Week 16, 2024
15 April to 21 April 2024. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 1,005CVEs publishedin the whole week
- 66CriticalCVSS 9.0 and above
- 331HighCVSS 7.0 to 8.9
- 0Added to KEVknown exploited, newly listed
Most severe new CVEsBy CVSS score
- CVE-2024-28189
Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link
judge0 · judge0
Critical10.0 - CVE-2024-28185
Judge0 vulnerable to Sandbox Escape via Symbolic Link
judge0 · judge0
Critical10.0 - CVE-2024-2912
Insecure Deserialization Leading to RCE in bentoml/bentoml
bentoml · bentoml/bentoml
Critical10.0 - CVE-2024-32599
WordPress WP Dummy Content Generator plugin <= 3.2.1 - Arbitrary Code Execution vulnerability
Deepak anand · WP Dummy Content Generator
Critical10.0 - CVE-2024-2083
Directory Traversal in zenml-io/zenml
zenml-io · zenml-io/zenml
Critical9.9 - CVE-2024-20997
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions…
Oracle Corporation · Hospitality Simphony
Critical9.9 - CVE-2023-49742
WordPress Support Genix plugin <= 1.2.3 - Broken Access Control lead to Arbitrary File Upload vulnerability
Support Genix · Support Genix
Critical9.9 - CVE-2024-21010
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions…
Oracle Corporation · Hospitality Simphony
Critical9.9 - CVE-2024-32514
WordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability
Poll Maker & Voting Plugin Team (InfoTheme) · WP Poll Maker
Critical9.9 - CVE-2024-24996
A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary…
Ivanti · Avalanche
Critical9.8