    litellm · litellm13 Eyl 2024

  • CVE-2024-39924
    39İzleyin

    An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3.

    YüksekCVSS 8,8İstismar yokEPSS %13

    dani-garcia · vaultwarden13 Eyl 2024

  • CVE-2024-8669
    33İzleyin

    Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %16

    softaculous · backuply14 Eyl 2024

  • CVE-2024-46938
    44Planlayın

    An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release thro

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    sitecore · experience commerce15 Eyl 2024

  • CVE-2024-46451
    39İzleyin

    TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    totolink · t8 firmware16 Eyl 2024

  • CVE-2024-44623
    39İzleyin

    An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    spx · spx graphics controller16 Eyl 2024

  • CVE-2024-8752
    41Planlayın

    WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    smart-hmi · webiq16 Eyl 2024

  • CVE-2024-27876
    22İzleyin

    A race condition was addressed with improved locking.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · ipados16 Eyl 2024

  • CVE-2024-40842
    22İzleyin

    An issue was addressed with improved validation of environment variables.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · macos16 Eyl 2024

  • CVE-2024-44133
    24İzleyin

    This issue was addressed by removing the vulnerable code.

    OrtaCVSS 5,5Kavram kanıtıEPSS %7

    apple · macos16 Eyl 2024

  • CVE-2024-38812
    85Hemen

    Heap-overflow vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %54

    vmware · cloud foundation17 Eyl 2024

  • CVE-2024-38813
    74Bu hafta

    Privilege escalation vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %17

    vmware · cloud foundation17 Eyl 2024

  • CVE-2024-8945
    26İzleyin

    CodeCanyon RISE Ultimate Project Manager save sql injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    fairsketch · rise ultimate project manager17 Eyl 2024

  • CVE-2024-45798
    39İzleyin

    Multiple Poisoned Pipeline Execution (PPE) vulnerabilities

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    espressif · arduino-esp3217 Eyl 2024

  • CVE-2024-8949
    21İzleyin

    SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    oretnom23 · online eyewear shop17 Eyl 2024

  • CVE-2024-8956
    84Hemen

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %58

    ptzoptics · pt30x-sdi firmware17 Eyl 2024

  • CVE-2024-8957
    82Hemen

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %79

    ptzoptics · pt30x-sdi firmware17 Eyl 2024