Week 42, 2024

14–20 October 2024

New CVEs: 778
Critical: 100
High: 287
Newly exploited: 4
Advisories: 347
Malicious pkgs: 690

Newly exploited 4

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2024-40711 KEV Oct 17, 2024 · ransomware A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
Veeam · Backup and Recovery

EPSS 90%
Critical 9.8
CVE-2024-9680 KEV Oct 15, 2024 · ransomware An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…
Mozilla · Firefox · Thunderbird · Firefox ESR

EPSS 23%
Critical 9.1
CVE-2024-28987 KEV Oct 15, 2024 SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds · Web Help Desk

EPSS 93%
High 7.0
CVE-2024-30088 KEV Oct 15, 2024 · ransomware Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 68%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.9
CVE-2024-9264 Grafana SQL Expressions allow for remote code execution
Grafana · Grafana

EPSS 98%
Critical 9.8
CVE-2024-45216 Apache Solr: Authentication bypass possible using a fake URL Path ending
Apache Software Foundation · Apache Solr

EPSS 93%
Critical 9.8
CVE-2024-44000 WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
LiteSpeed Technologies · LiteSpeed Cache

EPSS 82%
Critical 9.1
CVE-2024-37404 Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote au…
ivanti · Connect Secure · Policy Secure

EPSS 71%
Critical 9.1
CVE-2024-48914 Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
vendure-ecommerce · vendure

EPSS 60%
Critical 9.8
CVE-2016-15042 Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload
N-Media · Frontend File Manager Plugin · N-Media Post Front-end Form

EPSS 6.7%
Critical 9.8
CVE-2021-4449 ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

EPSS 5.4%
Critical 9.8
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability
ScienceLogic · SL1

EPSS 3.8%
Critical 9.8
CVE-2019-25213 Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
vasyltech · Advanced Access Manager – Access Governance for WordPress

EPSS 2.8%
Critical 9.8
CVE-2024-9486 VM images built with Image Builder and Proxmox provider use default credentials
Kubernetes · Image Builder

EPSS 2.2%
Critical 9.8
CVE-2023-26785 MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" state…
EPSS 2.2%
Critical 9.1
CVE-2023-48082 Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of A…
EPSS 1.5%
Critical 9.8
CVE-2024-45274 MB connect line/Helmholz: Remote code execution via confnet service
MB connect line · Helmholz · mbNET.mini · REX100

EPSS 1.5%
Critical 9.8
CVE-2024-49328 WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability
vivek2tamrakar · WP REST API FNS

EPSS 1.5%
Critical 9.8
CVE-2024-9634 GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution
stellarwp · GiveWP – Donation Plugin and Fundraising Platform

EPSS 1.4%

All 100 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.3
CVE-2024-9061 WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
ThemeHunk · WP Popup Builder – Popup Forms and Marketing Lead Generation

EPSS 54%
Medium 4.7
CVE-2024-9977 MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection
MitraStar · GPT-2541GNAC

EPSS 23%
High 8.0
CVE-2024-48634 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecu…
EPSS 18%
High 8.8
CVE-2023-50780 Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans
Apache Software Foundation · Apache ActiveMQ Artemis

EPSS 17%
Medium 6.1
CVE-2022-4971 Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
heateor · Social Sharing Plugin – Sassy Social Share

EPSS 17%
Medium 4.7
CVE-2024-10193 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection
WAVLINK · WN530HG4 · WN530H4 · WN572HG3

EPSS 15%
High 8.8
CVE-2024-38814 An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges m…
EPSS 15%
Medium 5.4
CVE-2024-45741 Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
Splunk · Splunk Enterprise · Splunk Cloud Platform

EPSS 15%

Advisories

USN-7069-2 linux-azure vulnerabilities 35 CVEs
USN-7069-1 linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities 35 CVEs
SUSE-SU-2024:3694-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) 23 CVEs
SUSE-SU-2024:3631-1 Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) 23 CVEs
USN-7028-2 linux-azure vulnerabilities 22 CVEs
RHSA-2024:8180 Red Hat Security Advisory: webkit2gtk3 security update 20 CVEs
SUSE-SU-2024:3695-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) 20 CVEs
SUSE-SU-2024:3697-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) 19 CVEs
SUSE-SU-2024:3651-1 Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) 19 CVEs
SUSE-SU-2024:3623-1 Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5) 19 CVEs