İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2024: sömürülen ve yeni ciddi CVE kayıtları

203 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2024-0105
    35İzleyin

    NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.

    YüksekCVSS 8,9İstismar yokEPSS %0

    nvidia · connectx41 Kas 2024

  • CVE-2024-10654
    27İzleyin

    TOTOLINK LR350 formLoginAuth.htm authorization

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    totolink · lr350 firmware1 Kas 2024

  • CVE-2024-7456
    39İzleyin

    SQL Injection in lunary-ai/lunary

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    lunary · lunary1 Kas 2024

  • CVE-2024-43919
    52Planlayın

    WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    yarpp · yet another related posts plugin1 Kas 2024

  • CVE-2024-43998
    39İzleyin

    WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    websiteinwp · blogpoet1 Kas 2024

  • CVE-2024-47308
    40Planlayın

    WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    templately · templately1 Kas 2024

  • CVE-2024-48217
    35İzleyin

    An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    1 Kas 2024

  • CVE-2024-51483
    28İzleyin

    changedetection.io Path Traversal vulnerability

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    dgtlmoon · changedetection.io1 Kas 2024

  • CVE-2024-51774
    33İzleyin

    qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.

    YüksekCVSS 8,1Kavram kanıtıEPSS %3

    qbittorrent · qbittorrent2 Kas 2024

  • CVE-2024-10697
    29İzleyin

    Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection

    OrtaCVSS 5,3İstismar yokEPSS %26

    tenda · ac6 firmware2 Kas 2024

  • CVE-2024-10758
    27İzleyin

    code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    anirbandutta9 · news-buzz4 Kas 2024

  • CVE-2024-50526
    39İzleyin

    WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    lindeni · multi purpose mail form4 Kas 2024

  • CVE-2024-51665
    17İzleyin

    WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    wpthemespace · magical addons for elementor4 Kas 2024

  • CVE-2024-34887
    19İzleyin

    Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDA

    OrtaCVSS 4,9İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2024-48336
    33İzleyin

    The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, wh

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    4 Kas 2024

  • CVE-2024-34885
    27İzleyin

    Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP acco

    OrtaCVSS 6,8İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2024-48061
    39İzleyin

    langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on th

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    langflow · langflow4 Kas 2024

  • CVE-2024-32870
    23İzleyin

    iTop hub connector Information disclosure

    OrtaCVSS 5,8Kavram kanıtıEPSS %0

    combodo · itop4 Kas 2024

  • CVE-2024-51132
    40Planlayın

    An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    5 Kas 2024

  • CVE-2024-51739
    21İzleyin

    Users enumeration allowed through Rest API in Combodo iTop

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    combodo · itop5 Kas 2024

  • CVE-2024-50335
    21İzleyin

    Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    salesagility · suitecrm5 Kas 2024

  • CVE-2024-51358
    39İzleyin

    An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    5 Kas 2024

  • CVE-2024-9902
    25İzleyin

    Ansible-core: ansible-core user may read/write unauthorized content

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    red hat · ansible automation platform execution environments6 Kas 2024

  • CVE-2024-10914
    65Bu hafta

    D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

    KritikCVSS 9,2Kavram kanıtıEPSS %96

    dlink · dns-320 firmware6 Kas 2024

  • CVE-2024-10915
    60Bu hafta

    D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

    KritikCVSS 9,2Kavram kanıtıEPSS %79

    dlink · dns-320 firmware6 Kas 2024

  • CVE-2024-10081
    52Planlayın

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

    KritikCVSS 10,0Kavram kanıtıEPSS %39

    ericsson · codechecker6 Kas 2024

  • CVE-2024-50340
    48Planlayın

    Ability to change environment from query in symfony/runtime

    YüksekCVSS 7,3Kavram kanıtıEPSS %63

    symfony · symfony6 Kas 2024

  • CVE-2024-48325
    32İzleyin

    Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    portabilis · i-educar6 Kas 2024

  • CVE-2024-43425
    60Bu hafta

    Moodle: remote code execution via calculated question types

    YüksekCVSS 8,1SilahlaştırılmışEPSS %87

    moodle · moodle7 Kas 2024

  • CVE-2024-9926
    17İzleyin

    Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    automattic · jetpack7 Kas 2024

  • CVE-2024-47073
    37İzleyin

    Dataease arbitrary interface access vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    dataease · dataease7 Kas 2024

  • CVE-2024-51428
    30İzleyin

    An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    espressif · esp-idf7 Kas 2024

  • CVE-2024-50599
    43Planlayın

    A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the we

    OrtaCVSS 6,1İstismar yokEPSS %63

    synacor · zimbra collaboration suite7 Kas 2024

  • CVE-2024-24409
    37İzleyin

    Privilege Escalation

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    zohocorp · manageengine admanager plus8 Kas 2024

  • CVE-2024-51030
    26İzleyin

    A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to e

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oretnom23 · cab management system8 Kas 2024

  • CVE-2024-51031
    21İzleyin

    A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated use

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · cab management system8 Kas 2024

  • CVE-2024-51032
    21İzleyin

    A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authentica

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oretnom23 · toll tax management system8 Kas 2024

  • CVE-2024-44765
    26İzleyin

    An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privil

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    8 Kas 2024

  • CVE-2024-51211
    40Planlayın

    SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    os4ed · opensis8 Kas 2024

  • CVE-2024-52002
    35İzleyin

    Cross-Site Request Forgery (CSRF) in several iTop pages

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    combodo · itop8 Kas 2024

  • CVE-2024-10586
    40Planlayın

    Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    eugenbobrowski · debug tool8 Kas 2024

  • CVE-2024-10673
    35İzleyin

    Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    themehunk · top store9 Kas 2024

  • CVE-2024-10674
    36İzleyin

    Th Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    themehunk · th shop mania9 Kas 2024

  • CVE-2024-10470
    49Planlayın

    WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    vibethemes · wordpress learning management system9 Kas 2024

  • CVE-2024-10508
    39İzleyin

    RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    metagauss · registrationmagic9 Kas 2024

  • CVE-2024-50251
    24İzleyin

    netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    linux · linux kernel9 Kas 2024

  • CVE-2024-10958
    29İzleyin

    WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    wppa · wp photo album plus10 Kas 2024

  • CVE-2024-41992
    36İzleyin

    Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library funct

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    10 Kas 2024

  • CVE-2024-51788
    40Planlayın

    WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    joshua wolfe · the novel design store directory11 Kas 2024

  • CVE-2024-51791
    40Planlayın

    WordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    made i.t. · forms11 Kas 2024

  • CVE-2024-51793
    40Planlayın

    WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    webfulcreations · computer repair shop11 Kas 2024

  • CVE-2024-48322
    32İzleyin

    UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    11 Kas 2024

  • CVE-2024-51747
    28İzleyin

    Arbitrary File Read and Delete in kanboard

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    kanboard · kanboard11 Kas 2024

  • CVE-2024-51026
    21İzleyin

    The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx endpoint, where it is po

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    11 Kas 2024

  • CVE-2024-10245
    39İzleyin

    Relais 2FA <= 1.0 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    mobisoft974 · relais 2fa12 Kas 2024

  • CVE-2024-50320
    42Planlayın

    An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.

    YüksekCVSS 7,5İstismar yokEPSS %39

    ivanti · avalanche12 Kas 2024

  • CVE-2024-50324
    34İzleyin

    Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenti

    YüksekCVSS 7,2İstismar yokEPSS %18

    ivanti · endpoint manager12 Kas 2024

  • CVE-2024-50326
    36İzleyin

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentic

    YüksekCVSS 7,2İstismar yokEPSS %26

    ivanti · endpoint manager12 Kas 2024

  • CVE-2024-50330
    51Planlayın

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthent

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    ivanti · endpoint manager12 Kas 2024

  • CVE-2024-49369
    40Planlayın

    Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    icinga · icinga12 Kas 2024

  • CVE-2024-52010
    34İzleyin

    Zoraxy has an authenticated command injection in the Web SSH feature

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    tobychui · zoraxy12 Kas 2024

  • CVE-2024-43451
    82Hemen

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %85

    microsoft · windows 10 150712 Kas 2024

  • CVE-2024-43452
    39İzleyin

    Windows Registry Elevation of Privilege Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %28

    microsoft · windows 10 180912 Kas 2024

  • CVE-2024-43630
    32İzleyin

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %3

    microsoft · windows 10 21h212 Kas 2024

  • CVE-2024-43642
    49Planlayın

    Windows SMB Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %63

    microsoft · windows 11 22h212 Kas 2024

  • CVE-2024-49019
    32İzleyin

    Active Directory Certificate Services Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows server 200812 Kas 2024

  • CVE-2024-49039
    69Bu hafta

    Windows Task Scheduler Elevation of Privilege Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %14

    microsoft · windows 10 150712 Kas 2024

  • CVE-2024-8068
    51Planlayın

    Privilege escalation to NetworkService Account access

    OrtaCVSS 5,1KEVSilahlaştırılmışEPSS %3

    citrix · session recording12 Kas 2024

  • CVE-2024-8069
    54Planlayın

    Limited remote code execution with privilege of a NetworkService Account access

    OrtaCVSS 5,1KEVSilahlaştırılmışEPSS %14

    citrix · session recording12 Kas 2024

  • CVE-2023-52268
    36İzleyin

    The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session t

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    12 Kas 2024

  • CVE-2024-23666
    36İzleyin

    A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    fortinet · fortianalyzer12 Kas 2024

  • CVE-2024-52301
    47Planlayın

    Laravel allows environment manipulation via query string

    YüksekCVSS 8,7Kavram kanıtıEPSS %44

    laravel · framework12 Kas 2024

  • CVE-2024-51179
    30İzleyin

    An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as t

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    open5gs · open5gs12 Kas 2024

  • CVE-2024-10629
    35İzleyin

    GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    axelkeller · gpx viewer12 Kas 2024

  • CVE-2024-34781
    49Planlayın

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentic

    YüksekCVSS 7,2İstismar yokEPSS %68

    ivanti · endpoint manager12 Kas 2024

  • CVE-2024-34787
    36İzleyin

    Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthent

    YüksekCVSS 7,8İstismar yokEPSS %17

    ivanti · endpoint manager12 Kas 2024

  • CVE-2024-48510
    40Planlayın

    Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    mihula · prodotnetzip13 Kas 2024

  • CVE-2024-50969
    24İzleyin

    A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbi

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    anisha · jonnys liquor13 Kas 2024

  • CVE-2024-50970
    35İzleyin

    A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arb

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    nikoarroyocuraza · online furniture shopping project13 Kas 2024

  • CVE-2024-50971
    28İzleyin

    A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary S

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    angeljudesuarez · construction management system13 Kas 2024

  • CVE-2024-50972
    28İzleyin

    A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitra

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    angeljudesuarez · construction management system13 Kas 2024

  • CVE-2024-51996
    30İzleyin

    Symphony has an Authentication Bypass via RememberMe

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    symfony · symfony13 Kas 2024

  • CVE-2024-43093
    59Planlayın

    In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensit

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %0

    google · android13 Kas 2024

  • CVE-2024-49379
    21İzleyin

    Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    getumbrel · umbrel13 Kas 2024

  • CVE-2024-40443
    17İzleyin

    SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of s

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    oretnom23 · computer laboratory management system13 Kas 2024

  • CVE-2024-42834
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC) UI v14.11 allows a

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    13 Kas 2024

  • CVE-2024-52550
    32İzleyin

    Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    jenkins · pipeline\13 Kas 2024

  • CVE-2024-5083
    20İzleyin

    Nexus Repository 2 - Stored XSS

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    sonatype · nexus repository13 Kas 2024

  • CVE-2024-5082
    29İzleyin

    Nexus Repository 2 - Remote Code Execution

    YüksekCVSS 7,1Kavram kanıtıEPSS %2

    sonatype · nexus repository13 Kas 2024

  • CVE-2024-10146
    21İzleyin

    Simple File List < 6.1.13 - Reflected Cross-Site Scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    simplefilelist · simple file list14 Kas 2024

  • CVE-2024-9186
    35İzleyin

    Automation By Autonami < 3.3.0 - Unauthenticated SQLi

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    funnelkit · funnelkit automations14 Kas 2024

  • CVE-2024-10571
    40Planlayın

    Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    ays-pro · chartify14 Kas 2024

  • CVE-2024-7124
    21İzleyin

    Reflected XSS in DInGO dLibra

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    poznan supercomputing and networking center · dingo dlibra14 Kas 2024

  • CVE-2024-52302
    35İzleyin

    common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)

    YüksekCVSS 8,7Kavram kanıtıEPSS %3

    osamataher · java-springboot-codebase14 Kas 2024

  • CVE-2024-52375
    40Planlayın

    WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    arttia creative · datasets manager by arttia creative14 Kas 2024

  • CVE-2024-52380
    40Planlayın

    WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    softpulseinfotech · picsmize14 Kas 2024

  • CVE-2024-52382
    39İzleyin

    WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    medmatech · matix popup builder14 Kas 2024

  • CVE-2024-50968
    30İzleyin

    A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remo

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    adonesevangelista · agri-trading online shopping system14 Kas 2024

  • CVE-2024-11120
    78Bu hafta

    GeoVision EOL devices - OS Command Injection

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %28

    geovision · gv-vs12 firmware14 Kas 2024

  • CVE-2024-10924
    64Bu hafta

    Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    really-simple-plugins · really simple security15 Kas 2024