Week 42, 2024
14 October to 20 October 2024. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 775CVEs publishedin the whole week
- 99CriticalCVSS 9.0 and above
- 278HighCVSS 7.0 to 8.9
- 4Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2024-40711
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
Veeam · Backup and Recovery
ExploitedCritical9.8 - CVE-2024-9680
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this…
Mozilla · Firefox
ExploitedCritical9.8 - CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds · Web Help Desk
ExploitedCritical9.1 - CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.0
Most severe new CVEsBy CVSS score
- CVE-2024-49607
WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability
redhopit · WP Dropbox Dropins
Critical10.0 - CVE-2024-9985
Ragic Enterprise Cloud Database - Arbitrary File Upload
Ragic · Enterprise Cloud Database
Critical10.0 - CVE-2024-49254
WordPress ajax-extend plugin <= 1.0 - Remote Code Execution (RCE) vulnerability
sunjianle · ajax-extend
Critical10.0 - CVE-2024-49330
WordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerability
brx8r · Nice Backgrounds
Critical10.0 - CVE-2024-49611
WordPress Product Website Showcase plugin <= 1.0 - Arbitrary File Upload vulnerability
paxmanpwnz · Product Website Showcase
Critical10.0 - CVE-2024-49324
WordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability
sovratecdev · Sovratec Case Management
Critical10.0 - CVE-2024-49326
WordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability
Vasileios Kerasiotis · Affiliator
Critical10.0 - CVE-2024-49327
WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability
bepitulaz · Woostagram Connect
Critical10.0 - CVE-2024-49329
WordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability
vivek2tamrakar · WP REST API FNS
Critical10.0 - CVE-2024-49610
WordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerability
photokiteditor · photokit
Critical10.0