Week 16, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.1
  CVE-2023-39367 An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP req…

  Peplink · Smart Reader

  EPSS 38%
• Critical 9.9
  CVE-2024-2083 Directory Traversal in zenml-io/zenml

  zenml-io · zenml-io/zenml

  EPSS 37%
• Critical 9.8
  CVE-2024-24996 A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary co…

  ivanti · Avalanche

  EPSS 32%
• Critical 9.1
  CVE-2024-29021 SSRF into Sandbox Escape through Unsafe Default Configuration

  judge0 · judge0

  EPSS 20%
• Critical 9.8
  CVE-2024-31750 SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.
  EPSS 19%
• Critical 10.0
  CVE-2024-28189 Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link

  judge0 · judge0

  EPSS 7.2%
• Critical 10.0
  CVE-2024-28185 Judge0 vulnerable to Sandbox Escape via Symbolic Link

  judge0 · judge0

  EPSS 7.1%
• Critical 9.8
  CVE-2024-29204 A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary co…

  ivanti · Avalanche

  EPSS 4.3%
• Critical 9.1
  CVE-2024-32022 Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

  bmaltais · kohya_ss

  EPSS 3.1%
• Critical 9.1
  CVE-2024-32027 Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)

  bmaltais · kohya_ss

  EPSS 3%
• Critical 9.1
  CVE-2024-32026 Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)

  bmaltais · kohya_ss

  EPSS 3%
• Critical 9.8
  CVE-2024-3271 Command Injection in run-llama/llama_index

  run-llama · run-llama/llama_index

  EPSS 2.9%
• Critical 9.1
  CVE-2024-32025 Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)

  bmaltais · kohya_ss

  EPSS 2.5%
• Critical 9.8
  CVE-2024-3660 Arbitrary code injection vulnerability in Keras framework < 2.13

  TensorFlow · keras

  EPSS 1.7%
• Critical 9.3
  CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

  Realtyna · Realtyna Organic IDX plugin

  EPSS 1.7%

All 67 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.3
  CVE-2024-2961 The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the I…

  The GNU C Library · glibc

  EPSS 88%
• High 8.8
  CVE-2024-24992 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

  ivanti · Avalanche

  EPSS 71%
• High 8.8
  CVE-2024-24994 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

  ivanti · Avalanche

  EPSS 68%
• High 8.8
  CVE-2024-23535 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

  ivanti · Avalanche

  EPSS 68%
• High 8.3
  CVE-2023-40000 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

  LiteSpeed Technologies · LiteSpeed Cache

  EPSS 55%
• High 8.8
  CVE-2023-50260 Wazuh's vulnerability in host_deny AR script allows arbitrary command execution

  wazuh · wazuh

  EPSS 41%
• High 7.5
  CVE-2024-1601 SQL Injection in parisneo/lollms-webui

  parisneo · parisneo/lollms-webui

  EPSS 40%
• High 8.8
  CVE-2024-3833 Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML …

  Google · Chrome

  EPSS 18%