Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,876 results · page 322 of 778
Jul 10, 2024An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices.CVE-2024-25077 · Other software · renesas · reported by MITRECritical 9.8
An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-fly decryption of flash images is stored in an unsigned header, allowing its value to be modified without invalidating the signature used for secureboot image verification. Because the encryption engine for on-the-fly decryption uses AES in CTR mode without authentication, an attacker-modified Nonce can result in execution of arbitrary code.
- Product
- smartbond_da14695
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2024Sensitive information disclosure in NetScaler ConsoleCVE-2024-6235 · Other software · NetScaler · reported by secure@citrix.comCritical 9.4
Sensitive information disclosure in NetScaler Console
- Product
- NetScaler Console
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.citrix.comsupport.citrix.com
Jul 10, 2024Palo Alto Networks Expedition Missing Authentication VulnerabilityCVE-2024-5910 · Network & remote access · Palo Alto Networks · reported by psirt@paloaltonetworks.comExploitedCritical 9.3
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.
- Product
- Expedition
- On CISA’s list since
- Nov 7, 2024 (federal fix deadline Nov 28, 2024)
- What to do
- Attackers are using this now. Install Palo Alto Networks’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogsecurity.paloaltonetworks.comsecurity.paloaltonetworks.com
Jul 10, 202414Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function.CVE-2024-37770 · Other software · b1ackc4t · reported by MITRECritical 9.1
14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.
- Product
- 14finger
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2024WishList Member X: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-37113 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
- Product
- WishList Member X
- Fixed in
- 3.26.7
- What to do
- Update WishList Member X to 3.26.7 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 10, 2024ServiceNow Incomplete List of Disallowed Inputs VulnerabilityCVE-2024-5217 · Other software · ServiceNow · reported by psirt@servicenow.comExploitedCritical 9.2
ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.
- Product
- Utah, Vancouver, and Washington DC Now Platform
- On CISA’s list since
- Jul 29, 2024 (federal fix deadline Aug 19, 2024)
- What to do
- Attackers are using this now. Install ServiceNow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogsupport.servicenow.comsupport.servicenow.com
Jul 10, 2024ServiceNow Improper Input Validation VulnerabilityCVE-2024-4879 · Other software · ServiceNow · reported by psirt@servicenow.comExploitedCritical 9.3
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.
- Product
- Utah, Vancouver, and Washington DC Now Platform
- On CISA’s list since
- Jul 29, 2024 (federal fix deadline Aug 19, 2024)
- What to do
- Attackers are using this now. Install ServiceNow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogsupport.servicenow.comsupport.servicenow.com
Jul 10, 2024An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.CVE-2024-6422 · Other software · Pepperl+Fuchs · reported by info@cert.vde.comCritical 9.8
An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.
- Product
- OIT1500-F113-B12-CB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Jul 9, 2024Fujian Kelixun <=7.6.6.4391 is vulnerable to SQL Injection in send_event.php.CVE-2024-39071 · Other software · fujiankelixun · reported by MITRECritical 9.8
Fujian Kelixun <=7.6.6.4391 is vulnerable to SQL Injection in send_event.php.
- Product
- command_and_dispatch_platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgist.github.com
Jul 9, 2024SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commCVE-2024-37870 · Other software · itsourcecode · reported by MITRECritical 9.8
SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.
- Product
- learning_management_system_project_in_php
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0.CVE-2023-48194 · Network & remote access · tenda · reported by MITRECritical 9.8
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
- Product
- ac8_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comtenda.com.cn
Jul 9, 2024Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statementCVE-2024-39171 · Websites & servers · phpvibe · reported by MITRECritical 9.8
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
- Product
- phpvibe
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Microsoft Defender for IoT Elevation of Privilege VulnerabilityCVE-2024-38089 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.1
Microsoft Defender for IoT Elevation of Privilege Vulnerability
- Product
- Microsoft Defender for IoT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38077 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38076 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38074 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.CVE-2024-36526 · Other software · zkteco · reported by MITRECritical 9.8
ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.
- Product
- zkbio_cvsecurity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies.CVE-2024-6611 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgCritical 9.8
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgmozilla.org
Jul 9, 2024A mismatch between allocator and deallocator could have led to memory corruption.CVE-2024-6602 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgCritical 9.8
A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgmozilla.org
Jul 9, 2024SQL Injection vulnerability in parameter "w" in file "druk.php" in MegaBIP software allows unauthorized attacker to disclose the contents of the database and obCVE-2024-6527 · Other software · Jan Syski · reported by cvd@cert.plCritical 9.3
SQL Injection vulnerability in parameter "w" in file "druk.php" in MegaBIP software allows unauthorized attacker to disclose the contents of the database and obtain administrator's token to modify the content of pages. This issue affects MegaBIP software versions through 5.13.
- Product
- MegaBIP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-CVE-2024-3596 · Other software · IETF · reported by cret@cert.orgCritical 9
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
- Product
- RFC
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comcert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39872 · Other software · Siemens · reported by productcert@siemens.comCritical 9.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
- Product
- SINEMA Remote Connect Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Jul 9, 2024Newspack Blocks: Unrestricted Upload of File with Dangerous TypeCVE-2024-37424 · WordPress plugins & themes · reported by PatchstackCritical 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8.
- Product
- Newspack Blocks
- Affected
- up to 3.0.8
- What to do
- Affects up to 3.0.8. Update Newspack Blocks to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 9, 2024Zita Elementor Site Library: Unrestricted Upload of File with Dangerous TypeCVE-2024-37420 · WordPress plugins & themes · reported by PatchstackCritical 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in WPZita Zita Elementor Site Library allows Upload a Web Shell to a Web Server.This issue affects Zita Elementor Site Library: from n/a through 1.6.1.
- Product
- Zita Elementor Site Library
- Affected
- up to 1.6.1
- What to do
- Affects up to 1.6.1. Update Zita Elementor Site Library to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 9, 2024Church Admin: Unrestricted Upload of File with Dangerous TypeCVE-2024-37418 · WordPress plugins & themes · reported by PatchstackCritical 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.
- Product
- Church Admin
- Affected
- up to 4.4.6
- What to do
- Affects up to 4.4.6. Update Church Admin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 9, 2024A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system.CVE-2023-3287 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including adminCVE-2023-38055 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.6
A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including admin). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer).CVE-2023-38054 · Other software · alextselegidis · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (including admCVE-2023-38053 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (including admin). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin).CVE-2023-38052 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary).CVE-2023-38051 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin).CVE-2023-38050 · Other software · Easyappointments · reported by psirt@paloaltonetworks.comCritical 9.1
A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin). This results in unauthorized access and unauthorized data manipulation.
- Product
- Easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any user (incluCVE-2023-38049 · Other software · alextselegidis · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any user (including admin). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider).CVE-2023-38048 · Other software · easyappointments · reported by psirt@paloaltonetworks.comCritical 9.9
A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This results in unauthorized access and unauthorized data manipulation.
- Product
- easyappointments
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024OSM – OpenStreetMap: SQL InjectionCVE-2024-3604 · WordPress plugins & themes · reported by WordfenceCritical 9.9
The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'osm_map_v3' shortcode in all versions up to, and including, 6.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- OSM – OpenStreetMap
- Affected
- up to 6.0.3
- What to do
- Affects up to 6.0.3. Update OSM – OpenStreetMap to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordpress.org
Jul 9, 2024WishList Member X: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-37112 · WordPress plugins & themes · reported by PatchstackCritical 10
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
- Product
- WishList Member X
- Fixed in
- 3.26.7
- What to do
- Update WishList Member X to 3.26.7 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 9, 2024IQ Testimonials: Arbitrary file uploadsCVE-2024-6314 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process_image_upload' function in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This can only be exploited if the 'gd' php extension is not loaded on the server.
- Product
- IQ Testimonials
- Affected
- up to 2.2.7
- What to do
- Affects up to 2.2.7. Update IQ Testimonials to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Jul 9, 2024Gutenberg Forms: Arbitrary file uploadsCVE-2024-6313 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Gutenberg Forms plugin for WordPress is vulnerable to arbitrary file uploads due to the users can specify the allowed file types in the 'upload' function in versions up to, and including, 2.2.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
- Product
- Gutenberg Forms
- Affected
- up to 2.2.9
- What to do
- Affects up to 2.2.9. Update Gutenberg Forms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Jul 9, 2024Generate PDF using Contact Form 7: Unrestricted Upload of File with Dangerous TypeCVE-2024-37555 · WordPress plugins & themes · reported by PatchstackCritical 9.1
Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7.This issue affects Generate PDF using Contact Form 7: from n/a through <= 4.1.2.
- Product
- Generate PDF using Contact Form 7
- Affected
- up to 4.1.2
- What to do
- Affects up to 4.1.2. Update Generate PDF using Contact Form 7 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 9, 2024An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.CVE-2024-28751 · Other software · ifm · reported by info@cert.vde.comCritical 9.1
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.
- Product
- Smart PLC AC14xx Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Jul 9, 2024An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.CVE-2024-28747 · Other software · ifm · reported by info@cert.vde.comCritical 9.8
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.
- Product
- Smart PLC AC14xx Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Jul 9, 2024SEOPress: Does not properly protect some of its REST API routesCVE-2024-5488 · WordPress plugins & themes · reported by WPScanCritical 9.8
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.
- Product
- SEOPress
- Fixed in
- 7.9
- What to do
- Update SEOPress to 7.9 or newer.
Jul 9, 2024Product Table by WBW: Remote Code ExecutionCVE-2024-6365 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'saveCustomTitle' function. This is due to missing authorization and lack of sanitization of appended data in the languages/customTitle.php file. This makes it possible for unauthenticated attackers to execute code on the server.
- Product
- Product Table by WBW
- Affected
- up to 2.0.1
- What to do
- Affects up to 2.0.1. Update Product Table by WBW to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Jul 8, 2024tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory CVE-2024-1305 · Other software · OpenVPN · reported by security@openvpn.netCritical 9.8
tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space
- Product
- tap-windows6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.openvpn.netmail-archive.com
Jul 8, 2024A hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623.CVE-2023-46685 · Other software · LevelOne · reported by talos-cna@cisco.comCritical 9.8
A hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623. A set of specially crafted network packets can lead to arbitrary command execution.
- Product
- WBR-6013
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Jul 8, 2024OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can bCVE-2024-27903 · Other software · OpenVPN · reported by security@openvpn.netCritical 9.8
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
- Product
- OpenVPN 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.openvpn.netopenvpn.net
Jul 7, 2024EGroupware before 23.1.20240624 mishandles an ORDER BY clause.CVE-2024-40614 · Other software · Egroupware · reported by MITRECritical 9.8
EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajax_get_rows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting.
- Product
- Egroupware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2024An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt componCVE-2024-27712 · Other software · Eskooly · reported by MITRECritical 9.8
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism.
- Product
- Eskooly
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.be-hacktive.comblog.be-hacktive.com
Jul 5, 2024An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.CVE-2024-27710 · Other software · eskooly · reported by MITRECritical 9.8
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.
- Product
- free_online_school_management_software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.be-hacktive.comblog.be-hacktive.com
Jul 5, 2024SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php coCVE-2024-27709 · Other software · eskooly · reported by MITRECritical 9.8
SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component.
- Product
- web_product
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.be-hacktive.comblog.be-hacktive.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.