Week 9, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-1698 NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

  wpdevteam · NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar

  EPSS 77%
• Critical 9.1
  CVE-2024-25065 Apache OFBiz: Path traversal allowing authentication bypass.

  Apache Software Foundation · Apache OFBiz

  EPSS 48%
• Critical 9.8
  CVE-2024-24401 SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php compone…
  EPSS 46%
• Critical 9.8
  CVE-2024-25830 F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can explo…
  EPSS 24%
• Critical 9.8
  CVE-2024-27747 File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image paramet…
  EPSS 24%
• Critical 9.8
  CVE-2024-27746 SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address par…
  EPSS 13%
• Critical 9.8
  CVE-2024-24402 An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component.
  EPSS 3.4%
• Critical 10.0
  CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

  Progress Software · OpenEdge

  EPSS 3.3%
• Critical 9.8
  CVE-2024-25833 F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in…
  EPSS 2.8%
• Critical 9.4
  CVE-2024-1624 OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer

  Dassault Systèmes · Documentation server

  EPSS 2.1%
• Critical 9.8
  CVE-2024-22891 Nteract Remote Code Execution vulnerability
  EPSS 1.7%
• Critical 9.8
  CVE-2024-25291 Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.
  EPSS 1.6%
• Critical 9.6
  CVE-2024-25292 Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
  EPSS 1.5%
• Critical 9.8
  CVE-2024-27516 livehelperchat Server-Side Template Injection
  EPSS 1.5%
• Critical 9.1
  CVE-2024-27905 Apache Aurora: padding oracle can allow construction an authentication cookie

  Apache Software Foundation · Apache Aurora

  EPSS 1.5%

All 80 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2024-0692 SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

  SolarWinds · Security Event Manager

  EPSS 92%
• Medium 5.3
  CVE-2024-20328 ClamAV VirusEvent File Processing Command Injection Vulnerability

  Cisco · ClamAV

  EPSS 85%
• High 8.8
  CVE-2024-25723 ZenML Server Remote Privilege Escalation Vulnerability
  EPSS 71%
• High 7.5
  CVE-2024-27292 Docassemble unauthorized access through URL manipulation

  jhpyle · docassemble

  EPSS 69%
• Medium 5.3
  CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)

  rack · rack

  EPSS 35%
• High 8.8
  CVE-2024-27497 Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.
  EPSS 27%
• High 7.5
  CVE-2024-27356 An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. Th…
  EPSS 24%
• High 8.8
  CVE-2024-25869 An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload …
  EPSS 19%