Week 25, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.1
  CVE-2012-6664 Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary…
  EPSS 30%
• Critical 9.8
  CVE-2024-37079 vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may…
  EPSS 22%
• Critical 9.8
  CVE-2024-37080 vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may…
  EPSS 12%
• Critical 9.8
  CVE-2024-6047 GeoVision EOL device - OS Command Injection

  GeoVision · GVLX 4 V3 · GVLX 4 V2 · GV_IPCAMD_GV_BX1500

  EPSS 10%
• Critical 9.8
  CVE-2014-5470 Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval …
  EPSS 10%
• Critical 10.0
  CVE-2024-3605 WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

  ThimPress · WP Hotel Booking

  EPSS 4.2%
• Critical 9.8
  CVE-2024-34833 Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker c…
  EPSS 2%
• Critical 9.8
  CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

  artbees · JupiterX Core

  EPSS 1.4%
• Critical 9.8
  CVE-2024-39331 In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-str…
  EPSS 1.3%
• Critical 9.8
  CVE-2024-5443 Remote Code Execution via Path Traversal in parisneo/lollms

  parisneo · parisneo/lollms

  EPSS 1.2%
• Critical 9.8
  CVE-2024-4098 Shariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion

  3uu · Shariff Wrapper

  EPSS 1%
• Critical 9.8
  CVE-2023-37057 An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism.
• Critical 9.8
  CVE-2024-6057 Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an …

  Devolutions · Remote Desktop Manager

• Critical 9.8
  CVE-2024-3229 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload

  wordpresschef · Salon Booking System – Free Version

• Critical 10.0
  CVE-2024-38558 net: openvswitch: fix overwriting ct original tuple for ICMPv6

  Linux · Linux

All 51 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.1
  CVE-2024-32030 Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI

  provectus · kafka-ui

  EPSS 51%
• High 7.5
  CVE-2024-5182 Path Traversal in mudler/localai

  mudler · mudler/localai

  EPSS 26%
• Medium 4.7
  CVE-2024-6269 Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection

  Ruijie · RG-UAC

  EPSS 21%
• High 7.4
  CVE-2024-21514 SQL injection in opencart
  EPSS 19%
• High 8.8
  CVE-2024-22263 Arbitrary File Write Vulnerability in Spring Cloud Data Flow

  Spring by VMware Tanzu · Spring Cloud Skipper

  EPSS 18%
• High 7.2
  CVE-2024-21518 Zip slip in opencart
  EPSS 14%
• High 7.3
  CVE-2023-40004 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins

  servmask · All-in-One WP Migration OneDrive Extension · All-in-One WP Migration Google Drive Extension · All-in-One WP Migration Box Extension

  EPSS 11%
• High 7.5
  CVE-2024-36680 In the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookConnect.php have a se…
  EPSS 10%