Week 22, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.6
  CVE-2024-29824 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 100%
• Critical 9.6
  CVE-2024-29825 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 100%
• Critical 9.6
  CVE-2024-29826 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 100%
• Critical 9.6
  CVE-2024-29823 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 100%
• Critical 9.8
  CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE

  rejetto · HTTP File Server

  EPSS 99%
• Critical 9.8
  CVE-2024-4358 Registration Authentication Bypass Vulnerability

  Progress Software · Telerik Report Server

  EPSS 97%
• Critical 9.6
  CVE-2024-29827 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 72%
• Critical 9.6
  CVE-2024-29822 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execut…

  ivanti · EPM

  EPSS 64%
• Critical 9.8
  CVE-2024-34854 F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
  EPSS 13%
• Critical 9.0
  CVE-2024-3300 Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

  Dassault Systèmes · DELMIA Apriso

  EPSS 2.9%
• Critical 9.8
  CVE-2024-35324 Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.
  EPSS 2.1%
• Critical 9.8
  CVE-2024-21785 A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of…

  Automation Direct · P3-550E

  EPSS 1.5%
• Critical 9.8
  CVE-2024-36886 tipc: fix UAF in error path

  Linux · Linux

  EPSS 1.3%
• Critical 9.8
  CVE-2024-32850 Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver. 4.2.2 and earlier and Sky…

  Seiko Solutions · SkyBridge MB-A100/MB-A110 · SkyBridge BASIC MB-A130

  EPSS 1.2%
• Critical 9.8
  CVE-2024-24962 A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A spec…

  Automation Direct · P3-550E

  EPSS 1.2%

All 74 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2024-24919 Information disclosure

  Check Point · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network

  EPSS 100%
• High 8.8
  CVE-2024-37032 Ollama does not validate the format of the digest (sha256 with 64 hex digits)
  EPSS 90%
• High 7.2
  CVE-2024-29848 An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary comma…

  ivanti · Avalanche

  EPSS 64%
• High 8.7
  CVE-2024-5411 Command Injection

  ORing · IAP-420

  EPSS 23%
• High 8.1
  CVE-2024-5565 Prompt Injection in "ask" API with visualization leads to RCE
  EPSS 15%
• High 8.8
  CVE-2024-35397 TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.…
  EPSS 15%
• High 8.3
  CVE-2024-5410 Stored Cross-Site Scripting

  ORing · IAP-420

  EPSS 14%
• High 8.4
  CVE-2024-29830 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute …

  ivanti · EPM

  EPSS 8.5%