Skip to main content
CVE-2024-27198 Mar 04, 18:15 CRITICAL POC KEV THREAT Emergency

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Teamcity JetBrains
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
99.9%
CVE-2024-20017 Mar 04, 03:15 CRITICAL POC THREAT Act Now

In wlan service, there is a possible out of bounds write due to improper input validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Mediatek Openwrt Software Development Kit
NVD
CVSS 3.1
9.8
EPSS
46.3%
CVE-2024-2154 Mar 04, 01:15 CRITICAL POC Act Now

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Mobile Store Management System Oretnom23
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-2153 Mar 04, 01:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Mobile Store Management System Oretnom23
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-2152 Mar 04, 00:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Mobile Store Management System Oretnom23
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-2048 Mar 04, 20:15 CRITICAL PATCH Act Now

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Hashicorp Openbao Vault
NVD
CVSS 3.1
9.8
EPSS
0.4%
CVE-2024-20018 Mar 04, 03:15 CRITICAL Act Now

In wlan driver, there is a possible out of bounds write due to improper input validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Software Development Kit
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-2156 Mar 04, 01:15 CRITICAL Act Now

A vulnerability was found in SourceCodester Best POS Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Best Pos Management System Mayurik
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-22463 Mar 04, 14:15 CRITICAL Act Now

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Dell Powerscale Onefs
NVD
CVSS 3.1
9.1
EPSS
0.3%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy