Latest high and critical flaws
- CVE-2024-43661 The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the deletion of certificates.High 7.1 · Jan 9, 2025
- CVE-2024-43660 The CGI script <redacted>.sh can be used to download any file on the filesystem.High 7.1 · Jan 9, 2025
- CVE-2024-43659 After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all IochHigh 8.3 · Jan 9, 2025
- CVE-2024-43658 Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmwareHigh 7.2 · Jan 9, 2025
- CVE-2024-43657 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IocharCritical 9.3 · Jan 9, 2025
- CVE-2024-43656 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IocharCritical 9.3 · Jan 9, 2025
- CVE-2024-43655 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IocharCritical 9.3 · Jan 9, 2025
- CVE-2024-43654 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command InjectiCritical 9.3 · Jan 9, 2025
- CVE-2024-43653 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IocharCritical 9.3 · Jan 9, 2025
- CVE-2024-43652 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IochargCritical 9.3 · Jan 9, 2025
- CVE-2024-43651 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects IochargCritical 9.3 · Jan 9, 2025
- CVE-2024-43650 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command InjectioCritical 9.3 · Jan 9, 2025
- CVE-2024-43649 Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root user.Critical 9.3 · Jan 9, 2025
- CVE-2024-43648 Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root user.Critical 9.3 · Jan 9, 2025
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.