İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2024: sömürülen ve yeni ciddi CVE kayıtları

154 kayıt · 11 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-20137
    30İzleyin

    In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    mediatek, inc. · mt6890, mt7622, mt7915, mt7916, mt7981, mt79862 Ara 2024

  • CVE-2024-53104
    62Bu hafta

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    linux · linux kernel2 Ara 2024

  • CVE-2024-46906
    47Planlayın

    WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %40

    progress · whatsup gold2 Ara 2024

  • CVE-2024-46909
    54Planlayın

    WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %48

    progress · whatsup gold2 Ara 2024

  • CVE-2024-52806
    33İzleyin

    SimpleSAMLphp SAML2 has an XXE in parsing SAML messages

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    simplesamlphp · saml22 Ara 2024

  • CVE-2024-53259
    26İzleyin

    quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    quic-go · quic-go2 Ara 2024

  • CVE-2024-53617
    19İzleyin

    A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via uploading an HTML file

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    2 Ara 2024

  • CVE-2024-53900
    37İzleyin

    Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.

    KritikCVSS 9,1Kavram kanıtıEPSS %3

    mongoosejs · mongoose2 Ara 2024

  • CVE-2024-53375
    45Planlayın

    An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series.

    YüksekCVSS 8,0Kavram kanıtıEPSS %42

    2 Ara 2024

  • CVE-2024-29404
    31İzleyin

    An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export pa

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    3 Ara 2024

  • CVE-2024-42455
    37İzleyin

    A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserializat

    YüksekCVSS 8,1İstismar yokEPSS %15

    veeam · veeam backup \& replication3 Ara 2024

  • CVE-2024-11643
    35İzleyin

    Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    allaccessible · accessibility by allaccessible4 Ara 2024

  • CVE-2024-48839
    38İzleyin

    Remote Code Execution, RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-48840
    38İzleyin

    Unauthorized Access vulnerabilities allow Remote Code Execution.

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-48844
    28İzleyin

    Denial of Service, DoS

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-48845
    38İzleyin

    Weak Password Rules/Strength

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-48846
    28İzleyin

    Cross Side Request Forgery, CSRF

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-51544
    39İzleyin

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.

    YüksekCVSS 8,8İstismar yokEPSS %13

    abb · aspect-ent-12 firmware5 Ara 2024

  • CVE-2024-51546
    34İzleyin

    Credentails Disclosure

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    abb · aspect-ent-12 firmware5 Ara 2024

  • CVE-2024-51550
    38İzleyin

    Data Validation / Sanitization

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    abb · aspect-ent-12 firmware5 Ara 2024

  • CVE-2024-6516
    37İzleyin

    Cross Site Scripting XSS

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    abb · aspect-ent-2 firmware5 Ara 2024

  • CVE-2024-12227
    27İzleyin

    MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    msi · dragon center5 Ara 2024

  • CVE-2024-53703
    36İzleyin

    A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web serv

    YüksekCVSS 8,1Kavram kanıtıEPSS %12

    sonicwall · sma 200 firmware5 Ara 2024

  • CVE-2024-54679
    26İzleyin

    CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    cyberpanel · cyberpanel5 Ara 2024

  • CVE-2024-53457
    35İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute

    OrtaCVSS 5,4İstismar yokEPSS %46

    librenms · librenms5 Ara 2024

  • CVE-2024-10578
    35İzleyin

    Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    blazethemes · pubnews6 Ara 2024

  • CVE-2024-11201
    25İzleyin

    myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    saadiqbal · points management system for gamification, ranks, badges, and loyalty rewards program – mycred6 Ara 2024

  • CVE-2024-11728
    34İzleyin

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    iqonic · kivicare6 Ara 2024

  • CVE-2024-10516
    34İzleyin

    Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

    YüksekCVSS 8,1Kavram kanıtıEPSS %6

    swte · swift performance lite6 Ara 2024

  • CVE-2024-50677
    24İzleyin

    A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted p

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    oroinc · oroplatform6 Ara 2024

  • CVE-2024-50404
    27İzleyin

    A link following vulnerability has been reported to affect Qsync Central.

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    qnap · qsync central6 Ara 2024

  • CVE-2024-53691
    41Planlayın

    A link following vulnerability has been reported to affect several QNAP operating system versions.

    YüksekCVSS 8,7Kavram kanıtıEPSS %22

    qnap · qts6 Ara 2024

  • CVE-2024-12270
    31İzleyin

    Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    jonathandejong · beautiful taxonomy filters7 Ara 2024

  • CVE-2024-12209
    46Planlayın

    WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    wphealth · wp umbrella: update backup restore & monitoring8 Ara 2024

  • CVE-2024-12342
    31İzleyin

    TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

    YüksekCVSS 7,1Kavram kanıtıEPSS %9

    tp-link · vn020 f3v(t)8 Ara 2024

  • CVE-2024-12344
    22İzleyin

    TP-Link VN020 F3v(T) FTP USER Command memory corruption

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    tp-link · vn020 f3v firmware8 Ara 2024

  • CVE-2023-30486
    17İzleyin

    WordPress Square theme <= 2.0.0 - Broken Access Control

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    hashthemes · square9 Ara 2024

  • CVE-2023-32117
    41Planlayın

    WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    softlab · integrate google drive9 Ara 2024

  • CVE-2024-21542
    26İzleyin

    Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destinat

    OrtaCVSS 6,6Kavram kanıtıEPSS %1

    10 Ara 2024

  • CVE-2024-10708
    20İzleyin

    System Dashboard < 2.8.15 - Admin+ Path Traversal

    OrtaCVSS 4,9Kavram kanıtıEPSS %2

    bowo · system dashboard10 Ara 2024

  • CVE-2024-11868
    21İzleyin

    LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    thimpress · learnpress10 Ara 2024

  • CVE-2024-54152
    38İzleyin

    Angular Expressions - Remote Code Execution when using locals

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    peerigon · angular-expressions10 Ara 2024

  • CVE-2024-55544
    38İzleyin

    Authenticated Command Injection

    YüksekCVSS 8,7İstismar yokEPSS %12

    oringnet · iap-420 firmware10 Ara 2024

  • CVE-2024-55547
    42Planlayın

    Remote Command Execution via SNMP

    KritikCVSS 9,3İstismar yokEPSS %17

    oringnet · iap-420 firmware10 Ara 2024

  • CVE-2024-11773
    35İzleyin

    SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ru

    YüksekCVSS 7,2İstismar yokEPSS %23

    ivanti · cloud services appliance10 Ara 2024

  • CVE-2024-55550
    51Planlayın

    Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insu

    DüşükCVSS 2,7KEVSilahlaştırılmışEPSS %38

    mitel · micollab10 Ara 2024

  • CVE-2024-10511
    25İzleyin

    CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local netwo

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    schneider electric · powerchute serial shutdown11 Ara 2024

  • CVE-2024-53677
    59Planlayın

    Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

    KritikCVSS 9,5Kavram kanıtıEPSS %70

    apache · struts11 Ara 2024

  • CVE-2024-12381
    36İzleyin

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    google · chrome11 Ara 2024

  • CVE-2024-12483
    26İzleyin

    Dromara UJCMS User ID id authorization

    OrtaCVSS 6,3Kavram kanıtıEPSS %3

    ujcms · ujcms11 Ara 2024

  • CVE-2024-12484
    27İzleyin

    Codezips Technical Discussion Forum signuppost.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    codezips · technical discussion forum11 Ara 2024

  • CVE-2024-42448
    45Planlayın

    From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Rem

    KritikCVSS 9,9Kavram kanıtıEPSS %19

    veeam · service provider console11 Ara 2024

  • CVE-2024-45337
    37İzleyin

    Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

    KritikCVSS 9,1Kavram kanıtıEPSS %3

    golang.org/x/crypto · golang.org/x/crypto/ssh11 Ara 2024

  • CVE-2024-49112
    61Bu hafta

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    microsoft · windows 10 150711 Ara 2024

  • CVE-2024-49113
    55Planlayın

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %83

    microsoft · windows 10 150711 Ara 2024

  • CVE-2024-49116
    35İzleyin

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %10

    microsoft · windows server 201611 Ara 2024

  • CVE-2024-49117
    35İzleyin

    Windows Hyper-V Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    microsoft · windows 11 22h211 Ara 2024

  • CVE-2024-49122
    38İzleyin

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %20

    microsoft · windows 10 150711 Ara 2024

  • CVE-2024-49138
    69Bu hafta

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %26

    microsoft · windows 10 150711 Ara 2024

  • CVE-2024-50339
    43Planlayın

    GLPI vulnerable to unauthenticated session hijacking

    KritikCVSS 9,3İstismar yokEPSS %18

    glpi-project · glpi11 Ara 2024

  • CVE-2024-55587
    36İzleyin

    python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    11 Ara 2024

  • CVE-2024-54498
    35İzleyin

    A path handling issue was addressed with improved validation.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    apple · macos11 Ara 2024

  • CVE-2024-54502
    31İzleyin

    The issue was addressed with improved checks.

    OrtaCVSS 6,5İstismar yokEPSS %17

    apple · safari11 Ara 2024

  • CVE-2024-54515
    31İzleyin

    A logic issue was addressed with improved restrictions.

    YüksekCVSS 7,8İstismar yokEPSS %0

    apple · macos11 Ara 2024

  • CVE-2024-55659
    34İzleyin

    SiYuan has an arbitrary file write in the host via /api/asset/upload

    YüksekCVSS 8,7İstismar yokEPSS %0

    b3log · siyuan11 Ara 2024

  • CVE-2024-10124
    49Planlayın

    Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    themehunk · vayu blocks – website builder for the block editor12 Ara 2024

  • CVE-2024-12172
    30İzleyin

    WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+)

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    hookandhook · wp courses lms – online courses builder, elearning courses, courses solution, education courses12 Ara 2024

  • CVE-2024-55099
    39İzleyin

    A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    phpgurukul · online nurse hiring system12 Ara 2024

  • CVE-2024-55875
    40Planlayın

    http4k has a potential XXE (XML External Entity Injection) vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    http4k · http4k12 Ara 2024

  • CVE-2024-10783
    33İzleyin

    MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    mainwp · mainwp child – securely connects to the mainwp dashboard to manage multiple sites13 Ara 2024

  • CVE-2024-9290
    40Planlayın

    Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    azzaroco · super backup & clone - migrate for wordpress13 Ara 2024

  • CVE-2024-55889
    29İzleyin

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    phpmyfaq · phpmyfaq13 Ara 2024

  • CVE-2023-36531
    17İzleyin

    WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    liquidpoll · liquidpoll – advanced polls for creators and brands13 Ara 2024

  • CVE-2024-54239
    39İzleyin

    WordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    dugudlabs · eyewear prescription form13 Ara 2024

  • CVE-2024-54262
    39İzleyin

    WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    sidngr · import export for woocommerce13 Ara 2024

  • CVE-2024-54292
    37İzleyin

    WordPress Appsplate plugin <= 2.1.3 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    appsplate · appsplate13 Ara 2024

  • CVE-2024-54330
    28İzleyin

    WordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    hurraki · hurrakify13 Ara 2024

  • CVE-2024-55661
    43Planlayın

    Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

    YüksekCVSS 8,7Kavram kanıtıEPSS %29

    laravel · pulse13 Ara 2024

  • CVE-2024-55890
    28İzleyin

    D-Tale allows Remote Code Execution through the Custom Filter Input

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    man-group · dtale13 Ara 2024

  • CVE-2024-55956
    97Hemen

    In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    cleo · harmony13 Ara 2024

  • CVE-2024-9698
    29İzleyin

    Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    aruphash · crafthemes demo import14 Ara 2024

  • CVE-2024-53376
    38İzleyin

    CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field t

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    cyberpanel · cyberpanel16 Ara 2024

  • CVE-2024-5333
    21İzleyin

    The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    stellarwp · the events calendar16 Ara 2024

  • CVE-2024-12641
    38İzleyin

    Chunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE

    KritikCVSS 9,6Kavram kanıtıEPSS %1

    cht · tenderdoctransfer16 Ara 2024

  • CVE-2024-54363
    40Planlayın

    WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    saiful.total · wp nssuser register16 Ara 2024

  • CVE-2024-54369
    36İzleyin

    WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    themehunk · zita site builder16 Ara 2024

  • CVE-2024-54374
    30İzleyin

    WordPress Sogrid plugin <= 1.5.6 - Local File Inclusion vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    sabri · sogrid16 Ara 2024

  • CVE-2024-54378
    35İzleyin

    WordPress Quietly Insights plugin <= 1.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    quietly · quietly insights16 Ara 2024

  • CVE-2024-54379
    35İzleyin

    WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    blokhauswp · minterpress16 Ara 2024

  • CVE-2024-54385
    30İzleyin

    WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %5

    princeahmed · radio player16 Ara 2024

  • CVE-2024-55972
    37İzleyin

    WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    chriscarvache · etemplates16 Ara 2024

  • CVE-2024-55976
    37İzleyin

    WordPress Critical Site Intel plugin <= 1.0 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    mikeleembruggen · critical site intel16 Ara 2024

  • CVE-2024-55978
    37İzleyin

    WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    walletstation · code generator pro16 Ara 2024

  • CVE-2024-55980
    37İzleyin

    WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    robindkumar · wr age verification16 Ara 2024

  • CVE-2024-55981
    37İzleyin

    WordPress Nabz Image Gallery plugin <= v1.00 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    nabajit roy · nabz image gallery16 Ara 2024

  • CVE-2024-55982
    38İzleyin

    WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    richteam · share buttons – social media16 Ara 2024

  • CVE-2024-55988
    37İzleyin

    WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    amol nirmala waman · navayan csv export16 Ara 2024

  • CVE-2024-55557
    39İzleyin

    ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    16 Ara 2024

  • CVE-2024-29671
    46Planlayın

    Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request h

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    16 Ara 2024

  • CVE-2024-12356
    95Hemen

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %87

    beyondtrust · privileged remote access17 Ara 2024