Archive

13 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /13 September 2024 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Critical 9.8

CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

ivanti vTM Network devices

Aug 13, 2024
KEV Sep 24, 2024
High 8.8

CVE-2024-38144 Public exploit EPSS 32%

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
Medium 4.2

CVE-2024-38143 Public exploit

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
High 7.8

CVE-2024-38127 Public exploit

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
Critical 9.8

CVE-2024-38063 Public exploit EPSS 74%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
High 7.8

CVE-2024-38193 Exploited Public exploit EPSS 29%

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
KEV Aug 13, 2024
Critical 10.0

CVE-2024-43160 Public exploit Scanner template

WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6.

BerqWP BerqWP

Aug 13, 2024
Critical 9.8

CVE-2024-7094 Public exploit EPSS 38%

JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitizati…

rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS

Aug 13, 2024