İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2024: sömürülen ve yeni ciddi CVE kayıtları

237 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2012-10018
    33İzleyin

    Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting

    YüksekCVSS 8,3Kavram kanıtıEPSS %1

    mapplic · mapplic16 Eki 2024

  • CVE-2016-15041
    24İzleyin

    MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    mainwp · mainwp dashboard16 Eki 2024

  • CVE-2017-20192
    24İzleyin

    Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    strategy11 · formidable form builder16 Eki 2024

  • CVE-2019-25213
    31İzleyin

    Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    vasyltech · advanced access manager16 Eki 2024

  • CVE-2020-36836
    32İzleyin

    WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion

    YüksekCVSS 8,0Kavram kanıtıEPSS %1

    wpfastestcache · wp fastest cache16 Eki 2024

  • CVE-2021-4448
    39İzleyin

    Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    kaswara project · kaswara16 Eki 2024

  • CVE-2021-4449
    41Planlayın

    ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    digitalzoomstudio · zoomsounds16 Eki 2024

  • CVE-2022-4971
    29İzleyin

    Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %17

    heateor · sassy social share16 Eki 2024

  • CVE-2016-15042
    41Planlayın

    Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    najeebmedia · frontend file manager16 Eki 2024

  • CVE-2017-20194
    21İzleyin

    Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    strategy11 · formidable form builder16 Eki 2024

  • CVE-2020-36842
    35İzleyin

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    wpvivid · migration\, backup\, staging16 Eki 2024

  • CVE-2023-22649
    40Planlayın

    Rancher 'Audit Log' leaks sensitive information

    YüksekCVSS 8,4SilahlaştırılmışEPSS %2

    suse · rancher16 Eki 2024

  • CVE-2024-45216
    67Bu hafta

    Apache Solr: Authentication bypass possible using a fake URL Path ending

    KritikCVSS 9,8Kavram kanıtıEPSS %92

    apache · solr16 Eki 2024

  • CVE-2024-9061
    55Planlayın

    WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    themehunk · wp popup builder16 Eki 2024

  • CVE-2024-45844
    37İzleyin

    BIG-IP monitors vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %10

    f5 · big-ip access policy manager16 Eki 2024

  • CVE-2024-38814
    40Planlayın

    An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware.

    YüksekCVSS 8,8İstismar yokEPSS %15

    vmware · vmware hcx16 Eki 2024

  • CVE-2024-44762
    22İzleyin

    A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    webmin · usermin16 Eki 2024

  • CVE-2024-6333
    28İzleyin

    Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    xerox · altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c80717 Eki 2024

  • CVE-2024-48634
    37İzleyin

    D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in t

    YüksekCVSS 8,0İstismar yokEPSS %17

    dlink · dir-882 firmware17 Eki 2024

  • CVE-2023-39593
    22İzleyin

    Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated pr

    OrtaCVSS 5,6Kavram kanıtıEPSS %0

    mariadb · mariadb17 Eki 2024

  • CVE-2024-27766
    22İzleyin

    An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function.

    OrtaCVSS 5,7Kavram kanıtıEPSS %1

    mariadb · mariadb17 Eki 2024

  • CVE-2024-33453
    32İzleyin

    Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    espressif · esp-idf17 Eki 2024

  • CVE-2024-9264
    66Bu hafta

    Grafana SQL Expressions allow for remote code execution

    KritikCVSS 9,4SilahlaştırılmışEPSS %97

    grafana · grafana18 Eki 2024

  • CVE-2024-38820
    21İzleyin

    CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    vmware · spring framework18 Eki 2024

  • CVE-2024-9537
    68Bu hafta

    ScienceLogic SL1 unspecified vulnerability

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %3

    sciencelogic · sl118 Eki 2024

  • CVE-2024-9593
    37İzleyin

    Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

    YüksekCVSS 8,3Kavram kanıtıEPSS %12

    wpplugin · time clock18 Eki 2024

  • CVE-2024-37404
    56Planlayın

    Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1

    YüksekCVSS 8,8SilahlaştırılmışEPSS %70

    ivanti · connect secure18 Eki 2024

  • CVE-2024-10140
    21İzleyin

    code-projects Pharmacy Management System manage_supplier.php sql injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    code-projects · pharmacy management system19 Eki 2024

  • CVE-2024-10193
    25İzleyin

    WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection

    OrtaCVSS 5,1İstismar yokEPSS %15

    wavlink · wn530h4 firmware20 Eki 2024

  • CVE-2024-49328
    39İzleyin

    WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    vivektamrakar · wp rest api fns20 Eki 2024

  • CVE-2024-49607
    39İzleyin

    WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    redwanhilali · wp dropbox dropins20 Eki 2024

  • CVE-2024-44000
    64Bu hafta

    WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    litespeedtech · litespeed cache20 Eki 2024

  • CVE-2024-8625
    29İzleyin

    TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    total-soft · ts poll21 Eki 2024

  • CVE-2024-45309
    60Bu hafta

    OneDev vulnerable to arbitrary file reading for unauthenticated user

    YüksekCVSS 8,7SilahlaştırılmışEPSS %24

    onedev project · onedev21 Eki 2024

  • CVE-2024-49368
    43Planlayın

    Unchecked logrotate settings lead to arbitrary command execution

    YüksekCVSS 8,9Kavram kanıtıEPSS %27

    nginxui · nginx ui21 Eki 2024

  • CVE-2024-49882
    31İzleyin

    ext4: fix double brelse() the buffer of the extents path

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel21 Eki 2024

  • CVE-2024-35286
    59Planlayın

    A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    mitel · micollab21 Eki 2024

  • CVE-2024-35315
    22İzleyin

    A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2

    OrtaCVSS 5,6Kavram kanıtıEPSS %0

    mitel · micollab21 Eki 2024

  • CVE-2024-41713
    95Hemen

    A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenti

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %97

    mitel · micollab21 Eki 2024

  • CVE-2024-8852
    21İzleyin

    All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    servmask · all-in-one wp migration22 Eki 2024

  • CVE-2022-23861
    21İzleyin

    Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    ysoft · safeq22 Eki 2024

  • CVE-2022-23862
    31İzleyin

    A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    ysoft · safeq22 Eki 2024

  • CVE-2024-48605
    31İzleyin

    An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    helakuru · helakuru22 Eki 2024

  • CVE-2024-45518
    41Planlayın

    An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before P

    YüksekCVSS 8,8İstismar yokEPSS %20

    zimbra · collaboration22 Eki 2024

  • CVE-2024-46538
    43Planlayın

    A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

    OrtaCVSS 4,8Kavram kanıtıEPSS %80

    netgate · pfsense22 Eki 2024

  • CVE-2024-44812
    39İzleyin

    SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password par

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    janobe · online complaint site22 Eki 2024

  • CVE-2024-46483
    39İzleyin

    Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap ov

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    22 Eki 2024

  • CVE-2024-48415
    20İzleyin

    itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middl

    OrtaCVSS 5,0Kavram kanıtıEPSS %0

    razormist · loan management system22 Eki 2024

  • CVE-2024-48644
    21İzleyin

    Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23031701) allows remote

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    22 Eki 2024

  • CVE-2024-48652
    19İzleyin

    Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    tuzitio · camaleon cms22 Eki 2024

  • CVE-2024-50050
    25İzleyin

    Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, poten

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    meta platforms, inc · llama stack23 Eki 2024

  • CVE-2024-47575
    97Hemen

    A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, Fo

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    fortinet · fortimanager23 Eki 2024

  • CVE-2024-5764
    23İzleyin

    Nexus Repository 3 - Static hard-coded encryption passphrase used by default

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    sonatype · nexus repository manager23 Eki 2024

  • CVE-2024-49653
    39İzleyin

    WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    james-eggers · portfolleo23 Eki 2024

  • CVE-2024-49668
    40Planlayın

    WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    christopherdewese1099 · verbalize wp23 Eki 2024

  • CVE-2024-20384
    23İzleyin

    A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat De

    OrtaCVSS 5,8İstismar yokEPSS %0

    cisco · adaptive security appliance software23 Eki 2024

  • CVE-2024-20481
    60Bu hafta

    A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe

    OrtaCVSS 5,8KEVSilahlaştırılmışEPSS %15

    cisco · secure firewall threat defense23 Eki 2024

  • CVE-2024-40431
    35İzleyin

    A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUG

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    23 Eki 2024

  • CVE-2024-40432
    26İzleyin

    A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_C

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    23 Eki 2024

  • CVE-2024-6049
    31İzleyin

    Unauthenticated Path Traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    lawo ag · vsm ltc time sync (vtimesync)24 Eki 2024

  • CVE-2024-49681
    37İzleyin

    WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    activity-log.com · wp sessions time monitoring full automatic24 Eki 2024

  • CVE-2024-48139
    30İzleyin

    A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    24 Eki 2024

  • CVE-2024-48427
    35İzleyin

    A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbit

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    oretnom23 · packers and movers management system24 Eki 2024

  • CVE-2024-45242
    42Planlayın

    EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping o

    YüksekCVSS 7,8İstismar yokEPSS %35

    24 Eki 2024

  • CVE-2024-48208
    34İzleyin

    pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    pureftpd · pure-ftpd24 Eki 2024

  • CVE-2024-49357
    37İzleyin

    ZimaOS (Installed Applications and System Information) has Unauthorized Sensitive Data Leak

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    zimaspace · zimaos24 Eki 2024

  • CVE-2024-10354
    20İzleyin

    SourceCodester Petrol Pump Management Software print.php sql injection

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    mayurik · petrol pump management24 Eki 2024

  • CVE-2024-10355
    20İzleyin

    SourceCodester Petrol Pump Management Software invoice.php sql injection

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    mayurik · petrol pump management24 Eki 2024

  • CVE-2024-49380
    36İzleyin

    Plenti arbitrary file write vulnerability

    YüksekCVSS 8,9Kavram kanıtıEPSS %2

    plenti · plenti25 Eki 2024

  • CVE-2024-49757
    20İzleyin

    Zitadel User Registration Bypass Vulnerability

    OrtaCVSS 4,9Kavram kanıtıEPSS %2

    zitadel · zitadel25 Eki 2024

  • CVE-2024-10386
    43Planlayın

    Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %19

    rockwellautomation · thinmanager25 Eki 2024

  • CVE-2024-9890
    35İzleyin

    User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    deryck · user toolkit25 Eki 2024

  • CVE-2024-9932
    50Planlayın

    Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    jurredeklijn · wux blog editor25 Eki 2024

  • CVE-2024-9933
    40Planlayın

    WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    watchtowerhq · watchtowerhq25 Eki 2024

  • CVE-2024-9772
    29İzleyin

    Uix Shortcodes – Compatible with Gutenberg <= 1.9.9 - Unauthenticated Arbitrary Shortcode Execution

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    uiux · uix shortcodes26 Eki 2024

  • CVE-2024-10410
    21İzleyin

    SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    janobe · online hotel reservation system27 Eki 2024

  • CVE-2024-50602
    23İzleyin

    An issue was discovered in libexpat before 2.6.4.

    OrtaCVSS 5,9Kavram kanıtıEPSS %1

    netapp · active iq unified manager27 Eki 2024

  • CVE-2024-10428
    38İzleyin

    WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection

    YüksekCVSS 8,6İstismar yokEPSS %14

    wavlink · wn530h4 firmware27 Eki 2024

  • CVE-2024-10429
    39İzleyin

    WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection

    YüksekCVSS 8,6İstismar yokEPSS %18

    wavlink · wn530h4 firmware27 Eki 2024

  • CVE-2024-50623
    99Hemen

    In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download th

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    cleo · harmony28 Eki 2024

  • CVE-2024-9162
    29İzleyin

    All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    servmask · all-in-one wp migration and backup28 Eki 2024

  • CVE-2024-38821
    37İzleyin

    Authorization Bypass of Static Resources in WebFlux Applications

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    spring · spring28 Eki 2024

  • CVE-2024-50450
    39İzleyin

    WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    pluginus · wordpress meta data and taxonomies filter28 Eki 2024

  • CVE-2024-50477
    41Planlayın

    WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    stacksmarket · stacks mobile app builder28 Eki 2024

  • CVE-2024-50492
    39İzleyin

    WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    wpplugin · scottcart28 Eki 2024

  • CVE-2024-50498
    55Planlayın

    WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    lubus · wp query console28 Eki 2024

  • CVE-2024-50478
    39İzleyin

    WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    swoopnow · 1-click login\28 Eki 2024

  • CVE-2024-50483
    40Planlayın

    WordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    tareqhasan · meetup28 Eki 2024

  • CVE-2024-50488
    35İzleyin

    WordPress Token Login plugin <= 1.0.3 - Broken Authentication vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    priyabratasarkar · token login28 Eki 2024

  • CVE-2024-50491
    39İzleyin

    WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    micahblu · rsvp me28 Eki 2024

  • CVE-2024-10448
    27İzleyin

    code-projects Blood Bank Management System delete.php cross-site request forgery

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    fabian · blood bank management system28 Eki 2024

  • CVE-2024-10449
    27İzleyin

    Codezips Hospital Appointment System loginAction.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    codezips · hospital appointment system28 Eki 2024

  • CVE-2024-45802
    44Planlayın

    Squid Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %47

    squid-cache · squid28 Eki 2024

  • CVE-2024-39205
    60Bu hafta

    An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    28 Eki 2024

  • CVE-2024-44236
    25İzleyin

    An out-of-bounds access issue was addressed with improved bounds checking.

    OrtaCVSS 5,5İstismar yokEPSS %11

    apple · macos28 Eki 2024

  • CVE-2024-44258
    28İzleyin

    This issue was addressed with improved handling of symlinks.

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    apple · ipados28 Eki 2024

  • CVE-2024-44285
    31İzleyin

    A use-after-free issue was addressed with improved memory management.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    apple · ipados28 Eki 2024

  • CVE-2024-48594
    40Planlayın

    File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    fast5 · prison management system28 Eki 2024

  • CVE-2024-50482
    40Planlayın

    WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    chetan khandla · woocommerce product design29 Eki 2024

  • CVE-2024-50493
    40Planlayın

    WordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    masterhomepage · automatic translation29 Eki 2024