Week 10, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

  JetBrains · TeamCity

  EPSS 100%
• Critical 9.8
  CVE-2024-2054 Artica Proxy Unauthenticated PHP Deserialization Vulnerability

  Artica Tech · Artica Proxy

  EPSS 81%
• Critical 9.9
  CVE-2024-2044 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

  pgadmin.org · pgAdmin 4

  EPSS 79%
• Critical 9.8
  CVE-2024-20017 In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executio…

  MediaTek · MT6890, MT7915, MT7916, MT7981, MT7986

  EPSS 47%
• Critical 9.8
  CVE-2024-21899 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 24%
• Critical 9.8
  CVE-2024-2056 Artica Proxy Loopback Services Remotely Accessible Unauthenticated

  Artica Tech · Artica Proxy

  EPSS 17%
• Critical 9.8
  CVE-2023-38944 An issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01.10_pt allows attackers to bypass the access control and gain co…
  EPSS 16%
• Critical 9.3
  CVE-2024-22252 Use-after-free vulnerability
  EPSS 3.5%
• Critical 9.8
  CVE-2024-22857 Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto MAXLEN_CF…
  EPSS 1.7%
• Critical 9.4
  CVE-2024-0917 PaddlePaddle vulnerable to remote code execution

  PaddlePaddle · paddlepaddle/paddle

  EPSS 1.7%
• Critical 9.8
  CVE-2024-27307 JSONata expression can pollute the "Object" prototype

  jsonata-js · jsonata

  EPSS 1.4%
• Critical 9.8
  CVE-2024-23286 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte…

  Apple · macOS · iOS and iPadOS · watchOS

  EPSS 1.2%
• Critical 9.1
  CVE-2024-26580 Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability

  Apache Software Foundation · Apache InLong

  EPSS 1.2%
• Critical 9.8
  CVE-2024-28213 nGrinder vulnerable to unsafe Java objects deserialization

  NAVER · nGrinder

  EPSS 1.2%
• Critical 9.3
  CVE-2024-0817 PaddlePaddle command injection vulnerability

  PaddlePaddle · paddlepaddle/paddle

  EPSS 1.2%

All 60 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.3
  CVE-2024-27199 In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

  JetBrains · TeamCity

  EPSS 100%
• Medium 5.4
  CVE-2024-28156 Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

  Jenkins Project · Jenkins Build Monitor View Plugin

  EPSS 79%
• High 8.6
  CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

  squid-cache · squid

  EPSS 65%
• High 7.5
  CVE-2024-2053 Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

  Artica Tech · Artica Proxy

  EPSS 45%
• Medium 5.8
  CVE-2024-27564 pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy of picturepro…

  dirk1983 · mm1.ltd source code

  EPSS 41%
• High 8.2
  CVE-2024-20337 A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line fee…

  Cisco · Cisco Secure Client

  EPSS 30%
• High 7.2
  CVE-2023-48725 A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially cr…

  NETGEAR · RAX30

  EPSS 19%
• Medium 4.7
  CVE-2024-21901 myQNAPcloud

  QNAP Systems · QTS · myQNAPcloud

  EPSS 19%