Week 17, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP

  CrushFTP · CrushFTP

  EPSS 100%
• Critical 9.8
  CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin

  Apache Software Foundation · Apache HugeGraph-Server

  EPSS 99%
• Critical 10.0
  CVE-2024-32651 Server Side Template Injection in Jinja2 allows Remote Command Execution

  dgtlmoon · changedetection.io

  EPSS 85%
• Critical 9.8
  CVE-2024-32238 H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login …
  EPSS 53%
• Critical 9.8
  CVE-2024-33344 D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary co…
  EPSS 20%
• Critical 9.3
  CVE-2024-32709 WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability

  Plechev Andrey · WP-Recall

  EPSS 5.8%
• Critical 9.8
  CVE-2024-32459 FreeRDP Out-Of-Bounds Read in ncrush_decompress

  FreeRDP · FreeRDP

  EPSS 3.7%
• Critical 10.0
  CVE-2024-32766 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 2.3%
• Critical 9.8
  CVE-2024-32039 FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

  FreeRDP · FreeRDP

  EPSS 2.3%
• Critical 9.8
  CVE-2024-32458 FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

  FreeRDP · FreeRDP

  EPSS 1.9%
• Critical 9.8
  CVE-2024-32041 FreeRDP OutOfBound Read in zgfx_decompress_segment

  FreeRDP · FreeRDP

  EPSS 1.9%
• Critical 9.8
  CVE-2024-31666 An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.
  EPSS 1.7%
• Critical 9.8
  CVE-2024-3962 Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file

  themeisle · PPOM – Product Addons & Custom Fields for WooCommerce

  EPSS 1.4%
• Critical 9.8
  CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read

  FreeRDP · FreeRDP

  EPSS 1.4%
• Critical 9.1
  CVE-2024-32880 pyLoad allows upload to arbitrary folder lead to RCE

  pyload · pyload

  EPSS 1.4%

All 56 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2024-20353 A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co…

  Cisco · Cisco Firepower Threat Defense Software · Cisco Adaptive Security Appliance (ASA) Software

  EPSS 70%
• High 8.7
  CVE-2023-51364 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 40%
• High 8.7
  CVE-2023-51365 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 35%
• High 7.1
  CVE-2024-32479 LibreNMS's Improper Sanitization on Service template name leads to Stored XSS

  librenms · librenms

  EPSS 34%
• High 7.2
  CVE-2024-31077 Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative p…

  WPMU DEV · Forminator

  EPSS 30%
• High 8.7
  CVE-2024-20356 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Admini…

  Cisco · Cisco Unified Computing System E-Series Software (UCSE) · Cisco Unified Computing System (Standalone)

  EPSS 30%
• High 7.5
  CVE-2024-2829 Inefficient Regular Expression Complexity in GitLab

  GitLab · GitLab

  EPSS 26%
• High 8.5
  CVE-2024-2434 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

  GitLab · GitLab

  EPSS 23%