Week 39, 2024
23 September to 29 September 2024. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 554CVEs publishedin the whole week
- 58CriticalCVSS 9.0 and above
- 192HighCVSS 7.0 to 8.9
- 1Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2024-7593
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass…
Ivanti · vTM
ExploitedCritical9.8
Most severe new CVEsBy CVSS score
- CVE-2024-8878
Unauthenticated Password Reset
Riello · Netman 204
Critical10.0 - CVE-2024-0001
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor…
Pure Storage · FlashArray
Critical10.0 - CVE-2024-45066
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
Dover Fueling Solutions (DFS) · ProGauge MAGLINK LX CONSOLE
Critical10.0 - CVE-2024-43693
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
Dover Fueling Solutions (DFS) · ProGauge MAGLINK LX CONSOLE
Critical10.0 - CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
PureStorage · FlashArray
Critical10.0 - CVE-2024-8940
Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase
Scriptcase · Scriptcase
Critical10.0 - CVE-2024-9014
OAuth2 client id and secret exposed through the web browser in pgAdmin 4
pgadmin.org · pgAdmin 4
Critical9.9 - CVE-2024-8621
Daily Prayer Time <= 2024.08.26 - Authenticated (Contributor+) SQL Injection
mmrs151 · Daily Prayer Time
Critical9.9 - CVE-2024-8436
WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection
hahncgdev · WP Easy Gallery – WordPress Gallery Plugin
Critical9.9 - CVE-2024-8624
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection
realmag777 · MDTF – Meta Data and Taxonomies Filter
Critical9.9