Week 8, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2024-1709 Authentication bypass using an alternate path or channel

  ConnectWise · ScreenConnect

  EPSS 100%
• Critical 10.0
  CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection

  Progress Software · LoadMaster

  EPSS 95%
• Critical 9.1
  CVE-2024-26594 ksmbd: validate mech token in session setup

  Linux · Linux

  EPSS 51%
• Critical 10.0
  CVE-2024-1651 Torrentpier 2.4.1 - RCE

  torrentpier · torrentpier

  EPSS 34%
• Critical 9.1
  CVE-2023-52442 ksmbd: validate session id and tree id in compound request

  Linux · Linux

  EPSS 30%
• Critical 9.8
  CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

  Linux · Linux

  EPSS 22%
• Critical 9.8
  CVE-2024-25850 Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter
  EPSS 19%
• Critical 9.8
  CVE-2024-1676 Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chr…

  Google · Chrome

  EPSS 18%
• Critical 10.0
  CVE-2024-1597 pgjdbc SQL Injection via line comment generation

  pgjdbc · pgjdbc

  EPSS 4.8%
• Critical 9.4
  CVE-2024-23346 pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

  materialsproject · pymatgen

  EPSS 3.8%
• Critical 9.1
  CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

  Apache Software Foundation · Apache Answer

  EPSS 2.5%
• Critical 9.8
  CVE-2023-49109 Remote Code Execution in Apache Dolphinscheduler

  Apache Software Foundation · Apache DolphinScheduler

  EPSS 2.3%
• Critical 9.8
  CVE-2023-24331 Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd paramet…
  EPSS 2.1%
• Critical 9.8
  CVE-2023-51653 Hertzbeat JMX JNDI RCE

  dromara · hertzbeat

  EPSS 2.1%
• Critical 9.8
  CVE-2024-1783 Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow

  Toto Link · LR1200GB

  EPSS 2%

All 75 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.4
  CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)

  ConnectWise · ScreenConnect

  EPSS 95%
• High 8.7
  CVE-2024-1451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

  GitLab · GitLab

  EPSS 51%
• Medium 6.5
  CVE-2024-21726 [20240205] - Core - Inadequate content filtering within the filter code

  Joomla! Project · Joomla! CMS

  EPSS 49%
• Medium 6.1
  CVE-2024-21725 [20240204] - Core - XSS in mail address outputs

  Joomla! Project · Joomla! CMS

  EPSS 27%
• Medium 6.3
  CVE-2024-1781 Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

  Toto Link · X6000R AX3000

  EPSS 15%
• High 8.8
  CVE-2024-1675 Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted H…

  Google · Chrome

  EPSS 11%
• High 8.8
  CVE-2024-1670 Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…

  Google · Chrome

  EPSS 9.3%
• High 7.5
  CVE-2024-1635 Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

  Red Hat · Red Hat Data Grid 8 · Red Hat JBoss Enterprise Application Platform 8 · Red Hat Build of Keycloak

  EPSS 4.6%