Week 41, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.2
  CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

  Palo Alto Networks · Expedition

  EPSS 100%
• Critical 9.9
  CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

  Palo Alto Networks · Expedition

  EPSS 99%
• Critical 9.8
  CVE-2024-9047 WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

  Nickboss · Iptanus File Upload

  EPSS 93%
• Critical 9.3
  CVE-2024-9464 Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

  Palo Alto Networks · Expedition

  EPSS 83%
• Critical 9.8
  CVE-2024-43468 Microsoft Configuration Manager Remote Code Execution Vulnerability

  Microsoft · Microsoft Configuration Manager

  EPSS 81%
• Critical 9.8
  CVE-2024-42640 angular-base64-upload vulnerable to unauthenticated remote code execution
  EPSS 40%
• Critical 9.5
  CVE-2024-9487 An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypasse…

  GitHub · Enterprise Server

  EPSS 26%
• Critical 9.8
  CVE-2024-9680 An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…

  Mozilla · Firefox · Thunderbird · Firefox ESR

  EPSS 23%
• Critical 9.8
  CVE-2024-9234 GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload

  Ataur R · GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

  EPSS 10%
• Critical 9.8
  CVE-2024-9707 Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

  ThemeHunk · Hunk Companion

  EPSS 9.1%
• Critical 9.8
  CVE-2024-21534 JSONPath Plus Remote Code Execution (RCE) Vulnerability
  EPSS 9%
• Critical 9.8
  CVE-2024-44349 A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username p…
  EPSS 5.8%
• Critical 9.8
  CVE-2024-8943 LatePoint <= 5.0.12 - Authentication Bypass

  latepoint · LatePoint Plugin

  EPSS 3.1%
• Critical 9.8
  CVE-2024-8911 LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

  latepoint · LatePoint Plugin

  EPSS 2.9%
• Critical 9.2
  CVE-2023-25581 Deserialization of untrusted data in InternalAttributeHandler in pac4j

  pac4j · pac4j

  EPSS 1.9%

All 62 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.3
  CVE-2024-9916 HuangDou UTCMS cli.php os command injection

  HuangDou · UTCMS

  EPSS 74%
• High 7.8
  CVE-2024-43572 Microsoft Management Console Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 67%
• High 7.2
  CVE-2024-9380 An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges …

  ivanti · CSA (Cloud Services Appliance)

  EPSS 58%
• High 7.5
  CVE-2024-47011 Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information

  ivanti · Avalanche

  EPSS 56%
• High 7.5
  CVE-2024-47008 Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.

  ivanti · Avalanche

  EPSS 47%
• Medium 6.5
  CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 46%
• Medium 6.5
  CVE-2024-9379 SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL sta…

  ivanti · CSA (Cloud Services Appliance)

  EPSS 44%
• High 7.3
  CVE-2024-43362 Stored Cross-site Scripting (XSS) when creating external links in Cacti

  Cacti · cacti

  EPSS 39%