Week 21, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-5084 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

  HashThemes · Hash Form – Drag & Drop Form Builder

  EPSS 51%
• Critical 9.8
  CVE-2024-29849 Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

  Veeam · Backup & Replication

  EPSS 39%
• Critical 9.1
  CVE-2024-5315 Multiple vulnerabilities in DOLIBARR's ERP CMS

  Dolibarr · ERP CMS

  EPSS 35%
• Critical 9.8
  CVE-2023-52755 ksmbd: fix slab out of bounds write in smb_inherit_dacl()

  Linux · Linux

  EPSS 28%
• Critical 9.8
  CVE-2024-4323 Fluent Bit Memory Corruption Vulnerability

  Fluent Bit · Fluent Bit

  EPSS 27%
• Critical 9.8
  CVE-2024-3495 Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection

  Trusty Plugins · Country State City Dropdown CF7

  EPSS 14%
• Critical 9.8
  CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter

  Strategy11 Team · Business Directory Plugin – Easy Listing Directories for WordPress

  EPSS 10%
• Critical 9.8
  CVE-2024-35387 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
  EPSS 6.1%
• Critical 9.8
  CVE-2024-35374 Mocodo vulnerable to SQL injection in `/web/generate.php`
  EPSS 2.8%
• Critical 10.0
  CVE-2024-4985 An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional e…

  GitHub · Enterprise Server

  EPSS 2.6%
• Critical 9.8
  CVE-2024-35339 Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.
  EPSS 1.8%
• Critical 9.1
  CVE-2024-4399 CAS <= 1.0.0 - Unauthenticated SSRF
  EPSS 1.8%
• Critical 9.1
  CVE-2024-31989 ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

  argoproj · Argo CD

  EPSS 1.5%
• Critical 9.1
  CVE-2024-35960 net/mlx5: Properly link new fs rules into the tree

  Linux · Linux

  EPSS 1.4%
• Critical 9.8
  CVE-2021-47548 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

  Linux · Linux

  EPSS 1.4%

All 72 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2024-21683 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Code Executio…

  Atlassian · Confluence Data Center

  EPSS 88%
• High 7.2
  CVE-2024-27130 QTS, QuTS hero

  QNAP Systems · QTS · QuTS hero

  EPSS 38%
• High 8.8
  CVE-2024-5246 NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability

  NETGEAR · ProSAFE Network Management System

  EPSS 31%
• High 8.4
  CVE-2024-4978 Malicious Code in Justice AV Solutions (JAVS) Viewer

  Justice AV Solutions · Viewer

  EPSS 27%
• High 8.8
  CVE-2024-5247 NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

  NETGEAR · ProSAFE Network Management System

  EPSS 27%
• Medium 4.7
  CVE-2024-5195 Arris VAP2500 diag_s.php command injection

  Arris · VAP2500

  EPSS 24%
• Medium 4.7
  CVE-2024-5196 Arris VAP2500 tools_command.php command injection

  Arris · VAP2500

  EPSS 24%
• Medium 5.3
  CVE-2024-5230 EnvaySoft FleetCart information disclosure

  EnvaySoft · FleetCart

  EPSS 19%