İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2025: sömürülen ve yeni ciddi CVE kayıtları

219 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2025-22214
    17İzleyin

    Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    2 Oca 2025

  • CVE-2024-12912
    28İzleyin

    An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    asus · router2 Oca 2025

  • CVE-2023-45828
    21İzleyin

    WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    rumbletalk · rumbletalk live group chat2 Oca 2025

  • CVE-2023-47179
    35İzleyin

    WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    byconsole · wooodt lite2 Oca 2025

  • CVE-2024-13106
    35İzleyin

    D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access control

    OrtaCVSS 6,9İstismar yokEPSS %26

    dlink · dir-816 firmware2 Oca 2025

  • CVE-2024-56249
    36İzleyin

    WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    ludwig you · wpmastertoolkit2 Oca 2025

  • CVE-2024-56264
    26İzleyin

    WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability

    OrtaCVSS 6,6Kavram kanıtıEPSS %0

    beee · acf city selector2 Oca 2025

  • CVE-2024-9950
    34İzleyin

    Abuse of Unauthenticated Compliance Recheck in SecureConnector

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    forescout · secureconnector2 Oca 2025

  • CVE-2024-11716
    24İzleyin

    While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation al

    OrtaCVSS 5,3İstismar yokEPSS %11

    ctfd · ctfd2 Oca 2025

  • CVE-2024-48197
    18İzleyin

    Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the w

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    2 Oca 2025

  • CVE-2024-13129
    39İzleyin

    Roxy-WI roxy.py action_service os command injection

    YüksekCVSS 8,7İstismar yokEPSS %17

    3 Oca 2025

  • CVE-2024-12583
    39İzleyin

    Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    alexacrm · dynamics 365 integration4 Oca 2025

  • CVE-2024-20154
    36İzleyin

    In Modem, there is a possible out of bounds write due to a missing bounds check.

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    mediatek · lr12a6 Oca 2025

  • CVE-2024-12970
    15İzleyin

    OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

    DüşükCVSS 3,9Kavram kanıtıEPSS %1

    tubitak bilgem · pardus os my computer6 Oca 2025

  • CVE-2024-54879
    36İzleyin

    SeaCMS V13.1 is vulnerable to Incorrect Access Control.

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    seacms · seacms6 Oca 2025

  • CVE-2024-54880
    36İzleyin

    SeaCMS V13.1 is vulnerable to Incorrect Access Control.

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    seacms · seacms6 Oca 2025

  • CVE-2024-46209
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    redaxo · redaxo6 Oca 2025

  • CVE-2021-27285
    33İzleyin

    An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    inspur · clusterengine6 Oca 2025

  • CVE-2024-46981
    41Planlayın

    Redis' Lua library commands may lead to remote code execution

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    redis · redis6 Oca 2025

  • CVE-2024-48455
    40Planlayın

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0

    DüşükCVSS 2,7SilahlaştırılmışEPSS %6

    6 Oca 2025

  • CVE-2024-48456
    60Bu hafta

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0

    YüksekCVSS 7,5SilahlaştırılmışEPSS %16

    6 Oca 2025

  • CVE-2024-48457
    60Bu hafta

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0

    YüksekCVSS 7,5SilahlaştırılmışEPSS %3

    6 Oca 2025

  • CVE-2024-54763
    26İzleyin

    An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information witho

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    6 Oca 2025

  • CVE-2024-54764
    26İzleyin

    An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information with

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    6 Oca 2025

  • CVE-2024-54767
    31İzleyin

    An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information w

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    6 Oca 2025

  • CVE-2024-12157
    30İzleyin

    Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    arrowplugins · popup – mailchimp, getresponse and activecampaign intergrations7 Oca 2025

  • CVE-2024-12252
    40Planlayın

    SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    seobeginner · seo lat auto post7 Oca 2025

  • CVE-2024-12471
    35İzleyin

    Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Arb

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    postsaint · post saint: chatgpt, gpt4, dall-e, stable diffusion, pexels, dezgo ai text & image generator7 Oca 2025

  • CVE-2024-12535
    34İzleyin

    Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    eflyjason · host php info7 Oca 2025

  • CVE-2024-12849
    44Planlayın

    Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %48

    wpguruin · error log viewer by wp guru7 Oca 2025

  • CVE-2024-56278
    37İzleyin

    WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    smackcoders inc., · wp ultimate exporter7 Oca 2025

  • CVE-2024-56289
    28İzleyin

    WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    adrian tobey · groundhogg7 Oca 2025

  • CVE-2025-22352
    30İzleyin

    WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    elextensions · elex woocommerce advanced bulk edit products, prices & attributes7 Oca 2025

  • CVE-2024-48245
    28İzleyin

    Vehicle Management System 1.0 is vulnerable to SQL Injection.

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    janobe · vehicle management system7 Oca 2025

  • CVE-2024-53345
    35İzleyin

    An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    7 Oca 2025

  • CVE-2024-55556
    60Bu hafta

    A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on th

    KritikCVSS 9,8SilahlaştırılmışEPSS %43

    7 Oca 2025

  • CVE-2025-22294
    28İzleyin

    WordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    theme funda · custom field for wp job manager7 Oca 2025

  • CVE-2024-55555
    40Planlayın

    Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %6

    7 Oca 2025

  • CVE-2024-44450
    21İzleyin

    Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    7 Oca 2025

  • CVE-2024-53522
    30İzleyin

    Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI co

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    7 Oca 2025

  • CVE-2024-54819
    42Planlayın

    I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/sec

    KritikCVSS 9,1Kavram kanıtıEPSS %20

    7 Oca 2025

  • CVE-2024-55218
    24İzleyin

    IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    icewarp · icewarp7 Oca 2025

  • CVE-2025-0242
    30İzleyin

    Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6

    OrtaCVSS 6,5İstismar yokEPSS %14

    mozilla · firefox7 Oca 2025

  • CVE-2025-0247
    42Planlayın

    Memory safety bugs fixed in Firefox 134 and Thunderbird 134

    KritikCVSS 9,8İstismar yokEPSS %10

    mozilla · firefox7 Oca 2025

  • CVE-2024-50603
    99Hemen

    An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    aviatrix · controller7 Oca 2025

  • CVE-2024-12585
    24İzleyin

    PropertyHive < 2.1.1 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    wp-property-hive · propertyhive8 Oca 2025

  • CVE-2024-11613
    40Planlayın

    WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    iptanus · wordpress file upload8 Oca 2025

  • CVE-2024-11635
    39İzleyin

    WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    iptanus · wordpress file upload8 Oca 2025

  • CVE-2024-54676
    60Bu hafta

    Apache OpenMeetings: Deserialisation of untrusted data in cluster mode

    KritikCVSS 9,8İstismar yokEPSS %68

    apache · openmeetings8 Oca 2025

  • CVE-2024-11423
    30İzleyin

    Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    wp swings · gift cards for woocommerce pro8 Oca 2025

  • CVE-2024-55656
    40Planlayın

    RedisBloom Integer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    redisbloom · redisbloom8 Oca 2025

  • CVE-2024-51442
    36İzleyin

    Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    8 Oca 2025

  • CVE-2024-53995
    7İzleyin

    GHSL-2024-288: SickChill open redirect in login

    DüşükCVSS 1,9Kavram kanıtıEPSS %1

    sickchill · sickchill8 Oca 2025

  • CVE-2025-0283
    33İzleyin

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu

    YüksekCVSS 7,0Kavram kanıtıEPSS %17

    ivanti · connect secure8 Oca 2025

  • CVE-2025-0282
    96Hemen

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure8 Oca 2025

  • CVE-2024-53704
    98Hemen

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    sonicwall · sonicos9 Oca 2025

  • CVE-2024-12542
    34İzleyin

    linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    linkid · linkid9 Oca 2025

  • CVE-2023-24012
    32İzleyin

    Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    opendds · dds9 Oca 2025

  • CVE-2025-22510
    28İzleyin

    WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    kkarpieszuk · wc price history for omnibus9 Oca 2025

  • CVE-2024-54761
    26İzleyin

    BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

    OrtaCVSS 6,3Kavram kanıtıEPSS %1

    bigantsoft · bigant office messenger 59 Oca 2025

  • CVE-2024-54887
    34İzleyin

    TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /user

    YüksekCVSS 8,0Kavram kanıtıEPSS %6

    tp-link · tl-wr940n firmware9 Oca 2025

  • CVE-2023-28354
    39İzleyin

    An issue was discovered in Opsview Monitor Agent 6.8.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    9 Oca 2025

  • CVE-2025-21385
    34İzleyin

    Microsoft Purview Information Disclosure Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %28

    microsoft · purview9 Oca 2025

  • CVE-2024-56511
    52Planlayın

    DataEase has an unauthorized vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %50

    dataease · dataease10 Oca 2025

  • CVE-2024-54910
    18İzleyin

    Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function.

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    10 Oca 2025

  • CVE-2024-12847
    60Bu hafta

    NETGEAR DGN setup.cgi OS Command Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %30

    netgear · dgn1000 firmware10 Oca 2025

  • CVE-2024-33297
    18İzleyin

    Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    microweber · microweber10 Oca 2025

  • CVE-2024-33298
    24İzleyin

    Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new ba

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    microweber · microweber10 Oca 2025

  • CVE-2024-33299
    18İzleyin

    Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    microweber · microweber10 Oca 2025

  • CVE-2024-12404
    30İzleyin

    CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    crowdfavorite · cf internal link shortcode10 Oca 2025

  • CVE-2025-0105
    31İzleyin

    Expedition: Arbitrary File Deletion Vulnerability

    OrtaCVSS 6,9İstismar yokEPSS %13

    paloaltonetworks · expedition10 Oca 2025

  • CVE-2025-0107
    54Planlayın

    Expedition: OS Command Injection Vulnerability

    YüksekCVSS 7,7Kavram kanıtıEPSS %78

    paloaltonetworks · expedition10 Oca 2025

  • CVE-2024-12877
    39İzleyin

    GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    givewp · givewp11 Oca 2025

  • CVE-2025-0401
    27İzleyin

    1902756969 reggie CommonController.java download path traversal

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    1902756969 · reggie12 Oca 2025

  • CVE-2025-22828
    18İzleyin

    Apache CloudStack: Unauthorised access to annotations

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    apache · cloudstack13 Oca 2025

  • CVE-2025-22777
    39İzleyin

    WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    givewp · givewp13 Oca 2025

  • CVE-2025-22963
    30İzleyin

    Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    sismics · teedy13 Oca 2025

  • CVE-2024-57487
    60Bu hafta

    In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker

    OrtaCVSS 6,5SilahlaştırılmışEPSS %2

    code-projects · online car rental system13 Oca 2025

  • CVE-2024-46310
    37İzleyin

    Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via expose

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    13 Oca 2025

  • CVE-2024-11396
    22İzleyin

    Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    awplife · event monster13 Oca 2025

  • CVE-2024-12008
    31İzleyin

    W3 Total Cache <= 2.8.1 Information Exposure via Log Files

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    boldgrid · w3 total cache14 Oca 2025

  • CVE-2024-12365
    35İzleyin

    W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery

    YüksekCVSS 8,5Kavram kanıtıEPSS %1

    boldgrid · w3 total cache14 Oca 2025

  • CVE-2024-48884
    41Planlayın

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,

    KritikCVSS 9,1İstismar yokEPSS %15

    fortinet · fortimanager14 Oca 2025

  • CVE-2024-55591
    97Hemen

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and Forti

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    fortinet · fortiproxy14 Oca 2025

  • CVE-2024-7344
    32İzleyin

    Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

    YüksekCVSS 8,2Kavram kanıtıEPSS %1

    howyar · sysreturn14 Oca 2025

  • CVE-2024-21797
    34İzleyin

    A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.

    YüksekCVSS 7,2İstismar yokEPSS %20

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-34166
    44Planlayın

    An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %15

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-36258
    43Planlayın

    A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210

    KritikCVSS 9,8İstismar yokEPSS %12

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-36295
    34İzleyin

    A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505.

    YüksekCVSS 7,2İstismar yokEPSS %20

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-37186
    35İzleyin

    An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505.

    YüksekCVSS 7,2İstismar yokEPSS %22

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-38666
    42Planlayın

    An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505

    KritikCVSS 9,1İstismar yokEPSS %18

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39280
    46Planlayın

    An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,1İstismar yokEPSS %34

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39288
    32İzleyin

    A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.

    YüksekCVSS 7,2İstismar yokEPSS %13

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39360
    32İzleyin

    An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.

    YüksekCVSS 7,2İstismar yokEPSS %11

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39363
    38İzleyin

    A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505

    OrtaCVSS 6,1İstismar yokEPSS %48

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-39760
    44Planlayın

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.

    KritikCVSS 9,8İstismar yokEPSS %17

    wavlink · wl-wn533a8 firmware14 Oca 2025

  • CVE-2024-13179
    58Planlayın

    Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

    KritikCVSS 9,8İstismar yokEPSS %62

    ivanti · avalanche14 Oca 2025

  • CVE-2024-13180
    38İzleyin

    Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information.

    YüksekCVSS 7,5İstismar yokEPSS %27

    ivanti · avalanche14 Oca 2025

  • CVE-2024-13181
    49Planlayın

    Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

    KritikCVSS 9,8İstismar yokEPSS %32

    ivanti · avalanche14 Oca 2025

  • CVE-2024-13159
    90Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager14 Oca 2025