Week 31, 2024

29 July – 4 August 2024

New CVEs: 791
Critical: 53
High: 268
Newly exploited: 4
Advisories: 205
Malicious pkgs: 48

Newly exploited 4

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Medium 6.8
CVE-2024-37085 KEV Jul 30, 2024 · ransomware VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESX…
EPSS 27%
Critical 9.8
CVE-2024-4879 KEV Jul 29, 2024 Jelly Template Injection Vulnerability in ServiceNow UI Macros
ServiceNow · Now Platform

EPSS 100%
Critical 9.8
CVE-2023-45249 KEV Jul 29, 2024 Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acroni…
Acronis · Acronis Cyber Infrastructure

EPSS 54%
Critical 9.8
CVE-2024-5217 KEV Jul 29, 2024 Incomplete Input Validation in GlideExpression Script
ServiceNow · Now Platform

EPSS 100%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2024-7314 anji-plus AJ-Report Authentication Bypass
anji-plus · AJ-Report

EPSS 52%
Critical 9.1
CVE-2024-6366 User Profile Builder < 3.11.8 - Unauthenticated Media Upload
EPSS 29%
Critical 9.8
CVE-2024-5765 WpStickyBar <= 2.1.0 - Unauthenticated SQLi
EPSS 27%
Critical 9.8
CVE-2024-7332 TOTOLINK CP450 Telnet Service product.ini hard-coded password
Toto Link · CP450

EPSS 21%
Critical 9.1
CVE-2024-5975 CZ Loan Management <= 1.1 - Unauthenticated SQLi
EPSS 2%
Critical 9.1
CVE-2024-41947 XWiki Platform XSS through conflict resolution
xwiki · xwiki-platform

EPSS 1.7%
Critical 9.8
CVE-2024-38887 An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to expand control ov…
EPSS 1.5%
Critical 9.1
CVE-2024-38529 Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Admidio · admidio

EPSS 1.2%
Critical 10.0
CVE-2024-37901 XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet
xwiki · xwiki-platform

EPSS 1.1%
Critical 9.8
CVE-2024-7257 YayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function
YayCommerce · YayExtra – WooCommerce Extra Product Options

EPSS 1%
Critical 9.8
CVE-2024-41040 net/sched: Fix UAF when resolving a clash
Linux · Linux

EPSS 1%
Critical 9.8
CVE-2024-38986 @75lb/deep-merge Prototype Pollution vulnerability
Critical 9.8
CVE-2024-40782 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.…
Apple · macOS · iOS and iPadOS · watchOS
Critical 9.8
CVE-2024-39012 ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitra…
Critical 9.8
CVE-2024-38984 Prototype Pollution in lukebond json-override 0.2.0 allows attackers to to execute arbitrary code or cause a Denial of Service (DoS) via the __proto__ property.

All 53 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 8.8
CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)
AVTECH · AVM1203 (IP Camera)

EPSS 43%
Medium 5.3
CVE-2024-7339 TVT DVR TD-2104TS-CL queryDevInfo information disclosure
TVT · DVR TD-2104TS-CL · Provision-ISR DVR SH-4050A5-5L(MM) · DVR TD-2108TS-HP

EPSS 32%
High 8.3
CVE-2024-6748 SQL Injection
ManageEngine · OpManager

EPSS 24%
High 8.8
CVE-2024-7297 Langflow Privilege Escalation
EPSS 21%
Medium 6.3
CVE-2024-7264 ASN.1 date parser overread
curl · curl

EPSS 20%
Medium 6.4
CVE-2024-37900 XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
xwiki · xwiki-platform

EPSS 16%
High 8.2
CVE-2024-6255 Path Traversal in gaizhenbiao/chuanhuchatgpt
gaizhenbiao · gaizhenbiao/chuanhuchatgpt

EPSS 14%
High 7.2
CVE-2024-38878 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (…
Siemens · Omnivise T3000 R8.2 SP4 · Omnivise T3000 R8.2 SP3 · Omnivise T3000 Application Server R9.2

EPSS 11%

Advisories

USN-6927-1 linux-gcp-5.15 vulnerabilities 161 CVEs
USN-6895-4 linux-oem-6.5 vulnerabilities 100 CVEs
SUSE-SU-2024:2722-1 Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) 15 CVEs
SUSE-SU-2024:2725-1 Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) 7 CVEs
ICSA-24-214-08 Vonets WiFi Bridges 7 CVEs
USN-6924-2 linux-aws, linux-aws-5.4 vulnerabilities 7 CVEs
USN-6924-1 linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities 7 CVEs
SUSE-SU-2024:2631-1 Security update for freerdp 5 CVEs
USN-6937-1 openssl vulnerabilities 4 CVEs
SUSE-SU-2024:2624-1 Security update for apache2 4 CVEs