Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
5,661 results · page 45 of 114
Oct 21, 2024A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browseCVE-2024-40746 · Other software · hikashop.com · reported by security@joomla.orgMedium 5.4
A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `description` parameter of any product. The `description `parameter is not sanitised in the backend.
- Product
- HikaShop component for Joomla
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 19, 2024A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1.CVE-2024-10141 · Other software · jsbroks · reported by VulDBMedium 6.3
A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
- Product
- COCO Annotator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 18, 2024Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability.CVE-2024-48016 · Other software · Dell · reported by security_alert@emc.comMedium 4.6
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account.
- Product
- Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43561 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43559 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43558 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43557 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43555 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43543 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43542 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43540 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43538 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43537 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Mobile Broadband Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43536 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43526 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43525 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43524 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43523 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024Information disclosure while sending implicit broadcast containing APP launch information.CVE-2024-38425 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.1
Information disclosure while sending implicit broadcast containing APP launch information.
- Product
- Snapdragon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 2024CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer tCVE-2024-47850 · Other software · cups · reported by MITREHigh 7.5
CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. (The request is meant to probe the new printer but can be used to create DDoS amplification attacks.)
- Product
- cups
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 3, 2024Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) alCVE-2024-7826 · Other software · Webroot · reported by security@opentext.comCritical 9.8
Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
- Product
- SecureAnywhere - Web Shield
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 3, 2024Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll moCVE-2024-7825 · Other software · Webroot · reported by security@opentext.comCritical 9.8
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
- Product
- SecureAnywhere - Web Shield
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 3, 2024Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll moCVE-2024-7824 · Other software · Webroot · reported by security@opentext.comCritical 9.8
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
- Product
- SecureAnywhere - Web Shield
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 3, 2024Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation withCVE-2024-9313 · Other software · Canonical Ltd. · reported by security@ubuntu.comHigh 8.8
Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.
- Product
- Authd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2024Broken Link Checker: Reflected Cross-Site ScriptingCVE-2024-8981 · WordPress plugins & themes · reported by WordfenceHigh 7.1
The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg in /app/admin-notices/features/class-view.php without appropriate escaping on the URL in all versions up to, and including, 2.4.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
- Product
- Broken Link Checker
- Affected
- up to 2.4.0
- What to do
- Affects up to 2.4.0. Update Broken Link Checker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Sep 30, 2024An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by otCVE-2024-46549 · Other software · tplink · reported by MITREHigh 7.6
An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.
- Product
- kasa_kp125m
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discoveriCVE-2024-47176 · Other software · OpenPrinting · reported by GitHubMedium 5.3
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
- Product
- cups-browsed
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages.CVE-2024-47129 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 5.3
The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
- Product
- Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message.CVE-2024-47128 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 5.3
The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.
- Product
- Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method.CVE-2024-47121 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 6
The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is captured over RF, and password is cracked via brute force attack, it is possible to decrypt it and use it to decrypt all future and past messages sent via encrypted broadcast with that particular key. This only applies when the key is broadcasted over RF. This is an optional feature, so it is recommended to use local QR encryption key sharing for additional security on this and previous versions.
- Product
- Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method.CVE-2024-45374 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 6
The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is captured over RF, and password is cracked via brute force attack, it is possible to decrypt it and use it to decrypt all future and past messages sent via encrypted broadcast with that particular key. This only applies when the key is broadcasted over RF. This is an optional feature, so it is advised to use local QR encryption key sharing for additional security on this and previous versions.
- Product
- Pro ATAK Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message.CVE-2024-41931 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 5.3
The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.
- Product
- Pro ATAK Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages.CVE-2024-41715 · Other software · goTenna · reported by ics-cert@hq.dhs.govMedium 5.3
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
- Product
- Pro ATAK Plugin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2024A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a cCVE-2024-46655 · Other software · ellevo · reported by MITREMedium 6.1
A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.
- Product
- ellevo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcsflabs.github.ioellevo.com
Sep 23, 2024A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript codeCVE-2023-46948 · Other software · temenos · reported by MITREMedium 5.4
A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components.
- Product
- t24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024Arc before 2024-08-26 allows remote code execution in JavaScript boosts.CVE-2024-45489 · Other software · the_browser_company · reported by MITRECritical 9.8
Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and runs arbitrary Javascript on that browser in a privileged context. NOTE: this is a no-action cloud vulnerability with zero affected users.
- Product
- arc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site.CVE-2024-8653 · Other software · NetCat · reported by vulnerability@kaspersky.comMedium 5.9
A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.
- Product
- NetCat CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site.CVE-2024-8652 · Other software · NetCat · reported by vulnerability@kaspersky.comMedium 5.9
A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.
- Product
- NetCat CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.CVE-2024-37406 · Other software · Brave · reported by support@hackerone.comHigh 7.5
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.
- Product
- Android Browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2024IMPress for IDX Broker: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-44047 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through <= 3.2.2.
- Product
- IMPress for IDX Broker
- Affected
- up to 3.2.2
- What to do
- Affects up to 3.2.2. Update IMPress for IDX Broker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Sep 17, 2024This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrCVE-2024-38380 · Other software · Millbeck Communications · reported by ics-cert@hq.dhs.govMedium 5.5
This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser session.
- Product
- Proroute H685t-w
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 13, 2024BT: Unchecked user input in bap_broadcast_assistantCVE-2024-5931 · Other software · zephyrproject-rtos · reported by vulnerabilities@zephyrproject.orgMedium 6.3
BT: Unchecked user input in bap_broadcast_assistant
- Product
- Zephyr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 13, 2024A broken access control vulnerability exists in the latest version of lunary-ai/lunary.CVE-2024-6582 · Other software · lunary-ai · reported by security@huntr.devMedium 4.3
A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known.
- Product
- lunary-ai/lunary
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacCVE-2024-8012 · Network & remote access · Ivanti · reported by 3c1d8aa1-5a33-4ea4-8992-aadd6440af75High 7.8
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
- Product
- Workspace Control
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injectiCVE-2024-44872 · Other software · mozilocms · reported by MITREMedium 6.1
A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
- Product
- mozilocms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability.CVE-2024-39583 · Other software · Dell · reported by security_alert@emc.comHigh 8.1
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- Product
- PowerScale InsightIQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accountsCVE-2024-6979 · Other software · Axis Communications AB · reported by product-security@axis.comMedium 6.8
Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more privileges than designed. The risk of exploitation is very low as it requires complex steps to execute, including knowing of account passwords and social engineering attacks in tricking the administrator to perform specific configurations on operator- and/or viewer-privileged accounts. Axis has released patched AXIS OS a version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
- Product
- AXIS OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 4, 2024In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Move per CPU pointer access into the atomic section The recent fix for makCVE-2024-44968 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Move per CPU pointer access into the atomic section The recent fix for making the take over of the broadcast timer more reliable retrieves a per CPU pointer in preemptible context. This went unnoticed as compilers hoist the access into the non-preemptible region where the pointer is actually used. But of course it's valid that the compiler keeps it at the place where the code puts it which rightfully triggers: BUG: using smp_processor_id() in preemptible [00000000] code: caller is hotplug_cpu__broadcast_tick_pull+0x1c/0xc0 Move it to the actual usage site which is in a non-preemptible region.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Sep 4, 2024Apache OFBiz Forced Browsing VulnerabilityCVE-2024-45195 · Websites & servers · Apache · reported by security@apache.orgExploitedHigh 7.5
Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.
- Product
- OFBiz
- On CISA’s list since
- Feb 4, 2025 (federal fix deadline Feb 25, 2025)
- What to do
- Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogissues.apache.orglists.apache.org
Sep 3, 2024Authenticator is a browser extension that generates two-step verification codes.CVE-2024-45394 · Other software · Authenticator-Extension · reported by GitHubHigh 8.8
Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVP_BytesToKey KDF. Therefore, attackers with a copy of a user's data are able to brute-force the user's encryption key. Users on version 8.0.0 and above are automatically migrated away from the weak encoding on first login. Users should destroy encrypted backups made with versions prior to 8.0.0.
- Product
- Authenticator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.