Archive

18 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /18 November 2024 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2024-37404 Public exploit EPSS 71%

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy S…

ivanti Connect Secure Policy Secure Network devices

Oct 18, 2024
Critical 9.9

CVE-2024-9264 Public exploit Scanner template EPSS 98%

Grafana SQL Expressions allow for remote code execution

The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulner…

Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Alpine Go

Oct 18, 2024