Week 1, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-49442 Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.
  EPSS 39%
• Critical 9.8
  CVE-2023-51784 Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager

  Apache Software Foundation · Apache InLong

  EPSS 1.6%
• Critical 9.8
  CVE-2024-22087 route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
  EPSS 1.6%
• Critical 9.8
  CVE-2024-22051 CommonMarker Integer Overflow Vulnerability
  EPSS 1.5%
• Critical 9.8
  CVE-2024-21623 Arbitrary Expression Injection in github workflow leads to Command execution & leaking secrets

  mehah · otclient

  EPSS 1.2%
• Critical 9.6
  CVE-2023-52314 Command injection in convert_shape_compare

  PaddlePaddle · PaddlePaddle

  EPSS 1.2%
• Critical 9.6
  CVE-2023-52311 Command injection in _wget_download

  PaddlePaddle · PaddlePaddle

  EPSS 1.2%
• Critical 9.6
  CVE-2023-52310 Command injection in get_online_pass_interval

  PaddlePaddle · PaddlePaddle

  EPSS 1.2%
• Critical 9.8
  CVE-2024-22086 handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution.
  EPSS 1.1%
• Critical 9.8
  CVE-2023-51277 nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds.
  EPSS 1.1%
• Critical 9.8
  CVE-2023-51812 Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList.
  EPSS 1.1%
• Critical 9.8
  CVE-2023-32874 In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio…

  MediaTek · MT2735, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT

  EPSS 1%
• Critical 9.8
  CVE-2023-46308 plotly.js prototype pollution vulnerability
• Critical 9.8
  CVE-2023-5877 affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
• Critical 9.8
  CVE-2023-46953 SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module.

All 52 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json
  EPSS 33%
• Medium 6.3
  CVE-2024-0265 SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

  SourceCodester · Clinic Queuing System

  EPSS 21%
• Medium 6.3
  CVE-2024-0195 spider-flow FunctionController.java FunctionService.saveFunction code injection
  EPSS 19%
• High 7.3
  CVE-2024-0264 SourceCodester Clinic Queuing System LoginRegistration.php authorization

  SourceCodester · Clinic Queuing System

  EPSS 18%
• High 8.8
  CVE-2023-50094 reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?u…
  EPSS 14%
• High 8.8
  CVE-2024-0223 Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…

  Google · Chrome

  EPSS 10%
• High 7.5
  CVE-2023-50991 Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp pa…
  EPSS 8.8%
• High 7.5
  CVE-2023-6421 Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
  EPSS 2.4%