Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,838 results · page 307 of 777
Sep 23, 2024New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI prCVE-2024-47222 · Other software · Myoffice · reported by MITRECritical 9.8
New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol.
- Product
- MY Office SDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmyoffice.rusupport.myoffice.ru
Sep 23, 2024A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP coCVE-2024-0005 · Other software · PureStorage · reported by psirt@purestorage.comCritical 9.1
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.
- Product
- FlashArray
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.CVE-2024-0004 · Other software · PureStorage · reported by psirt@purestorage.comCritical 9.1
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
- Product
- FlashArray
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privilegedCVE-2024-0003 · Other software · PureStorage · reported by psirt@purestorage.comCritical 9.1
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.
- Product
- FlashArray
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.CVE-2024-0002 · Other software · PureStorage · reported by psirt@purestorage.comCritical 10
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
- Product
- FlashArray
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor tCVE-2024-0001 · Other software · Pure Storage · reported by psirt@purestorage.comCritical 10
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.
- Product
- FlashArray
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication.CVE-2024-9014 · Other software · pgadmin.org · reported by f86ef6dc-4d3a-42ad-8f28-e6d5547a5007Critical 9.9
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
- Product
- pgAdmin 4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024Lobe Chat is an open-source artificial intelligence chat framework.CVE-2024-47066 · Other software · lobehub · reported by GitHubCritical 9
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.
- Product
- lobe-chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024DataEase is an open source data visualization analysis tool.CVE-2024-46997 · Other software · dataease · reported by GitHubCritical 9.8
DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1.
- Product
- dataease
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, becaCVE-2024-34331 · Other software · parallels · reported by MITRECritical 9.8
A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.
- Product
- parallels_desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkb.parallels.comkhronokernel.com
Sep 23, 2024Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allowsCVE-2024-7735 · Other software · Exnet Informatics Software · reported by iletisim@usom.gov.trCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002.
- Product
- Ferry Reservation System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 23, 2024Bypass of two factor authentication in RestAPI in Checkmk < 2.3.0p16 and < 2.2.0p34 allows authenticated users to bypass two factor authenticationCVE-2024-8606 · Other software · Checkmk GmbH · reported by security@checkmk.comCritical 9.2
Bypass of two factor authentication in RestAPI in Checkmk < 2.3.0p16 and < 2.2.0p34 allows authenticated users to bypass two factor authentication
- Product
- Checkmk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2024An issue was discovered in vesoft NebulaGraph through 3.8.0.CVE-2024-47219 · Other software · vesoft · reported by MITRECritical 9.8
An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.
- Product
- nebulagraph_studio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2024An issue was discovered in vesoft NebulaGraph through 3.8.0.CVE-2024-47218 · Other software · versoft · reported by MITRECritical 9.8
An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.
- Product
- nebulagraph_studio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp.CVE-2024-46640 · Other software · seacms · reported by MITRECritical 9.8
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
- Product
- seacms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.CVE-2024-46103 · Other software · sem-cms · reported by MITRECritical 9.8
SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.
- Product
- semcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024GDidees CMS <= v3.9.1 has a file upload vulnerability.CVE-2024-46101 · Other software · gdidees · reported by MITRECritical 9.8
GDidees CMS <= v3.9.1 has a file upload vulnerability.
- Product
- gdidees_cms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024Navidrome is an open source web-based music collection server and streamer.CVE-2024-47062 · Other software · navidrome · reported by GitHubCritical 9.4
Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furthermore, the names of the parameters are not properly escaped, leading to SQL Injections. Finally, the username is used in a `LIKE` statement, allowing people to log in with `%` instead of their username. When adding parameters to the URL, they are automatically included in an SQL `LIKE` statement (depending on the parameter's name). This allows attackers to potentially retrieve arbitrary information. For example, attackers can use the following request to test whether some encrypted passwords start with `AAA`. This results in an SQL query like `password LIKE 'AAA%'`, allowing attackers to slowly brute-force passwords. When adding parameters to the URL, they are automatically added to an SQL query. The names of the parameters are not properly escaped. This behavior can be used to inject arbitrary SQL code (SQL Injection). These vulnerabilities can be used to leak information and dump the contents of the database and have been addre
- Product
- navidrome
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024Arc before 2024-08-26 allows remote code execution in JavaScript boosts.CVE-2024-45489 · Other software · the_browser_company · reported by MITRECritical 9.8
Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and runs arbitrary Javascript on that browser in a privileged context. NOTE: this is a no-action cloud vulnerability with zero affected users.
- Product
- arc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.CVE-2024-46652 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.
- Product
- ac8v4_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process.CVE-2024-9043 · Other software · Cellopoint · reported by twcert@cert.org.twCritical 9.8
Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.
- Product
- Secure Email Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Sep 20, 2024Webo-facto: Privilege escalationCVE-2024-8853 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves administrators by registering with a username that contains '-wfuser'.
- Product
- Webo-facto
- Affected
- up to 1.40
- What to do
- Affects up to 1.40. Update Webo-facto to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Sep 19, 2024sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.CVE-2024-46983 · Other software · sofastack · reported by GitHubCritical 9.8
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the SOFA Hessian blacklist protection mechanism, and this gadget chain only relies on JDK and does not rely on any third-party components. This issue is fixed by an update to the blacklist, users can upgrade to sofahessian version 3.5.5 to avoid this issue. Users unable to upgrade may maintain a blacklist themselves in the directory `external/serialize.blacklist`.
- Product
- sofa-hessian
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024Traefik is a golang, Cloud Native Application Proxy.CVE-2024-45410 · Other software · traefik · reported by GitHubCritical 9.8
Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modify these headers. Since the application trusts the value of these headers, security implications might arise, if they can be modified. For HTTP/1.1, however, it was found that some of theses custom headers can indeed be removed and in certain cases manipulated. The attack relies on the HTTP/1.1 behavior, that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been addressed in release versions 2.11.9 and 3.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- traefik
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024Dragonfly is an open source P2P-based file distribution and image acceleration system.CVE-2023-27584 · Other software · dragonflyoss · reported by GitHubCritical 9.8
Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to authentication bypass. An attacker can perform any action as a user with admin privileges. This issue has been addressed in release version 2.0.9. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- Dragonfly2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code viCVE-2024-40125 · Other software · closedlooptechnology · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint.
- Product
- cless_server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comclosed-loop.biz
Sep 19, 2024Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via thCVE-2024-33109 · Other software · ergophone · reported by MITRECritical 9.9
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.
- Product
- tiptel_ip_286_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityCVE-2024-8963 · Network & remote access · Ivanti · reported by 3c1d8aa1-5a33-4ea4-8992-aadd6440af75ExploitedCritical 9.4
Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.
- Product
- Cloud Services Appliance (CSA)
- On CISA’s list since
- Sep 19, 2024 (federal fix deadline Oct 10, 2024)
- What to do
- Attackers are using this now. Install Ivanti’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogforums.ivanti.comcisa.gov
Sep 19, 2024libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.CVE-2024-31570 · Other software · freeimage_project · reported by MITRECritical 9.8
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
- Product
- freeimage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsourceforge.netopenwall.com
Sep 19, 2024Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensitive information.CVE-2024-45861 · Other software · Kastle Systems · reported by ics-cert@hq.dhs.govCritical 9.2
Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensitive information.
- Product
- Access Control System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Ticket System allows ReflecCVE-2024-7785 · Other software · Ece Software · reported by iletisim@usom.gov.trCritical 9.3
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting (XSS). This issue affects Electronic Ticket System: before 2024.08.
- Product
- Electronic Ticket System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 19, 2024The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved CVE-2024-8986 · Other software · grafana-plugin-sdk-go · reported by security@grafana.comCritical 9.1
The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the repository URI (for instance, to allow for fetching of private dependencies), the final binary will contain the full URI, including said credentials.
- Product
- Grafana Plugin SDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login.CVE-2024-47088 · Other software · Apex Softcell · reported by vdisclose@cert-in.org.inCritical 9.3
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.
- Product
- LD Geo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uCVE-2024-46946 · Other software · langchain · reported by MITRECritical 9.8
langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).
- Product
- langchain_experimental
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcwe.mitre.orgdocs.sympy.org
Sep 18, 2024Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.CVE-2024-46377 · Other software · sourcecodester · reported by MITRECritical 9.8
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.CVE-2024-46376 · Other software · best_house_rental_management_system · reported by MITRECritical 9.8
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.CVE-2024-46375 · Other software · best_house_rental_management_system · reported by MITRECritical 9.8
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.CVE-2024-46374 · Other software · best_house_rental_management_system · reported by MITRECritical 9.8
Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via thCVE-2024-40568 · Other software · bluekitchen · reported by MITRECritical 9.8
Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont function in the src/mesh/pb_adv.c component
- Product
- bluestack
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails.CVE-2024-46986 · Other software · owen2345 · reported by GitHubCritical 9.9
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on (depending on the permissions of the underlying filesystem). E.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- camaleon-cms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcodeql.github.comgithub.com
Sep 18, 2024An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12CVE-2024-45523 · Other software · hitachi · reported by MITRECritical 9.1
An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.
- Product
- id_bravura_security_fabric
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04.CVE-2024-34399 · Other software · bmc · reported by MITRECritical 9.8
**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only.
- Product
- remedy_mid-tier
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations.CVE-2024-6878 · Other software · Eliz Software · reported by iletisim@usom.gov.trCritical 9.2
Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations. This issue affects Panel: before v2.3.24.
- Product
- Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 18, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.CVE-2024-6877 · Other software · Eliz Software · reported by iletisim@usom.gov.trCritical 9.4
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS. This issue affects Panel: before v2.3.24.
- Product
- Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 18, 2024Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.CVE-2024-5960 · Other software · Eliz Software · reported by iletisim@usom.gov.trCritical 9.8
Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials. This issue affects Panel: before v2.3.24.
- Product
- Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 18, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.CVE-2024-5959 · Other software · Eliz Software · reported by iletisim@usom.gov.trCritical 9.3
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24.
- Product
- Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 18, 2024Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through CVE-2024-5958 · Other software · Eliz Software · reported by iletisim@usom.gov.trCritical 9.4
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.
- Product
- Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 18, 2024SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.CVE-2024-44542 · Other software · todesk · reported by MITRECritical 9.8
SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.
- Product
- todesk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code.CVE-2024-35515 · Other software · sqlitedict · reported by MITRECritical 9.8
Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code.
- Product
- sqlitedict
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comwha13.github.io
Sep 18, 2024A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007bCVE-2024-34026 · Other software · OpenPLC · reported by talos-cna@cisco.comCritical 9
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
- Product
- OpenPLC_v3
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.