İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2024: sömürülen ve yeni ciddi CVE kayıtları

237 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2024-9106
    40Planlayın

    Wechat Social login <= 1.3.0 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    xunhuweb · wechat social login 微信qq钉钉登录插件1 Eki 2024

  • CVE-2024-9224
    26İzleyin

    Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    kau-boys · hello world1 Eki 2024

  • CVE-2024-41276
    39İzleyin

    A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    1 Eki 2024

  • CVE-2024-44610
    22İzleyin

    PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters i

    OrtaCVSS 5,6Kavram kanıtıEPSS %0

    1 Eki 2024

  • CVE-2024-31835
    19İzleyin

    Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    flatpress · flatpress1 Eki 2024

  • CVE-2024-47525
    30İzleyin

    Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php

    OrtaCVSS 5,4İstismar yokEPSS %29

    librenms · librenms1 Eki 2024

  • CVE-2024-7855
    40Planlayın

    WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %17

    thimpress · wp hotel booking2 Eki 2024

  • CVE-2024-44193
    31İzleyin

    A logic issue was addressed with improved restrictions.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    apple · itunes2 Eki 2024

  • CVE-2024-33209
    21İzleyin

    FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    flatpress · flatpress2 Eki 2024

  • CVE-2024-33210
    21İzleyin

    A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    flatpress · flatpress2 Eki 2024

  • CVE-2024-41290
    32İzleyin

    FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    flatpress · flatpress2 Eki 2024

  • CVE-2024-46626
    35İzleyin

    OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    os4ed · opensis2 Eki 2024

  • CVE-2024-24116
    48Planlayın

    An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    ruijie · rg-nbs2009g-p firmware2 Eki 2024

  • CVE-2024-9441
    55Planlayın

    Linear eMerge e3-Series Forgot Password Command Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    linear · emerge e3-series2 Eki 2024

  • CVE-2024-45519
    99Hemen

    The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    synacor · zimbra collaboration suite2 Eki 2024

  • CVE-2024-41163
    46Planlayın

    A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0.

    YüksekCVSS 7,5İstismar yokEPSS %52

    veertu · anka build cloud3 Eki 2024

  • CVE-2024-45870
    26İzleyin

    Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    bandisoft · bandiview3 Eki 2024

  • CVE-2024-46658
    39İzleyin

    Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability.

    YüksekCVSS 8,0Kavram kanıtıEPSS %24

    3 Eki 2024

  • CVE-2024-47855
    26İzleyin

    util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

    OrtaCVSS 5,3İstismar yokEPSS %17

    4 Eki 2024

  • CVE-2024-9513
    26İzleyin

    Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

    OrtaCVSS 6,3Kavram kanıtıEPSS %1

    netadmin · netadmin iam4 Eki 2024

  • CVE-2024-43686
    25İzleyin

    Reflected XSS in TimeProvider 4100 chart component

    OrtaCVSS 5,4İstismar yokEPSS %12

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2024-43687
    30İzleyin

    XSS vulnerability in bannerconfig endpoint in TimeProvider 4100

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2024-7801
    25İzleyin

    SQL injection in get_chart_data in TimeProvider 4100

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2024-9054
    39İzleyin

    Remote code Execution inTimeProvider® 4100

    YüksekCVSS 8,5Kavram kanıtıEPSS %15

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2024-47841
    37İzleyin

    Path traversal when loading stylesheets

    OrtaCVSS 6,9İstismar yokEPSS %34

    wikimedia · wikimedia-extensions-css4 Eki 2024

  • CVE-2024-8743
    27İzleyin

    Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    bitpressadmin · file manager5 Eki 2024

  • CVE-2024-9161
    27İzleyin

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    rankmath · seo5 Eki 2024

  • CVE-2024-47374
    24İzleyin

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    litespeedtech · litespeed cache5 Eki 2024

  • CVE-2024-38399
    31İzleyin

    Use After Free in Graphics

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    qualcomm · wsa8835 firmware7 Eki 2024

  • CVE-2024-43047
    61Bu hafta

    Use After Free in DSP Service

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    qualcomm · fastconnect 6700 firmware7 Eki 2024

  • CVE-2024-46278
    34İzleyin

    Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

    YüksekCVSS 8,4Kavram kanıtıEPSS %2

    sismics · teedy7 Eki 2024

  • CVE-2024-9570
    35İzleyin

    D-Link DIR-619L B1 formEasySetTimezone buffer overflow

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    dlink · dir-619l firmware7 Eki 2024

  • CVE-2024-42831
    24İzleyin

    A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to execute arbitrary Java

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    7 Eki 2024

  • CVE-2024-31449
    36İzleyin

    Lua library commands may lead to stack overflow and RCE in Redis

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    redis · redis7 Eki 2024

  • CVE-2024-45293
    31İzleyin

    XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    phpoffice · phpspreadsheet7 Eki 2024

  • CVE-2024-43362
    33İzleyin

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    OrtaCVSS 5,4İstismar yokEPSS %38

    cacti · cacti7 Eki 2024

  • CVE-2024-43363
    39İzleyin

    Remote code execution via Log Poisoning in Cacti

    YüksekCVSS 7,2Kavram kanıtıEPSS %35

    cacti · cacti7 Eki 2024

  • CVE-2024-43364
    43Planlayın

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    YüksekCVSS 8,2İstismar yokEPSS %37

    cacti · cacti7 Eki 2024

  • CVE-2024-43365
    40Planlayın

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    YüksekCVSS 8,2İstismar yokEPSS %25

    cacti · cacti7 Eki 2024

  • CVE-2024-21532
    29İzleyin

    All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the b

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    8 Eki 2024

  • CVE-2024-21533
    26İzleyin

    All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    8 Eki 2024

  • CVE-2024-8911
    40Planlayın

    LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    latepoint · latepoint8 Eki 2024

  • CVE-2024-8943
    40Planlayın

    LatePoint <= 5.0.12 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    latepoint · latepoint8 Eki 2024

  • CVE-2024-45230
    38İzleyin

    An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16.

    YüksekCVSS 7,5İstismar yokEPSS %25

    djangoproject · django8 Eki 2024

  • CVE-2024-47949
    37İzleyin

    In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

    YüksekCVSS 7,5İstismar yokEPSS %23

    jetbrains · teamcity8 Eki 2024

  • CVE-2024-44349
    41Planlayın

    A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    8 Eki 2024

  • CVE-2024-47008
    44Planlayın

    Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.

    YüksekCVSS 7,5İstismar yokEPSS %47

    ivanti · avalanche8 Eki 2024

  • CVE-2024-47010
    50Planlayın

    Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

    KritikCVSS 9,8İstismar yokEPSS %37

    ivanti · avalanche8 Eki 2024

  • CVE-2024-47011
    47Planlayın

    Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information

    YüksekCVSS 7,5İstismar yokEPSS %56

    ivanti · avalanche8 Eki 2024

  • CVE-2024-9380
    76Bu hafta

    An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %59

    ivanti · endpoint manager cloud services appliance8 Eki 2024

  • CVE-2024-9381
    33İzleyin

    Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.

    YüksekCVSS 7,2İstismar yokEPSS %15

    ivanti · endpoint manager cloud services appliance8 Eki 2024

  • CVE-2024-38124
    36İzleyin

    Windows Netlogon Elevation of Privilege Vulnerability

    KritikCVSS 9,0Kavram kanıtıEPSS %1

    microsoft · windows server 20088 Eki 2024

  • CVE-2024-43468
    93Hemen

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %81

    microsoft · configuration manager 24038 Eki 2024

  • CVE-2024-43532
    39İzleyin

    Remote Registry Service Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · windows 10 15078 Eki 2024

  • CVE-2024-43535
    28İzleyin

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    microsoft · windows 10 15078 Eki 2024

  • CVE-2024-43572
    81Hemen

    Microsoft Management Console Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %66

    microsoft · windows 10 15078 Eki 2024

  • CVE-2024-43573
    76Bu hafta

    Windows MSHTML Platform Spoofing Vulnerability

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %46

    microsoft · windows 10 15078 Eki 2024

  • CVE-2024-43583
    31İzleyin

    Winlogon Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 10 15078 Eki 2024

  • CVE-2024-43612
    18İzleyin

    Power BI Report Server Spoofing Vulnerability

    OrtaCVSS 4,7İstismar yokEPSS %0

    microsoft · power bi report server8 Eki 2024

  • CVE-2024-47773
    32İzleyin

    Anonymous cache poisoning via XHR requests in Discourse

    YüksekCVSS 8,2Kavram kanıtıEPSS %1

    discourse · discourse8 Eki 2024

  • CVE-2024-47823
    30İzleyin

    Livewire Remote Code Execution (RCE) on File Uploads

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    laravel · livewire8 Eki 2024

  • CVE-2024-9379
    71Bu hafta

    SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ru

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %43

    ivanti · endpoint manager cloud services appliance8 Eki 2024

  • CVE-2024-9680
    76Bu hafta

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %23

    mozilla · firefox9 Eki 2024

  • CVE-2024-7293
    35İzleyin

    Password policy for new users is not strong enough

    YüksekCVSS 8,8İstismar yokEPSS %0

    progress · telerik reporting9 Eki 2024

  • CVE-2024-9463
    99Hemen

    Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %98

    paloaltonetworks · expedition9 Eki 2024

  • CVE-2024-9464
    62Bu hafta

    Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

    KritikCVSS 9,3Kavram kanıtıEPSS %82

    paloaltonetworks · expedition9 Eki 2024

  • CVE-2024-9465
    96Hemen

    Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

    KritikCVSS 9,2KEVSilahlaştırılmışEPSS %99

    paloaltonetworks · expedition9 Eki 2024

  • CVE-2024-9466
    36İzleyin

    Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure

    YüksekCVSS 8,2Kavram kanıtıEPSS %13

    paloaltonetworks · expedition9 Eki 2024

  • CVE-2024-3656
    33İzleyin

    Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities

    YüksekCVSS 8,1Kavram kanıtıEPSS %3

    red hat · red hat build of keycloak9 Eki 2024

  • CVE-2024-9796
    40Planlayın

    WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    internet-formation · wp-advanced-search10 Eki 2024

  • CVE-2023-25581
    37İzleyin

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    KritikCVSS 9,2Kavram kanıtıEPSS %1

    pac4j · pac4j10 Eki 2024

  • CVE-2024-9793
    28İzleyin

    Tenda AC1206 ate ate_ifconfig_set command injection

    OrtaCVSS 5,3İstismar yokEPSS %23

    tenda · ac1206 firmware10 Eki 2024

  • CVE-2024-47167
    27İzleyin

    SSRF in the path parameter of /queue/join in Gradio

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    gradio project · gradio10 Eki 2024

  • CVE-2024-9487
    46Planlayın

    An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed

    KritikCVSS 9,5Kavram kanıtıEPSS %25

    github · enterprise server10 Eki 2024

  • CVE-2024-9822
    39İzleyin

    Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    pedalo · pedalo connector10 Eki 2024

  • CVE-2024-21534
    42Planlayın

    All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    11 Eki 2024

  • CVE-2024-7514
    26İzleyin

    WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    webtoffee · comments import & export11 Eki 2024

  • CVE-2024-9234
    42Planlayın

    GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    ataurr · gutenkit – page builder blocks, patterns, and templates for gutenberg block editor11 Eki 2024

  • CVE-2024-9707
    42Planlayın

    Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    themehunk · hunk companion11 Eki 2024

  • CVE-2024-47875
    24İzleyin

    DOMPurify nesting-based mXSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    cure53 · dompurify11 Eki 2024

  • CVE-2024-42640
    51Planlayın

    angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    11 Eki 2024

  • CVE-2024-48827
    36İzleyin

    An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password fun

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    sbond · watcharr11 Eki 2024

  • CVE-2024-46532
    39İzleyin

    SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    11 Eki 2024

  • CVE-2024-35517
    33İzleyin

    Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.

    YüksekCVSS 7,2İstismar yokEPSS %15

    netgear · xr1000 firmware11 Eki 2024

  • CVE-2024-9821
    35İzleyin

    Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    guruteam · bot for telegram on woocommerce11 Eki 2024

  • CVE-2024-9047
    67Bu hafta

    WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

    KritikCVSS 9,8Kavram kanıtıEPSS %93

    iptanus · wordpress file upload12 Eki 2024

  • CVE-2024-9756
    17İzleyin

    Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    directsoftware · order attachments for woocommerce12 Eki 2024

  • CVE-2024-9916
    49Planlayın

    HuangDou UTCMS cli.php os command injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %73

    usualtool · usualtoolcms13 Eki 2024

  • CVE-2024-48120
    21İzleyin

    X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    x2engine · x2crm14 Eki 2024

  • CVE-2024-48259
    29İzleyin

    Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    magicbug · cloudlog14 Eki 2024

  • CVE-2023-50780
    40Planlayın

    Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    apache · artemis14 Eki 2024

  • CVE-2024-41997
    26İzleyin

    An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02).

    OrtaCVSS 6,6Kavram kanıtıEPSS %1

    14 Eki 2024

  • CVE-2024-45741
    25İzleyin

    Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

    OrtaCVSS 5,4İstismar yokEPSS %14

    splunk · splunk14 Eki 2024

  • CVE-2024-46528
    17İzleyin

    An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere 4.x before 4.1.3 and 3.x through 3.4.1 and KubeSphere Enterprise 4.x

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    14 Eki 2024

  • CVE-2024-9977
    27İzleyin

    MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection

    OrtaCVSS 5,1İstismar yokEPSS %22

    mitrastar · gpt-2541gnac15 Eki 2024

  • CVE-2024-48914
    54Planlayın

    Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy

    KritikCVSS 9,1Kavram kanıtıEPSS %60

    vendure-ecommerce · vendure15 Eki 2024

  • CVE-2024-9506
    14İzleyin

    Regular Expression Denial of Service (ReDoS)

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    vue · vue15 Eki 2024

  • CVE-2024-35584
    37İzleyin

    SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    os4ed · opensis15 Eki 2024

  • CVE-2024-21262
    26İzleyin

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oracle · mysql connector\/odbc15 Eki 2024

  • CVE-2024-44337
    20İzleyin

    The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML.

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    15 Eki 2024