Skip to main content
CVE-2024-0936 HIGH POC This Week

A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Temporai
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
0.7%
CVE-2024-22545 HIGH POC This Week

An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Tew 824Dru Firmware
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-0920 HIGH POC This Week

A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Tew 822Dre Firmware
NVD VulDB
CVSS 3.1
7.2
EPSS
8.6%
CVE-2024-0919 HIGH POC THREAT This Week

A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Tew 815Dap Firmware
NVD VulDB
CVSS 3.1
7.2
EPSS
22.5%
CVE-2024-0918 HIGH POC THREAT This Week

A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Tew 800Mb Firmware
NVD VulDB
CVSS 3.1
7.2
EPSS
25.4%
CVE-2024-23630 HIGH This Week

An arbitrary firmware upload vulnerability exists in the Motorola MR2600. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Mr2600 Firmware
NVD
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-23628 HIGH This Week

A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Mr2600 Firmware
NVD
CVSS 3.1
8.8
EPSS
3.2%
CVE-2024-23627 HIGH This Week

A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Mr2600 Firmware
NVD
CVSS 3.1
8.8
EPSS
3.5%
CVE-2024-23626 HIGH This Week

A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Mr2600 Firmware
NVD
CVSS 3.1
8.8
EPSS
3.5%
CVE-2024-23617 HIGH This Week

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Symantec Data Center Security Server
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2024-21385 HIGH PATCH This Week

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Google Use After Free Microsoft Memory Corruption Information Disclosure +1
NVD
CVSS 3.1
8.3
EPSS
1.0%
CVE-2024-23620 HIGH This Week

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation IBM Merge Efilm Workstation
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-21985 HIGH This Week

ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Clustered Data Ontap
NVD
CVSS 3.1
7.6
EPSS
0.3%
CVE-2023-6919 HIGH This Week

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Vg 4C1A Lru Firmware Vg 4C1A Lrpu Firmware Vg 255A Bf Firmware Vg 255 Bv Firmware +5
NVD VulDB
CVSS 3.1
7.5
EPSS
0.2%
CVE-2024-23629 HIGH This Week

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Mr2600 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2024-20263 HIGH This Week

A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Cisco Cbs250 8T D Firmware Cbs250 8Pp D Firmware Cbs250 8T E 2G Firmware +82
NVD
CVSS 3.1
7.2
EPSS
0.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy