September 2024

6 results · Clear filters · Feed

• High 7.2
  CVE-2024-8957 Exploited EPSS 80%

  PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

  PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

  PTZOptics PT30X-SDI PT30X-NDI
  Sep 17, 2024

  KEV Nov 4, 2024
• High 7.5
  CVE-2024-38813 Exploited EPSS 17%

  Privilege escalation vulnerability

  The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

  Virtualization
  Sep 17, 2024

  KEV Nov 20, 2024
• High 7.2
  CVE-2024-8190 Exploited Public exploit EPSS 89%

  An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

  ivanti CSA (Cloud Services Appliance) Network devices
  Sep 10, 2024

  KEV Sep 13, 2024
• High 8.8
  CVE-2024-43461 Exploited EPSS 54%

  Windows MSHTML Platform Spoofing Vulnerability

  Windows MSHTML Platform Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 10, 2024

  KEV Sep 16, 2024
• High 7.3
  CVE-2024-38226 Exploited

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Microsoft Office LTSC 2021 Microsoft Office 2019 Microsoft Publisher 2016
  Sep 10, 2024

  KEV Sep 10, 2024
• High 7.8
  CVE-2024-38014 Exploited

  Windows Installer Elevation of Privilege Vulnerability

  Windows Installer Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 10, 2024

  KEV Sep 10, 2024