Skip to main content
CVE-2024-45291 Oct 07, 21:15 HIGH POC PATCH This Week

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SSRF Phpspreadsheet Phpoffice
NVD GitHub
CVSS 3.1
8.8
EPSS
0.8%
CVE-2024-9570 Oct 07, 16:15 HIGH POC This Week

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 619l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
3.0%
CVE-2024-9569 Oct 07, 15:15 HIGH POC This Week

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 619l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.3%
CVE-2024-9568 Oct 07, 15:15 HIGH POC This Week

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 619l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.3%
CVE-2024-9567 Oct 07, 14:15 HIGH POC This Week

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 619l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.3%
CVE-2024-9566 Oct 07, 13:15 HIGH POC This Week

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 619l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.8%
CVE-2024-9565 Oct 07, 01:15 HIGH POC This Week

A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 605l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.9%
CVE-2024-9564 Oct 07, 01:15 HIGH POC This Week

A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 605l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.9%
CVE-2024-9563 Oct 07, 00:15 HIGH POC This Week

A vulnerability, which was classified as critical, has been found in D-Link DIR-605L 2.13B01 BETA. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 605l Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.4%
CVE-2024-46278 Oct 07, 16:15 HIGH POC This Week

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Rated high severity (CVSS 8.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Teedy Sismics
NVD GitHub Exploit-DB
CVSS 3.1
8.4
EPSS
2.6%
CVE-2024-45290 Oct 07, 21:15 HIGH POC PATCH This Week

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Phpspreadsheet Phpoffice
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-45293 Oct 07, 20:15 HIGH POC PATCH This Week

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure XXE Phpspreadsheet Phpoffice
NVD GitHub
CVSS 3.1
7.5
EPSS
2.9%
CVE-2024-47559 Oct 07, 19:15 HIGH This Week

Authenticated RCE via Path Traversal. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Freeflow Core Xerox
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2024-47558 Oct 07, 19:15 HIGH This Week

Authenticated RCE via Path Traversal. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Freeflow Core Xerox
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2024-27458 Oct 07, 17:15 HIGH This Week

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation HP
NVD
CVSS 3.1
8.8
EPSS
0.2%
CVE-2024-46041 Oct 07, 16:15 HIGH This Week

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass
NVD GitHub
CVSS 3.1
8.8
EPSS
0.3%
CVE-2024-33065 Oct 07, 13:15 HIGH This Week

Memory corruption while taking snapshot when an offset variable is set by camera driver. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware +42
NVD
CVSS 3.1
8.4
EPSS
0.1%
CVE-2024-47555 Oct 07, 18:15 HIGH This Week

Missing Authentication - User & System Configuration. Rated high severity (CVSS 8.3), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass
NVD
CVSS 3.1
8.3
EPSS
0.2%
CVE-2024-45051 Oct 07, 21:15 HIGH This Week

Discourse is an open source platform for community discussion. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Discourse
NVD GitHub
CVSS 3.1
8.2
EPSS
0.4%
CVE-2024-33073 Oct 07, 13:15 HIGH This Week

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Ar8035 Firmware Csr8811 Firmware +156
NVD
CVSS 3.1
8.2
EPSS
0.3%
CVE-2024-33064 Oct 07, 13:15 HIGH This Week

Information disclosure while parsing the multiple MBSSID IEs from the beacon. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Mdm9628 Firmware Qca6564a Firmware +3
NVD
CVSS 3.1
8.2
EPSS
0.4%
CVE-2024-44068 Oct 07, 19:15 HIGH This Week

An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation Use After Free Memory Corruption Samsung Exynos 850 Firmware +5
NVD
CVSS 3.1
8.1
EPSS
1.0%
CVE-2024-9576 Oct 07, 15:15 HIGH This Week

Vulnerability in Distro Linux Workbooth v2.5 that allows to escalate privileges to the root user by manipulating the network configuration script. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Workbooth
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2024-43047 Oct 07, 13:15 HIGH KEV PATCH THREAT This Week

Memory corruption while maintaining memory maps of HLOS memory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Buffer Overflow Use After Free Memory Corruption Qualcomm Fastconnect 6700 Firmware +61
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2024-38399 Oct 07, 13:15 HIGH This Week

Memory corruption while processing user packets to generate page faults. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Use After Free Memory Corruption Qualcomm Fastconnect 6900 Firmware +39
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2024-23369 Oct 07, 13:15 HIGH This Week

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Ar8035 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware +115
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2024-21455 Oct 07, 13:15 HIGH This Week

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Qam8295p Firmware Qca6584au Firmware Qca6595 Firmware +17
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-20092 Oct 07, 03:15 HIGH This Week

In vdec, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2024-47335 Oct 07, 06:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.13.11. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Wordpress Plugin
NVD VulDB
CVSS 3.1
7.6
EPSS
0.5%
CVE-2024-38397 Oct 07, 13:15 HIGH This Week

Transient DOS while parsing probe response and assoc response frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Ar8035 Firmware Fastconnect 6700 Firmware Fastconnect 6900 Firmware +112
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-33071 Oct 07, 13:15 HIGH This Week

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Mdm9628 Firmware Qca6564a Firmware Qca6564au Firmware +2
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-33070 Oct 07, 13:15 HIGH This Week

Transient DOS while parsing ESP IE from beacon/probe response frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Mdm9628 Firmware Qca6564a Firmware Qca6564au Firmware +2
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-33069 Oct 07, 13:15 HIGH This Week

Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Qualcomm Fastconnect 6800 Firmware +43
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-33049 Oct 07, 13:15 HIGH This Week

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Csr8811 Firmware Fastconnect 6700 Firmware Fastconnect 7800 Firmware +128
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-20094 Oct 07, 03:15 HIGH This Week

In Modem, there is a possible system crash due to a missing bounds check. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Mediatek Nr15
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-47975 Oct 07, 19:15 HIGH This Week

Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially. Rated high severity (CVSS 7.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Denial Of Service
NVD
CVSS 3.1
7.0
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy