Week 27, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.1
  CVE-2024-38475 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

  Apache Software Foundation · Apache HTTP Server

  EPSS 100%
• Critical 9.8
  CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

  geoserver · geoserver

  EPSS 100%
• Critical 9.8
  CVE-2024-36404 GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions

  geotools · geotools

  EPSS 76%
• Critical 9.9
  CVE-2024-39931 Gogs allows deletion of internal files
  EPSS 53%
• Critical 9.8
  CVE-2024-38476 Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

  Apache Software Foundation · Apache HTTP Server

  EPSS 42%
• Critical 9.9
  CVE-2024-39943 rejetto HFS vulnerable to OS Command Execution by remote authenticated users
  EPSS 39%
• Critical 9.8
  CVE-2024-39309 ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

  parse-community · parse-server

  EPSS 20%
• Critical 10.0
  CVE-2024-6298 remote code execution

  ABB · ASPECT-Enterprise · MATRIX Series · NEXUS Series

  EPSS 19%
• Critical 10.0
  CVE-2024-38366 CoacoaPods trunk RCE in email verification system rfc-822

  CocoaPods · CocoaPods

  EPSS 18%
• Critical 10.0
  CVE-2024-6209 unauthorized file access

  ABB · ASPECT-Enterprise · MATRIX Series · NEXUS Series

  EPSS 17%
• Critical 9.9
  CVE-2024-39932 Gogs allows argument injection during the previewing of changes
  EPSS 16%
• Critical 9.3
  CVE-2024-38368 Trunk's 'Claim your pod' could be used to obtain un-used pods

  CocoaPods · CocoaPods

  EPSS 15%
• Critical 9.9
  CVE-2024-39930 Gogs has an argument Injection in the built-in SSH server
  EPSS 7.7%
• Critical 9.8
  CVE-2024-39844 In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.
  EPSS 3.9%
• Critical 9.8
  CVE-2024-38346 Apache CloudStack: Unauthenticated cluster service port leads to remote execution

  Apache Software Foundation · Apache CloudStack

  EPSS 3.3%

All 53 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.1
  CVE-2024-6387 Openssh: regresshion - race condition in ssh allows rce/dos

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7

  EPSS 100%
• High 7.5
  CVE-2024-38472 Apache HTTP Server on WIndows UNC SSRF

  Apache Software Foundation · Apache HTTP Server

  EPSS 69%
• Medium 5.4
  CVE-2024-39929 Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechani…
  EPSS 41%
• High 7.5
  CVE-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution

  Apache Software Foundation · Apache HTTP Server

  EPSS 35%
• Medium 6.3
  CVE-2024-29510 Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
  EPSS 28%
• High 8.1
  CVE-2024-32937 An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A special…

  Grandstream · GXP2135

  EPSS 27%
• High 8.1
  CVE-2024-38473 Apache HTTP Server proxy encoding problem

  Apache Software Foundation · Apache HTTP Server

  EPSS 26%
• High 7.5
  CVE-2024-36991 Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

  Splunk · Splunk Enterprise

  EPSS 13%