Skip to main content
CVE-2024-38887 Aug 02, 21:16 CRITICAL POC Act Now

An issue in Horizon Business Services Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Caterease Horizoncloud
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-7314 Aug 02, 17:16 CRITICAL POC THREAT Act Now

anji-plus AJ-Report is affected by an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Java Report Anji Plus
NVD GitHub
CVSS 3.1
9.8
EPSS
51.5%
CVE-2024-41127 Aug 02, 15:16 CRITICAL POC PATCH Act Now

Monkeytype is a minimalistic and customizable typing test. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection Monkeytype
NVD GitHub
CVSS 3.1
9.6
EPSS
0.9%
CVE-2024-38882 Aug 02, 18:16 CRITICAL Act Now

An issue in Horizon Business Services Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Command Injection Caterease Horizoncloud
NVD VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-38889 Aug 02, 20:17 CRITICAL Act Now

An issue in Horizon Business Services Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Caterease Horizoncloud
NVD VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2024-38886 Aug 02, 18:16 CRITICAL Act Now

An issue in Horizon Business Services Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Caterease Horizoncloud
NVD VulDB
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-36268 Aug 02, 10:16 CRITICAL PATCH Act Now

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.10.0 through 1.12.0, which could lead to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Apache Code Injection Inlong
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2024-38883 Aug 02, 18:16 CRITICAL Act Now

An issue in Horizon Business Services Inc. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Caterease Horizoncloud
NVD VulDB
CVSS 3.1
9.1
EPSS
0.4%
CVE-2024-42461 Aug 02, 07:16 CRITICAL PATCH Act Now

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Node.js Jwt Attack Elliptic
NVD GitHub
CVSS 3.1
9.1
EPSS
0.6%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy