top of page
Cyber Security, Compliance & Business Continuity Update
There's always something on the horizon with business continuity and cyber security: regulations change, new expectations arise and industry intelligence continues to develop. On this page we maintain a curated list of developments and issues that could affect the information security and business continuity arrangements of SME organisations
Last Update: August 2026
CVE ID | Vendor | Product | Vulnerability Name | Date Added | Short Description | Likely Attack Vector |
|---|---|---|---|---|---|---|
CVE-2024-21287 | Oracle | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 21 November 2024 | Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. | Direct Remote Network Attack |
CVE-2024-44309 | Apple | Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 21 November 2024 | Apple iOS macOS and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. | Phishing / User Interaction |
CVE-2024-44308 | Apple | Multiple Products | Apple Multiple Products Code Execution Vulnerability | 21 November 2024 | Apple iOS macOS and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. | Phishing / User Interaction |
CVE-2024-38813 | VMware | vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | 20 November 2024 | VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet. | Application/System Exploitation |
CVE-2024-38812 | VMware | vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 20 November 2024 | VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. | Application/System Exploitation |
CVE-2024-9474 | Palo Alto Networks | PAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 18 November 2024 | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products including firewalls and VPN concentrators. | Perimeter Gateway Breach |
CVE-2024-0012 | Palo Alto Networks | PAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 18 November 2024 | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products including firewalls and VPN concentrators. | Perimeter Gateway Breach |
CVE-2024-1212 | Progress | Kemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | 18 November 2024 | Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated remote attacker to access the system through the LoadMaster management interface enabling arbitrary system command execution. | Direct Remote Network Attack |
CVE-2024-9465 | Palo Alto Networks | Expedition | Palo Alto Networks Expedition SQL Injection Vulnerability | 14 November 2024 | Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents such as password hashes usernames device configurations and device API keys. With this attackers can also create and read arbitrary files on the Expedition system. | Perimeter Gateway Breach |
CVE-2024-9463 | Palo Alto Networks | Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | 14 November 2024 | Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition resulting in disclosure of usernames cleartext passwords device configurations and device API keys of PAN-OS firewalls. | Perimeter Gateway Breach |
CVE-2021-26086 | Atlassian | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 12 November 2024 | Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint. | Application/System Exploitation |
CVE-2014-2120 | Cisco | Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | 12 November 2024 | Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. | Perimeter Gateway Breach |
CVE-2021-41277 | Metabase | Metabase | Metabase GeoJSON API Local File Inclusion Vulnerability | 12 November 2024 | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data. | Application/System Exploitation |
CVE-2024-43451 | Microsoft | Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 12 November 2024 | Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. | Phishing (Malicious Attachment) |
CVE-2024-49039 | Microsoft | Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 12 November 2024 | Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided local application to escalate privileges outside of its AppContainer and access privileged RPC functions. | Phishing / User Interaction |
CVE-2019-16278 | Nostromo | nhttpd | Nostromo nhttpd Directory Traversal Vulnerability | 07 November 2024 | Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution. | Direct Remote Network Attack |
CVE-2024-51567 | CyberPersons | CyberPanel | CyberPanel Incorrect Default Permissions Vulnerability | 07 November 2024 | CyberPanel contains an incorrect default permissions vulnerability that allows a remote unauthenticated attacker to execute commands as root. | Direct Remote Network Attack |
CVE-2024-43093 | Android | Framework | Android Framework Privilege Escalation Vulnerability | 07 November 2024 | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | Application/System Exploitation |
CVE-2024-5910 | Palo Alto Networks | Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | 07 November 2024 | Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets credentials and other data. | Perimeter Gateway Breach |
CVE-2024-8956 | PTZOptics | PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | 04 November 2024 | PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957 this can lead to remote code execution as root. | Direct Remote Network Attack |
CVE-2024-8957 | PTZOptics | PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | 04 November 2024 | PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. | Application/System Exploitation |
CVE-2024-37383 | Roundcube | Webmail | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | 24 October 2024 | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code. | Application/System Exploitation |
CVE-2024-20481 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | 24 October 2024 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated remote attacker to cause a denial-of-service (DoS) of the RAVPN service. | Perimeter Gateway Breach |
CVE-2024-47575 | Fortinet | FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | 23 October 2024 | Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. | Perimeter Gateway Breach |
CVE-2024-38094 | Microsoft | SharePoint | Microsoft SharePoint Deserialization Vulnerability | 22 October 2024 | Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. | Phishing / User Interaction |
CVE-2024-9537 | ScienceLogic | SL1 | ScienceLogic SL1 Unspecified Vulnerability | 21 October 2024 | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. | Application/System Exploitation |
CVE-2024-40711 | Veeam | Backup & Replication | Veeam Backup and Replication Deserialization Vulnerability | 17 October 2024 | Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. | Direct Remote Network Attack |
CVE-2024-28987 | SolarWinds | Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 15 October 2024 | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote unauthenticated user to access internal functionality and modify data. | Direct Remote Network Attack |
CVE-2024-9680 | Mozilla | Firefox | Mozilla Firefox Use-After-Free Vulnerability | 15 October 2024 | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. | Phishing / User Interaction |
CVE-2024-30088 | Microsoft | Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 15 October 2024 | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. | Phishing / User Interaction |
CVE-2024-9380 | Ivanti | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 09 October 2024 | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. | Application/System Exploitation |
CVE-2024-9379 | Ivanti | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 09 October 2024 | Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2 which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements. | Direct Remote Network Attack |
CVE-2024-23113 | Fortinet | Multiple Products | Fortinet Multiple Products Format String Vulnerability | 09 October 2024 | Fortinet FortiOS FortiPAM FortiProxy and FortiWeb contain a format string vulnerability that allows a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. | Perimeter Gateway Breach |
CVE-2024-43573 | Microsoft | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 08 October 2024 | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. | Phishing / User Interaction |
CVE-2024-43572 | Microsoft | Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | 08 October 2024 | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. | Phishing / User Interaction |
CVE-2024-43047 | Qualcomm | Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 08 October 2024 | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. | Application/System Exploitation |
CVE-2024-45519 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 03 October 2024 | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands. | Direct Remote Network Attack |
CVE-2024-29824 | Ivanti | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 02 October 2024 | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. | Direct Remote Network Attack |
CVE-2019-0344 | SAP | Commerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 30 September 2024 | SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. | Application/System Exploitation |
CVE-2020-15415 | DrayTek | Multiple Vigor Routers | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 30 September 2024 | DrayTek Vigor3900 Vigor2960 and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used. | Direct Remote Network Attack |
CVE-2023-25280 | D-Link | DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | 30 September 2024 | D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. | Direct Remote Network Attack |
CVE-2024-7593 | Ivanti | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 24 September 2024 | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote unauthenticated attacker to create a chosen administrator account. | Direct Remote Network Attack |
CVE-2024-8963 | Ivanti | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 19 September 2024 | Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190 an attacker could bypass admin authentication and execute arbitrary commands on the appliance. | Direct Remote Network Attack |
CVE-2020-14644 | Oracle | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 18 September 2024 | Oracle WebLogic Server a product within the Fusion Middleware suite contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution. | Direct Remote Network Attack |
CVE-2022-21445 | Oracle | ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 18 September 2024 | Oracle ADF Faces library included with Oracle JDeveloper Distribution contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution. | Direct Remote Network Attack |
CVE-2020-0618 | Microsoft | SQL Server | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 18 September 2024 | Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. | Application/System Exploitation |
CVE-2024-27348 | Apache | HugeGraph-Server | Apache HugeGraph-Server Improper Access Control Vulnerability | 18 September 2024 | Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. | Application/System Exploitation |
CVE-2014-0502 | Adobe | Flash Player | Adobe Flash Player Double Free Vulnerablity | 17 September 2024 | Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. | Phishing / User Interaction |
CVE-2013-0648 | Adobe | Flash Player | Adobe Flash Player Code Execution Vulnerability | 17 September 2024 | Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. | Phishing / User Interaction |
CVE-2013-0643 | Adobe | Flash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | 17 September 2024 | Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. | Phishing / User Interaction |
CVE-2014-0497 | Adobe | Flash Player | Adobe Flash Player Integer Underflow Vulnerablity | 17 September 2024 | Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. | Phishing / User Interaction |
CVE-2024-6670 | Progress | WhatsUp Gold | Progress WhatsUp Gold SQL Injection Vulnerability | 16 September 2024 | Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. | Direct Remote Network Attack |
CVE-2024-43461 | Microsoft | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 16 September 2024 | Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112. | Phishing / User Interaction |
CVE-2024-8190 | Ivanti | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 13 September 2024 | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. | Application/System Exploitation |
CVE-2024-38217 | Microsoft | Windows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | 10 September 2024 | Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office which rely on MOTW tagging. | Phishing / User Interaction |
CVE-2024-38014 | Microsoft | Windows | Microsoft Windows Installer Improper Privilege Management Vulnerability | 10 September 2024 | Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges. | Phishing / User Interaction |
CVE-2024-38226 | Microsoft | Publisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | 10 September 2024 | Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files. | Phishing (Malicious Attachment) |
CVE-2024-40766 | SonicWall | SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | 09 September 2024 | SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and under certain conditions may cause the firewall to crash. | Perimeter Gateway Breach |
CVE-2017-1000253 | Linux | Kernel | Linux Kernel PIE Stack Buffer Corruption Vulnerability | 09 September 2024 | Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. | Application/System Exploitation |
CVE-2016-3714 | ImageMagick | ImageMagick | ImageMagick Improper Input Validation Vulnerability | 09 September 2024 | ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL HTTPS MVG MSL TEXT SHOW WIN and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image. | Application/System Exploitation |
CVE-2024-7262 | Kingsoft | WPS Office | Kingsoft WPS Office Path Traversal Vulnerability | 03 September 2024 | Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library. | Application/System Exploitation |
CVE-2021-20124 | DrayTek | VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | 03 September 2024 | Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. | Direct Remote Network Attack |
CVE-2021-20123 | DrayTek | VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | 03 September 2024 | Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. | Direct Remote Network Attack |
CVE-2024-7965 | Google | Chromium V8 | Google Chromium V8 Inappropriate Implementation Vulnerability | 28 August 2024 | Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium including but not limited to Google Chrome Microsoft Edge and Opera. | Phishing (Malicious Link) |
CVE-2024-38856 | Apache | OFBiz | Apache OFBiz Incorrect Authorization Vulnerability | 27 August 2024 | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. | Direct Remote Network Attack |
CVE-2024-7971 | Google | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 26 August 2024 | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium including but not limited to Google Chrome Microsoft Edge and Opera. | Phishing (Malicious Link) |
CVE-2024-39717 | Versa | Director | Versa Director Dangerous File Type Upload Vulnerability | 23 August 2024 | The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file which can be exploited to upload a malicious file with a .png extension disguised as an image. | Application/System Exploitation |
CVE-2021-31196 | Microsoft | Exchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | 21 August 2024 | Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. | Direct Remote Network Attack |
CVE-2022-0185 | Linux | Kernel | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 21 August 2024 | Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges. | Application/System Exploitation |
CVE-2021-33045 | Dahua | IP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | 21 August 2024 | Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication. | Application/System Exploitation |
CVE-2021-33044 | Dahua | IP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | 21 August 2024 | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication. | Application/System Exploitation |
CVE-2024-23897 | Jenkins | Jenkins Command Line Interface (CLI) | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 19 August 2024 | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files which can lead to code execution. | Application/System Exploitation |
CVE-2024-28986 | SolarWinds | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 15 August 2024 | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. | Direct Remote Network Attack |
CVE-2024-38107 | Microsoft | Windows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 13 August 2024 | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation enabling a local attacker to obtain SYSTEM privileges. | Phishing / User Interaction |
CVE-2024-38106 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 13 August 2024 | Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition. | Phishing / User Interaction |
CVE-2024-38193 | Microsoft | Windows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 13 August 2024 | Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation enabling a local attacker to gain SYSTEM privileges. | Phishing / User Interaction |
CVE-2024-38213 | Microsoft | Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 13 August 2024 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file. | Phishing (Malicious Attachment) |
CVE-2024-38178 | Microsoft | Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 13 August 2024 | Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL. | Phishing (Malicious Link) |
CVE-2024-38189 | Microsoft | Project | Microsoft Project Remote Code Execution Vulnerability | 13 August 2024 | Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file. | Phishing (Malicious Attachment) |
CVE-2024-32113 | Apache | OFBiz | Apache OFBiz Path Traversal Vulnerability | 07 August 2024 | Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. | Direct Remote Network Attack |
CVE-2024-36971 | Android | Kernel | Android Kernel Remote Code Execution Vulnerability | 07 August 2024 | Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products including but not limited to Android OS. | Direct Remote Network Attack |
CVE-2018-0824 | Microsoft | Windows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 05 August 2024 | Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script. | Phishing (Malicious Attachment) |
CVE-2024-37085 | VMware | ESXi | VMware ESXi Authentication Bypass Vulnerability | 30 July 2024 | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. | Application/System Exploitation |
CVE-2023-45249 | Acronis | Cyber Infrastructure (ACI) | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | 29 July 2024 | Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. | Direct Remote Network Attack |
CVE-2024-5217 | ServiceNow | Utah, Vancouver, and Washington DC Now Platform | ServiceNow Incomplete List of Disallowed Inputs Vulnerability | 29 July 2024 | ServiceNow Washington DC Vancouver and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. | Direct Remote Network Attack |
CVE-2024-4879 | ServiceNow | Utah, Vancouver, and Washington DC Now Platform | ServiceNow Improper Input Validation Vulnerability | 29 July 2024 | ServiceNow Utah Vancouver and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. | Direct Remote Network Attack |
CVE-2024-39891 | Twilio | Authy | Twilio Authy Information Disclosure Vulnerability | 23 July 2024 | Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy. | Direct Remote Network Attack |
CVE-2012-4792 | Microsoft | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 23 July 2024 | Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted as demonstrated by a CDwnBindInfo object. | Phishing / User Interaction |
CVE-2022-22948 | VMware | vCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | 17 July 2024 | VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote privileged attacker to gain access to sensitive information. | Application/System Exploitation |
CVE-2024-28995 | SolarWinds | Serv-U | SolarWinds Serv-U Path Traversal Vulnerability | 17 July 2024 | SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. | Application/System Exploitation |
CVE-2024-34102 | Adobe | Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | 17 July 2024 | Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. | Phishing / User Interaction |
CVE-2024-36401 | OSGeo | GeoServer | OSGeo GeoServer GeoTools Eval Injection Vulnerability | 15 July 2024 | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input. | Direct Remote Network Attack |
CVE-2024-23692 | Rejetto | HTTP File Server | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 09 July 2024 | Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request. | Direct Remote Network Attack |
CVE-2024-38080 | Microsoft | Windows | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 09 July 2024 | Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. | Phishing / User Interaction |
CVE-2024-38112 | Microsoft | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 09 July 2024 | Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality integrity and availability. | Phishing / User Interaction |
CVE-2024-20399 | Cisco | NX-OS | Cisco NX-OS Command Injection Vulnerability | 02 July 2024 | Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated local attacker to execute commands as root on the underlying operating system of an affected device. | Direct Remote Network Attack |
CVE-2020-13965 | Roundcube | Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 26 June 2024 | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment. | Phishing (Malicious Attachment) |
CVE-2022-2586 | Linux | Kernel | Linux Kernel Use-After-Free Vulnerability | 26 June 2024 | Linux Kernel contains a use-after-free vulnerability in the nft_object allowing local attackers to escalate privileges. | Application/System Exploitation |
CVE-2022-24816 | OSGeo | JAI-EXT | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 26 June 2024 | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that when programs use jt-jiffle and allow Jiffle script to be provided via network request could allow remote code execution. | Direct Remote Network Attack |
CVE-2024-4358 | Progress | Telerik Report Server | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | 13 June 2024 | Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. | Application/System Exploitation |
Opeining times are listed here
Follow or connect with Steve, RiskCentric's owner & founder via LinkedIn
bottom of page