Skip to main content
CVE-2024-10081 Nov 06, 15:15 CRITICAL POC PATCH THREAT Act Now

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Ericsson Codechecker
NVD GitHub
CVSS 3.1
10.0
EPSS
39.0%
CVE-2024-10915 Nov 06, 14:15 CRITICAL POC THREAT Act Now

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Command Injection D-Link Dns 325 Firmware Dns 320Lw Firmware Dns 320 Firmware +1
NVD VulDB
CVSS 4.0
9.2
EPSS
79.1%
CVE-2024-10914 Nov 06, 14:15 CRITICAL POC THREAT Act Now

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Command Injection D-Link Dns 325 Firmware Dns 320Lw Firmware Dns 320 Firmware +1
NVD VulDB Exploit-DB
CVSS 4.0
9.2
EPSS
97.4%
CVE-2024-9307 Nov 06, 07:15 CRITICAL Act Now

The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress RCE File Upload Mfolio Wordpress Plugin +1
NVD
CVSS 3.1
9.9
EPSS
7.8%
CVE-2024-20418 Nov 06, 17:15 CRITICAL Act Now

A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points could allow an unauthenticated,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Cisco
NVD
CVSS 3.1
10.0
EPSS
3.1%
CVE-2024-51736 Nov 06, 21:15 CRITICAL PATCH Act Now

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Command Injection Microsoft Symfony Sensiolabs
NVD GitHub
CVSS 3.1
9.8
EPSS
0.4%
CVE-2024-8615 Nov 06, 09:15 CRITICAL Act Now

The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress RCE File Upload Jobsearch Wp Job Board Eyecix
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-51757 Nov 06, 20:15 CRITICAL PATCH Act Now

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS
NVD GitHub
CVSS 4.0
9.3
EPSS
0.7%
CVE-2024-10082 Nov 06, 15:15 CRITICAL PATCH Act Now

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Ericsson Codechecker
NVD GitHub
CVSS 3.1
9.0
EPSS
0.5%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy