Week 23, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-4577 Argument Injection in PHP-CGI

  PHP Group · PHP

  EPSS 100%
• Critical 10.0
  CVE-2024-25600 WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

  Codeer · Bricks Builder

  EPSS 91%
• Critical 9.8
  CVE-2024-29972 ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17…

  Zyxel · NAS326 firmware · NAS542 firmware

  EPSS 90%
• Critical 9.1
  CVE-2024-36104 Apache OFBiz: Path traversal leading to a RCE

  Apache Software Foundation · Apache OFBiz

  EPSS 88%
• Critical 9.8
  CVE-2024-29973 ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and …

  Zyxel · NAS326 firmware · NAS542 firmware

  EPSS 86%
• Critical 9.8
  CVE-2024-3408 Authentication Bypass and RCE in man-group/dtale

  man-group · man-group/dtale

  EPSS 78%
• Critical 9.8
  CVE-2024-4320 Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

  parisneo · parisneo/lollms-webui

  EPSS 34%
• Critical 9.8
  CVE-2024-3429 Path Traversal in parisneo/lollms

  parisneo · parisneo/lollms

  EPSS 28%
• Critical 9.8
  CVE-2024-5452 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning

  Lightning-AI · lightning-ai/pytorch-lightning

  EPSS 27%
• Critical 9.8
  CVE-2024-29974 ** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZ…

  Zyxel · NAS326 firmware · NAS542 firmware

  EPSS 23%
• Critical 9.8
  CVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

  Icegram · Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

  EPSS 10%
• Critical 9.8
  CVE-2024-30163 Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryVi…
  EPSS 8.7%
• Critical 9.8
  CVE-2024-34832 Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node pa…
  EPSS 5%
• Critical 9.8
  CVE-2024-3234 Path Traversal in gaizhenbiao/chuanhuchatgpt

  gaizhenbiao · gaizhenbiao/chuanhuchatgpt

  EPSS 3.8%
• Critical 9.8
  CVE-2024-4620 ArForms < 6.6 - Unauthenticated RCE
  EPSS 3.3%

All 86 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2024-28995 SolarWinds Serv-U L Directory Transversal Vulnerability

  SolarWinds · SolarWinds Serv-U

  EPSS 100%
• Medium 6.1
  CVE-2024-37383 Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.
  EPSS 74%
• High 8.8
  CVE-2024-5505 NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability

  NETGEAR · ProSAFE Network Management System

  EPSS 47%
• High 8.6
  CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio

  gradio-app · gradio-app/gradio

  EPSS 37%
• High 7.7
  CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

  PHP Group · PHP

  EPSS 29%
• High 7.2
  CVE-2024-20404 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected…

  Cisco · Cisco Unified Contact Center Express · Cisco Unified Contact Center Enterprise · Cisco Packaged Contact Center Enterprise

  EPSS 23%
• High 7.5
  CVE-2024-2928 Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

  MLflow · mlflow/mlflow

  EPSS 22%
• Medium 6.4
  CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability

  SolarWinds · SolarWinds Platform

  EPSS 14%