Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,352 results · page 7 of 28
Jan 18, 2025JSM Screenshot Machine Shortcode: Stored Cross-Site ScriptingCVE-2024-13385 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ssm' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- JSM Screenshot Machine Shortcode
- Affected
- up to 2.3.0
- What to do
- Affects up to 2.3.0. Update JSM Screenshot Machine Shortcode to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordgithub.complugins.trac.wordpress.org
Jan 14, 2025Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python functiCVE-2025-23042 · Other software · gradio-app · reported by GitHubHigh 8.7
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises due to the lack of case normalization in the file path validation logic. On case-insensitive file systems, such as those used by Windows and macOS, this flaw enables attackers to circumvent security restrictions and access sensitive files that should be protected. This issue can lead to unauthorized data access, exposing sensitive information and undermining the integrity of Gradio's security model. Given Gradio's popularity for building web applications, particularly in machine learning and AI, this vulnerability may pose a substantial threat if exploited in production environments. This issue has been addressed in release version 5.6.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- gradio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 14, 2025Open source machine learning framework.CVE-2024-49375 · Other software · RasaHQ · reported by GitHubCritical 9
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on the Rasa instance eg with `--enable-api`. This is not the default configuration. 2. For unauthenticated RCE to be exploitable, the user must not have configured any authentication or other security controls recommended in our documentation. 3. For authenticated RCE, the attacker must posses a valid authentication token or JWT to interact with the Rasa API. This issue has been addressed in rasa version 3.6.21 and all users are advised to upgrade. Users unable to upgrade should ensure that they require authentication and that only trusted users are given access.
- Product
- rasa-pro-security-advisories
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2025Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers.CVE-2024-12083 · Other software · OMRON Corporation · reported by bba440f9-ef23-4224-aa62-7ac0935d18d1Medium 6.6
Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.
- Product
- Machine Automation Controller NJ-series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfa.omron.co.jpfa.omron.co.jp
Jan 8, 2025An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.CVE-2024-55459 · Other software · Keras · reported by MITREMedium 6.5
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
- Product
- Keras
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 7, 2025A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.CVE-2024-11681 · Other software · MacPorts · reported by cve-coordination@google.comMedium 6.9
A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.
- Product
- MacPorts
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2024In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disCVE-2022-21505 · Other software · Oracle Corporation · reported by secalert_us@oracle.comMedium 6.7
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
- Product
- Oracle Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orglinux.oracle.com
Dec 23, 2024ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine.CVE-2024-12902 · Other software · Global Wisdom Software · reported by twcert@cert.org.twHigh 8.4
ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.
- Product
- ANCHOR
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.CVE-2024-47984 · Other software · Dell · reported by security_alert@emc.comMedium 4.4
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH.CVE-2024-28980 · Other software · Dell · reported by security_alert@emc.comMedium 6.5
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability.CVE-2024-24902 · Other software · Dell · reported by security_alert@emc.comMedium 6.6
Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local attacker could potentially exploit this vulnerability leading to gaining access to unauthorized data for a limited time.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability.CVE-2024-48008 · Other software · Dell · reported by security_alert@emc.comMedium 5.3
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability.CVE-2024-48007 · Other software · Dell · reported by security_alert@emc.comMedium 5.3
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability.CVE-2024-38488 · Other software · Dell · reported by security_alert@emc.comMedium 6.5
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise. This allows attackers to brute-force the password of valid users in an automated manner.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2024Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability.CVE-2024-22461 · Other software · Dell · reported by security_alert@emc.comHigh 8.8
Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system.
- Product
- RecoverPoint for Virtual Machines
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2024From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (CVE-2024-42448 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.
- Product
- Service Provider Console
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server systemCVE-2024-11220 · Other software · Open Automation Software · reported by ics-cert@hq.dhs.govHigh 8.5
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation.
- Product
- Open Automation Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenautomationsoftware.comcisa.gov
Dec 3, 2024From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VCVE-2024-42449 · Other software · Veeam · reported by support@hackerone.comHigh 7.1
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine.
- Product
- Service Provider Console
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 22, 2024NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.CVE-2024-7253 · Other software · NoMachine · reported by zdi-disclosures@trendmicro.comHigh 7.8
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within nxnode.exe. The process loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-24039.
- Product
- NoMachine
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkb.nomachine.comzerodayinitiative.com
Nov 13, 2024Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentialCVE-2024-21853 · Other software · reported by secure@intel.comMedium 5.7
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordintel.comlists.debian.org
Nov 12, 2024A remote code execution vulnerability exists in the affected product.CVE-2024-37365 · Other software · Rockwell Automation · reported by PSIRT@rockwellautomation.comHigh 7
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbitrary code.
- Product
- FactoryTalk View Machine Edition
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.com
Nov 4, 2024langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rathCVE-2024-48061 · Other software · Langflow · reported by MITRECritical 9.8
langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comrumbling-slice-eb0.notion.site
Oct 21, 2024In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock UbuntCVE-2024-47684 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic kernel that are running ceph and recently hit a null ptr dereference in tcp_rearm_rto(). Initially hitting it from the TLP path, but then later we also saw it getting hit from the RACK case as well. Here are examples of the oops messages we saw in each of those cases: Jul 26 15:05:02 rx [11061395.780353] BUG: kernel NULL pointer dereference, address: 0000000000000020 Jul 26 15:05:02 rx [11061395.787572] #PF: supervisor read access in kernel mode Jul 26 15:05:02 rx [11061395.792971] #PF: error_code(0x0000) - not-present page Jul 26 15:05:02 rx [11061395.798362] PGD 0 P4D 0 Jul 26 15:05:02 rx [11061395.801164] Oops: 0000 [#1] SMP NOPTI Jul 26 15:05:02 rx [11061395.805091] CPU: 0 PID: 9180 Comm: msgr-worker-1 Tainted: G W 5.4.0-174-generic #193-Ubuntu Jul 26 15:05:02 rx [11061395.814996] Hardware name: Supermicro SMC 2x26 os-gen8 64C NVME-Y 256G/H12SSW-NTR, BIOS 2.5.V1.2U.NVMe.UEFI 05/09/2023 Jul 26 15:05:02 rx [11061395.825952] RIP: 0010:tcp_rearm_rto+0xe4/0x160 Jul 26 15:05:02 rx [1
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Oct 18, 2024Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vectCVE-2024-29821 · Network & remote access · Ivanti · reported by support@hackerone.comHigh 7.8
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
- Product
- DSM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 18, 2024Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vectCVE-2024-29213 · Network & remote access · Ivanti · reported by support@hackerone.comHigh 7.8
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
- Product
- DSM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 18, 2024ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization.CVE-2024-49361 · Other software · torinriley · reported by GitHubHigh 8.1
ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which could lead to arbitrary code execution if exploited. This issue could allow an attacker to submit malicious input data, bypassing input validation, resulting in remote code execution in certain machine learning applications using the ACON library. All users utilizing ACON’s input-handling functions are potentially at risk. Specifically, machine learning models or applications that ingest user-generated data without proper sanitization are the most vulnerable. Users running ACON on production servers are at heightened risk, as the vulnerability could be exploited remotely. As of time of publication, it is unclear whether a fix is available.
- Product
- ACON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 9, 2024Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers.CVE-2024-47833 · Other software · Avaiga · reported by GitHubMedium 6.3
Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- taipy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document autCVE-2024-40442 · Other software · doccano · reported by MITREHigh 7.2
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request.
- Product
- doccano
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document autCVE-2024-40441 · Other software · doccano · reported by MITREMedium 6.6
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter.
- Product
- doccano
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information.CVE-2024-45862 · Other software · Kastle Systems · reported by ics-cert@hq.dhs.govHigh 8.7
Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information.
- Product
- Access Control System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 16, 2024Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via lCVE-2024-24968 · Other software · reported by secure@intel.comMedium 5.6
Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordintel.comlists.debian.org
Sep 11, 2024In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module enCVE-2024-45029 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module encounters an issue due to a mutex being called inside a spinlock. This leads to the following bug: BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 ... Call trace: __might_sleep __mutex_lock_common mutex_lock_nested acpi_subsys_runtime_resume rpm_resume tegra_i2c_xfer The problem arises because during __pm_runtime_resume(), the spinlock &dev->power.lock is acquired before rpm_resume() is called. Later, rpm_resume() invokes acpi_subsys_runtime_resume(), which relies on mutexes, triggering the error. To address this issue, devices on ACPI are now marked as not IRQ-safe, considering the dependency of acpi_subsys_runtime_resume() on mutexes.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Sep 7, 2024A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where tCVE-2024-42024 · Other software · Veeam · reported by support@hackerone.comHigh 8.8
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
- Product
- One
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2024A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level.CVE-2024-40709 · Other software · Veeam · reported by support@hackerone.comHigh 7.8
A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level.
- Product
- Backup and Recovery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2024Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.CVE-2024-33054 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
- Product
- Snapdragon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 27, 2024An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a seCVE-2024-3982 · Other software · Hitachi Energy · reported by cybersecurity@hitachienergy.comHigh 8.2
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
- Product
- MicroSCADA SYS600
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpublisher.hitachienergy.com
Aug 16, 2024When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configCVE-2024-6098 · Other software · PTC · reported by ics-cert@hq.dhs.govMedium 5.9
When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service condition and crash the Kepware application. By default, these functions are turned off, yet they remain accessible for users who recognize and require their advantages.
- Product
- Kepware ThingWorx Kepware Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Windows Initial Machine Configuration Elevation of Privilege VulnerabilityCVE-2024-38223 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Azure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2024-38162 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Azure Connected Machine Agent Elevation of Privilege Vulnerability
- Product
- Azure Connected Machine Agent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Azure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2024-38098 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Azure Connected Machine Agent Elevation of Privilege Vulnerability
- Product
- Azure Connected Machine Agent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 12, 2024In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines Yves-AlCVE-2024-42258 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67High 7.1
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't force huge page alignment on 32 bit") didn't work for x86_32 [1]. It is because x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT. !CONFIG_64BIT should cover all 32 bit machines. [1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Aug 3, 2024A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic.CVE-2024-7438 · Other software · SimpleMachines · reported by VulDBMedium 5.3
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument aid leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- SMF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 2024A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4.CVE-2024-7437 · Other software · SimpleMachines · reported by VulDBMedium 5.3
A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of resource identifiers. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- SMF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 31, 2024A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the passworCVE-2024-3082 · Other software · Plug&Track · reported by prodsec@nozominetworks.comMedium 4.2
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers (e.g., full-disk encryption) have been enabled.
- Product
- Sensor Net Connect V2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 31, 2024A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to reCVE-2024-31200 · Other software · Plug&Track · reported by prodsec@nozominetworks.comMedium 4.2
A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser.
- Product
- Sensor Net Connect V2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 30, 2024TensorFlow is an end-to-end open source platform for machine learning.CVE-2023-33976 · Other software · tensorflow · reported by GitHubHigh 7.5
TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.
- Product
- tensorflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 26, 2024An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script CVE-2024-24257 · Other software · zkteco · reported by MITREHigh 7.5
An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.
- Product
- zktime_web
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordidssgmcc.github.ioidssgmcc.github.io
Jul 24, 2024IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine.CVE-2024-37533 · Other software · IBM · reported by psirt@us.ibm.comLow 2.4
IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727.
- Product
- InfoSphere Information Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comibm.com
Jul 22, 2024The ops library is a Python framework for developing and testing Kubernetes and machine charms.CVE-2024-41129 · Other software · canonical · reported by GitHubMedium 4.4
The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju (>=3.0), Juju secrets and not correctly capturing and processing `subprocess.CalledProcessError`. This vulnerability is fixed in 2.15.0.
- Product
- operator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2024The H2O machine learning platform uses "Iced" classes as the primary means of moving Java Objects around the cluster.CVE-2024-6960 · Other software · mvnrepository · reported by reefs@jfrog.comHigh 7.5
The H2O machine learning platform uses "Iced" classes as the primary means of moving Java Objects around the cluster. The Iced format supports inclusion of serialized Java objects. When a model is deserialized, any class is allowed to be deserialized (no class whitelist). An attacker can construct a crafted Iced model that uses Java gadgets and leads to arbitrary code execution when imported to the H2O platform.
- Product
- h2o-core
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordresearch.jfrog.comresearch.jfrog.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.