Week 44, 2024
28 October to 3 November 2024. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 831CVEs publishedin the whole week
- 87CriticalCVSS 9.0 and above
- 236HighCVSS 7.0 to 8.9
- 0Added to KEVknown exploited, newly listed
Most severe new CVEsBy CVSS score
- CVE-2024-51378
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute…
Product not named
ExploitedCritical10.0 - CVE-2024-51567
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary…
Product not named
ExploitedCritical10.0 - CVE-2024-50498
WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability
Ajit Bohra · WP Query Console
Critical10.0 - CVE-2024-51568
CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is…
Product not named
Critical10.0 - CVE-2024-51482
Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64
ZoneMinder · zoneminder
Critical10.0 - CVE-2024-50473
WordPress Ajar in5 Embed plugin <= 3.1.3 - Arbitrary File Upload vulnerability
Ajar Productions · Ajar in5 Embed
Critical10.0 - CVE-2024-50482
WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability
Chetan Khandla · Woocommerce Product Design
Critical10.0 - CVE-2024-50493
WordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability
masterhomepage · Automatic Translation
Critical10.0 - CVE-2024-50510
WordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerability
webandprint · AR For Woocommerce
Critical10.0 - CVE-2024-50420
WordPress aDirectory plugin <= 1.3 - Arbitrary File Upload vulnerability
aDirectory · aDirectory
Critical10.0