Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,876 results · page 314 of 778
Aug 22, 2024An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.CVE-2024-45167 · Other software · uci · reported by MITRECritical 9.8
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. A certain XmlMessage document causes 100% CPU consumption.
- Product
- idol_2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2024An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.CVE-2024-45166 · Other software · uci · reported by MITRECritical 9.8
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. There is an access violation and EIP overwrite after five logins.
- Product
- idol_2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2024The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server.CVE-2024-45163 · Other software · mirai · reported by MITRECritical 9.1
The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.
- Product
- botnet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcypressthatkid.medium.comflowtriq.com
Aug 21, 2024SolarWinds Web Help Desk Hardcoded Credential VulnerabilityCVE-2024-28987 · Other software · SolarWinds · reported by psirt@solarwinds.comExploitedCritical 9.1
SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.
- Product
- Web Help Desk
- On CISA’s list since
- Oct 15, 2024 (federal fix deadline Nov 5, 2024)
- What to do
- Attackers are using this now. Install SolarWinds’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogsupport.solarwinds.comsolarwinds.com
Aug 21, 2024Google Chromium V8 Type Confusion VulnerabilityCVE-2024-7971 · Computers, phones & browsers · Google · reported by chrome-cve-admin@google.comExploitedCritical 9.6
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium V8
- On CISA’s list since
- Aug 26, 2024 (federal fix deadline Sep 16, 2024)
- What to do
- Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogchromereleases.googleblog.comissues.chromium.org
Aug 21, 2024WPML: Remote Code ExecutionCVE-2024-6386 · WordPress plugins & themes · reported by WordfenceCritical 9.9
The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.
- Product
- WPML
- Affected
- up to 4.6.12
- What to do
- Affects up to 4.6.12. Update WPML to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordsec.stealthcopter.comwpml.org
Aug 21, 2024squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName.CVE-2024-40453 · Other software · squirrelly · reported by MITRECritical 9.8
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName.
- Product
- squirrelly
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 21, 2024LiteSpeed Cache: Incorrect Privilege AssignmentCVE-2024-28000 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.
- Product
- LiteSpeed Cache
- Affected
- up to 6.3.0.1
- What to do
- Affects up to 6.3.0.1. Update LiteSpeed Cache to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compacketstorm.news
Aug 21, 2024The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vuCVE-2024-5335 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the _ultimate_store_kit_compare_products cookie in versions up to , and including, 1.6.4. This makes it possible for an unauthenticated attacker to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker or above to delete arbitrary files, retrieve sensitive data, or execute code.
- Fixed in
- 2.0.0
- What to do
- Update the plugin to 2.0.0 or newer.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Aug 21, 2024Woo Inquiry: SQL InjectionCVE-2024-7854 · WordPress plugins & themes · reported by WordfenceCritical 10
The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Woo Inquiry
- Affected
- up to 0.1
- What to do
- Affects up to 0.1. Update Woo Inquiry to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Aug 20, 2024In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates aCVE-2024-43864 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Critical 9.8
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates a new modify header to replace the old one when updating CT entry. But if failed to allocate a new one, eg. exceed the max number firmware can support, modify header will be an error pointer that will trigger a panic when deallocating it. And the old modify header point is copied to old attr. When the old attr is freed, the old modify header is lost. Fix it by restoring the old attr to attr when failed to allocate a new modify header context. So when the CT entry is freed, the right modify header context will be freed. And the panic of accessing error pointer is also fixed.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Aug 20, 2024An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizingCVE-2024-6800 · Other software · GitHub · reported by product-cna@github.comCritical 9.5
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML. This vulnerability allowed an attacker with direct network access to GitHub Enterprise Server to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program.
- Product
- GitHub Enterprise Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.github.comdocs.github.com
Aug 20, 2024An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a networCVE-2024-38175 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.6
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.
- Product
- Azure Managed Instance for Apache Cassandra
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.CVE-2024-42919 · Other software · escanav · reported by MITRECritical 9.8
eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.
- Product
- escan_management_console
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.CVE-2024-27185 · Websites & servers · Joomla! Project · reported by security@joomla.orgCritical 9.1
The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.
- Product
- Joomla! CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024MEGABOT is a fully customized Discord bot for learning and fun.CVE-2024-43404 · Other software · NicPWNs · reported by GitHubCritical 9.8
MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release version 1.5.0.
- Product
- MEGABOT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.CVE-2024-35540 · Other software · typecho · reported by MITRECritical 9
A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
- Product
- typecho
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.CVE-2024-30949 · Other software · newlib_project · reported by MITRECritical 9.8
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.
- Product
- newlib
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.cominbox.sourceware.org
Aug 20, 2024Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.CVE-2024-33872 · Other software · keyfactor · reported by MITRECritical 9.8
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.
- Product
- command
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.CVE-2024-42575 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.CVE-2024-42574 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.CVE-2024-42573 · Other software · school_management_system_project · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.CVE-2024-42572 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php.CVE-2024-42571 · Other software · school_management_system_project · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.CVE-2024-42570 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.CVE-2024-42569 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php.CVE-2024-42568 · Other software · arajajyothibabu · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2.CVE-2024-42567 · Other software · school_management_system_project · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2.
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.phpCVE-2024-42566 · Other software · school_management_system_project · reported by MITRECritical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php
- Product
- school_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.CVE-2024-42565 · Other software · jerryhanjj · reported by MITRECritical 9.8
ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.
- Product
- erp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.CVE-2024-42563 · Other software · jerryhanjj · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.
- Product
- erp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.CVE-2024-42562 · Other software · krishna9772 · reported by MITRECritical 9.8
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at preview.php.
- Product
- pharmacy_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid passwordCVE-2024-42559 · Other software · hotel_management_system_project · reported by MITRECritical 9.8
An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password.
- Product
- hotel_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php.CVE-2024-42558 · Other software · vaibhavverma9999 · reported by MITRECritical 9.8
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php.
- Product
- hotel_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php.CVE-2024-42556 · Other software · vaibhavverma9999 · reported by MITRECritical 9.8
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php.
- Product
- hotel_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2024Exposure of Remote Code Execution in Apache Dolphinscheduler.CVE-2024-43202 · Websites & servers · Apache Software Foundation · reported by security@apache.orgCritical 9.8
Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.
- Product
- Apache DolphinScheduler
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.apache.org
Aug 20, 2024Chatbot with ChatGPT: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2024-6847 · WordPress plugins & themes · reported by WPScanCritical 9.8
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot.
- Product
- Chatbot with ChatGPT
- Fixed in
- 2.4.5
- What to do
- Update Chatbot with ChatGPT to 2.4.5 or newer.
Aug 20, 2024Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder: Arbitrary file read and deletionCVE-2024-7777 · WordPress plugins & themes · reported by WordfenceCritical 9
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in multiple functions in versions 2.0 to 2.13.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
- Product
- Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder
- Affected
- 2.0 to 2.13.9
- What to do
- Affects 2.0 to 2.13.9. Update Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Aug 19, 2024GiveWP – Donation Plugin and Fundraising Platform: PHP Object InjectionCVE-2024-5932 · WordPress plugins & themes · reported by WordfenceCritical 10
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.
- Product
- GiveWP – Donation Plugin and Fundraising Platform
- Affected
- up to 3.14.1
- What to do
- Affects up to 3.14.1. Update GiveWP – Donation Plugin and Fundraising Platform to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Aug 19, 2024myCred: Deserialization of Untrusted DataCVE-2024-43354 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.
- Product
- myCred
- Affected
- up to 2.7.2
- What to do
- Affects up to 2.7.2. Update myCred to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024Login As Users: Improper Privilege ManagementCVE-2024-43311 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2.
- Product
- Login As Users
- Affected
- up to 1.4.2
- What to do
- Affects up to 1.4.2. Update Login As Users to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/httpd.CVE-2024-42815 · Network & remote access · tp-link · reported by MITRECritical 9.8
In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/httpd. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
- Product
- re365
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comsecurityonline.info
Aug 19, 2024In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi.CVE-2024-42813 · Other software · trendnet · reported by MITRECritical 9.8
In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
- Product
- tew-752dru_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2024In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi.CVE-2024-42812 · Other software · dlink · reported by MITRECritical 9.8
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
- Product
- dir-860l_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comdlink.com
Aug 19, 2024Compute Links: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2024-43261 · WordPress plugins & themes · reported by PatchstackCritical 9.6
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hamed Naderfar Compute Links allows PHP Remote File Inclusion.This issue affects Compute Links: from n/a through 1.2.1.
- Product
- Compute Links
- Affected
- up to 1.2.1
- What to do
- Affects up to 1.2.1. Update Compute Links to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024Crew HRM: Deserialization of Untrusted DataCVE-2024-43252 · WordPress plugins & themes · reported by PatchstackCritical 9
Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through <= 1.1.1.
- Product
- Crew HRM
- Affected
- up to 1.1.1
- What to do
- Affects up to 1.1.1. Update Crew HRM to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024Bit Form Pro: Unrestricted Upload of File with Dangerous TypeCVE-2024-43249 · WordPress plugins & themes · reported by PatchstackCritical 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.
- Product
- Bit Form Pro
- Affected
- up to 2.6.4
- What to do
- Affects up to 2.6.4. Update Bit Form Pro to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024JobSearch: Improper Privilege ManagementCVE-2024-43245 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4.
- Product
- JobSearch
- Affected
- up to 2.3.4
- What to do
- Affects up to 2.3.4. Update JobSearch to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024Ultimate Membership Pro: Deserialization of Untrusted DataCVE-2024-43242 · WordPress plugins & themes · reported by PatchstackCritical 9
Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.
- Product
- Ultimate Membership Pro
- Affected
- up to 12.7
- What to do
- Affects up to 12.7. Update Ultimate Membership Pro to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 19, 2024XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2024-43401 · Other software · xwiki · reported by GitHubCritical 9
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user with elevated rights is not warned beforehand that they are going to edit possibly dangerous content. The payload is executed at edit time. This vulnerability has been patched in XWiki 15.10RC1.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comjira.xwiki.org
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.