SecuriTricks - 2024-09-10

Attack Reports

Title	Published	Tags	Description	Number of indicators
Earth Preta Evolves its Attacks with New Malware and Strategies	Sept. 10, 2024, 8:58 p.m.	malware plugx persistence execution find 2024-09-10 winrar earth preta pubload trojanspy indonesia hiupan pullbait fdmtp c plugx c pubload c preta fdmtp	Trend Micros discusses analysis of Earth Preta’s enhancements in their attacks by introducing new tools, malware variants and str…	41
Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401	Sept. 10, 2024, 8:49 p.m.	linux mirai urls 2024-09-10 condi geoserver fundamentals	A critical security flaw in the Open Geospatial Consortium (OGC) GeoServer server has been exploited by cyber-attackers to gain c…	75
Threat Assessment: North Korean Threat Groups	Sept. 10, 2024, 8:23 a.m.	malware espionage cybercrime northkorea rats comebacker rustbucket kandykorn 2024-09-10 collectionrat fullhouse poolrat odicloader objcshellz pondrat smoothoperator	This assessment evaluates several North Korean threat groups operating under the Reconnaissance General Bureau. It describes thei…	58
Attempted cyberattacks on military systems using mobile malware	Sept. 10, 2024, 8:11 a.m.	apt 2024-09-10 aurora fakeapps militarytargeting datatheft mdmbot mcrat hydraq roarur homeunix hidraq mobileattacks 9002 rat homux	The report details attempts by threat actors to compromise smartphones and tablets belonging to military personnel by distributin…	15
A glimpse into the next moves and associated botnets	Sept. 10, 2024, 8:07 a.m.	evasion backdoors xlogin botnets routers 2024-09-10 hammertoss axlogin fsynet hammerduke stealth alogin updtae zylogin netduke rlogin	The report provides insights into the evolving tactics and infrastructure of a threat group referred to as the 'Quad7 botnet oper…	11
A glimpse into the Quad7 operators’ next moves and associated botnets	Sept. 10, 2024, 8:07 a.m.	evasion backdoors xlogin botnets routers 2024-09-10 hammertoss axlogin fsynet hammerduke stealth alogin updtae zylogin netduke rlogin	The report provides insights into the evolving tactics and infrastructure of a threat group referred to as the 'Quad7 botnet oper…	0

» Click here to see all Attack Reports «

Vulnerabilities

CVE	CVSS	Published	Product impacted	Tags
CVE-2024-45032	10.0	Sept. 10, 2024, 10:15 a.m.	Industrial Edge Management Pro	CWE-639 productcert@siemens.com 2024-09-10 CVE-2024-45032
CVE-2024-45409	10.0	Sept. 10, 2024, 7:15 p.m.	Ruby SAML library	security-advisories@github.com CWE-347 2024-09-10 CVE-2024-45409
CVE-2024-6342	9.8	Sept. 10, 2024, 2:15 a.m.	Zyxel NAS326	CWE-78 security@zyxel.com.tw 2024-09-10 CVE-2024-6342
CVE-2024-6596	9.8	Sept. 10, 2024, 8:15 a.m.	UNKNOWN	CWE-94 info@cert.vde.com 2024-09-10 CVE-2024-6596
CVE-2024-33698	9.8	Sept. 10, 2024, 10:15 a.m.	SIMATIC Information Server	CWE-122 productcert@siemens.com 2024-09-10 CVE-2024-33698
CVE-2024-40754	9.8	Sept. 10, 2024, 11:15 a.m.	Samsung Escargot JavaScript engine	CWE-122 PSIRT@samsung.com 2024-09-10 CVE-2024-40754
CVE-2023-37226	9.8	Sept. 10, 2024, 2:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-287 2024-09-10 CVE-2023-37226
CVE-2023-37227	9.8	Sept. 10, 2024, 2:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-502 2024-09-10 CVE-2023-37227
CVE-2023-37231	9.8	Sept. 10, 2024, 2:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-259 2024-09-10 CVE-2023-37231
CVE-2024-44677	9.8	Sept. 10, 2024, 4:15 p.m.	eladmin	cve@mitre.org CWE-352 2024-09-10 CVE-2024-44677
CVE-2024-43491	9.8	Sept. 10, 2024, 5:15 p.m.	Windows 10 Enterprise 2015 LTSB	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-43491
CVE-2024-44893	9.8	Sept. 10, 2024, 5:15 p.m.	JimuReport	cve@mitre.org CWE-269 2024-09-10 CVE-2024-44893
CVE-2024-8503	9.8	Sept. 10, 2024, 8:15 p.m.	VICIdial	CWE-89 bbf0bd87-ece2-41be-b873-96928ee8fab9 2024-09-10 CVE-2024-8503
CVE-2024-35783	9.1	Sept. 10, 2024, 10:15 a.m.	SIMATIC PCS 7	productcert@siemens.com CWE-250 2024-09-10 CVE-2024-35783
CVE-2024-45593	9.0	Sept. 10, 2024, 4:15 p.m.	Nix Package Manager	security-advisories@github.com CWE-22 2024-09-10 CVE-2024-45593
CVE-2024-38220	9.0	Sept. 10, 2024, 5:15 p.m.	Azure Stack Hub	CWE-284 secure@microsoft.com 2024-09-10 CVE-2024-38220
CVE-2024-8268	8.8	Sept. 10, 2024, 3:15 a.m.	Frontend Dashboard plugin for WordPress	security@wordfence.com CWE-94 2024-09-10 CVE-2024-8268
CVE-2024-43385	8.8	Sept. 10, 2024, 9:15 a.m.	mGuard devices	CWE-78 info@cert.vde.com 2024-09-10 CVE-2024-43385
CVE-2024-43386	8.8	Sept. 10, 2024, 9:15 a.m.	mGuard devices	CWE-78 info@cert.vde.com 2024-09-10 CVE-2024-43386
CVE-2024-43387	8.8	Sept. 10, 2024, 9:15 a.m.	mGuard devices	CWE-78 info@cert.vde.com 2024-09-10 CVE-2024-43387
CVE-2024-43388	8.8	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43388
CVE-2024-7699	8.8	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-78 info@cert.vde.com 2024-09-10 CVE-2024-7699
CVE-2024-41171	8.8	Sept. 10, 2024, 10:15 a.m.	SINUMERIK 828D	CWE-732 productcert@siemens.com 2024-09-10 CVE-2024-41171
CVE-2024-7770	8.8	Sept. 10, 2024, 11:15 a.m.	WordPress plugin - Bit File Manager	security@wordfence.com CWE-434 2024-09-10 CVE-2024-7770
CVE-2023-37229	8.8	Sept. 10, 2024, 2:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-918 2024-09-10 CVE-2023-37229
CVE-2023-37230	8.8	Sept. 10, 2024, 2:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-918 2024-09-10 CVE-2023-37230
CVE-2024-45044	8.8	Sept. 10, 2024, 3:15 p.m.	Bareos	security-advisories@github.com CWE-285 2024-09-10 CVE-2024-45044
CVE-2023-37233	8.8	Sept. 10, 2024, 4:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-611 2024-09-10 CVE-2023-37233
CVE-2024-26186	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-26186
CVE-2024-26191	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-26191
CVE-2024-37335	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-37335
CVE-2024-37338	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-125 secure@microsoft.com 2024-09-10 CVE-2024-37338
CVE-2024-37339	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-822 secure@microsoft.com 2024-09-10 CVE-2024-37339
CVE-2024-37340	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-822 secure@microsoft.com 2024-09-10 CVE-2024-37340
CVE-2024-37341	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-284 secure@microsoft.com 2024-09-10 CVE-2024-37341
CVE-2024-37965	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-37965
CVE-2024-37980	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-269 secure@microsoft.com 2024-09-10 CVE-2024-37980
CVE-2024-38018	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft SharePoint Server	CWE-502 secure@microsoft.com 2024-09-10 CVE-2024-38018
CVE-2024-38225	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft Dynamics 365 Business Central	CWE-287 secure@microsoft.com 2024-09-10 CVE-2024-38225
CVE-2024-38259	8.8	Sept. 10, 2024, 5:15 p.m.	Microsoft Management Console	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38259
CVE-2024-38260	8.8	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	secure@microsoft.com CWE-908 2024-09-10 CVE-2024-38260
CVE-2024-43455	8.8	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-43455
CVE-2024-43461	8.8	Sept. 10, 2024, 5:15 p.m.	Windows	secure@microsoft.com CWE-451 2024-09-10 CVE-2024-43461
CVE-2024-43469	8.8	Sept. 10, 2024, 5:15 p.m.	Azure CycleCloud	CWE-94 secure@microsoft.com 2024-09-10 CVE-2024-43469
CVE-2024-44103	8.8	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-426 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-44103
CVE-2024-44104	8.8	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-290 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-44104
CVE-2024-44106	8.8	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-602 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-44106
CVE-2024-44107	8.8	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-427 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-44107
CVE-2024-44087	8.6	Sept. 10, 2024, 10:15 a.m.	Automation License Manager	CWE-190 productcert@siemens.com 2024-09-10 CVE-2024-44087
CVE-2024-43479	8.5	Sept. 10, 2024, 5:15 p.m.	Microsoft Power Automate Desktop	CWE-284 secure@microsoft.com 2024-09-10 CVE-2024-43479
CVE-2024-38194	8.4	Sept. 10, 2024, 5:15 p.m.	Azure Web Apps	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38194
CVE-2024-45592	8.2	Sept. 10, 2024, 4:15 p.m.	auditor-bundle (DoctrineAuditBundle)	security-advisories@github.com CWE-79 2024-09-10 CVE-2024-45592
CVE-2024-38216	8.2	Sept. 10, 2024, 5:15 p.m.	Azure Stack Hub	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38216
CVE-2024-44105	8.2	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-319 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-44105
CVE-2024-39583	8.1	Sept. 10, 2024, 9:15 a.m.	Dell PowerScale InsightIQ	security_alert@emc.com CWE-327 2024-09-10 CVE-2024-39583
CVE-2024-21416	8.1	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-21416
CVE-2024-38045	8.1	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-38045
CVE-2024-38240	8.1	Sept. 10, 2024, 5:15 p.m.	Windows Remote Access Connection Manager	CWE-125 secure@microsoft.com 2024-09-10 CVE-2024-38240
CVE-2023-36103	8.0	Sept. 10, 2024, 4:15 p.m.	Tenda AC15	cve@mitre.org CWE-77 2024-09-10 CVE-2023-36103
CVE-2024-44815	8.0	Sept. 10, 2024, 4:15 p.m.	Hathway Skyworth Router CM5100	cve@mitre.org CWE-256 2024-09-10 CVE-2024-44815
CVE-2024-44667	8.0	Sept. 10, 2024, 5:15 p.m.	Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router	cve@mitre.org CWE-284 2024-09-10 CVE-2024-44667
CVE-2024-41170	7.8	Sept. 10, 2024, 10:15 a.m.	Tecnomatix Plant Simulation	CWE-121 productcert@siemens.com 2024-09-10 CVE-2024-41170
CVE-2024-31960	7.8	Sept. 10, 2024, 4:15 p.m.	Samsung Mobile Processor Exynos 1480	cve@mitre.org CWE-416 2024-09-10 CVE-2024-31960
CVE-2024-30073	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Operating System	secure@microsoft.com CWE-41 2024-09-10 CVE-2024-30073
CVE-2024-38014	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Installer	CWE-269 secure@microsoft.com 2024-09-10 CVE-2024-38014
CVE-2024-38046	7.8	Sept. 10, 2024, 5:15 p.m.	PowerShell	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38046
CVE-2024-38237	7.8	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-38237
CVE-2024-38238	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Kernel	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-38238
CVE-2024-38241	7.8	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38241
CVE-2024-38242	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Kernel	CWE-122 secure@microsoft.com 2024-09-10 CVE-2024-38242
CVE-2024-38243	7.8	Sept. 10, 2024, 5:15 p.m.	UNKNOWN	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38243
CVE-2024-38244	7.8	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38244
CVE-2024-38245	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Kernel	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38245
CVE-2024-38247	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Graphics Component	CWE-415 secure@microsoft.com 2024-09-10 CVE-2024-38247
CVE-2024-38249	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Graphics Component	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38249
CVE-2024-38250	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Graphics Component	CWE-126 secure@microsoft.com 2024-09-10 CVE-2024-38250
CVE-2024-38252	7.8	Sept. 10, 2024, 5:15 p.m.	Windows Win32 Kernel Subsystem	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38252
CVE-2024-38253	7.8	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38253
CVE-2024-43457	7.8	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-428 secure@microsoft.com 2024-09-10 CVE-2024-43457
CVE-2024-43463	7.8	Sept. 10, 2024, 5:15 p.m.	Microsoft Office Visio	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-43463
CVE-2024-43465	7.8	Sept. 10, 2024, 5:15 p.m.	Microsoft Excel	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-43465
CVE-2024-43492	7.8	Sept. 10, 2024, 5:15 p.m.	Microsoft AutoUpdate	CWE-284 secure@microsoft.com 2024-09-10 CVE-2024-43492
CVE-2024-8012	7.8	Sept. 10, 2024, 9:15 p.m.	Ivanti Workspace Control	CWE-288 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8012
CVE-2024-8191	7.8	Sept. 10, 2024, 9:15 p.m.	Ivanti EPM	CWE-89 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8191
CVE-2024-43458	7.7	Sept. 10, 2024, 5:15 p.m.	Windows Operating System	secure@microsoft.com CWE-908 2024-09-10 CVE-2024-43458
CVE-2024-42427	7.6	Sept. 10, 2024, 8:15 a.m.	Dell ThinOS	security_alert@emc.com CWE-77 2024-09-10 CVE-2024-42427
CVE-2024-43474	7.6	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	secure@microsoft.com CWE-170 2024-09-10 CVE-2024-43474
CVE-2024-43476	7.6	Sept. 10, 2024, 5:15 p.m.	Microsoft Dynamics 365 (on-premises)	CWE-79 secure@microsoft.com 2024-09-10 CVE-2024-43476
CVE-2024-43647	7.5	Sept. 10, 2024, 10:15 a.m.	SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0)	CWE-400 productcert@siemens.com 2024-09-10 CVE-2024-43647
CVE-2024-45845	7.5	Sept. 10, 2024, 11:15 a.m.	nix	cve@mitre.org CWE-22 2024-09-10 CVE-2024-45845
CVE-2024-37728	7.5	Sept. 10, 2024, 2:15 p.m.	OfficeWeb365	cve@mitre.org CWE-22 2024-09-10 CVE-2024-37728
CVE-2024-44867	7.5	Sept. 10, 2024, 2:15 p.m.	phpok	cve@mitre.org CWE-22 2024-09-10 CVE-2024-44867
CVE-2024-23185	7.5	Sept. 10, 2024, 3:15 p.m.	Dovecot	CWE-770 security@open-xchange.com 2024-09-10 CVE-2024-23185
CVE-2023-37232	7.5	Sept. 10, 2024, 4:15 p.m.	Loftware Spectrum	cve@mitre.org CWE-200 2024-09-10 CVE-2023-37232
CVE-2024-45590	7.5	Sept. 10, 2024, 4:15 p.m.	body-parser	security-advisories@github.com CWE-405 2024-09-10 CVE-2024-45590
CVE-2024-38119	7.5	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38119
CVE-2024-38232	7.5	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-476 secure@microsoft.com 2024-09-10 CVE-2024-38232
CVE-2024-38233	7.5	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-476 secure@microsoft.com 2024-09-10 CVE-2024-38233
CVE-2024-38236	7.5	Sept. 10, 2024, 5:15 p.m.	Microsoft Windows DHCP Server	CWE-400 secure@microsoft.com 2024-09-10 CVE-2024-38236
CVE-2024-38257	7.5	Sept. 10, 2024, 5:15 p.m.	Microsoft AllJoyn API	secure@microsoft.com CWE-908 2024-09-10 CVE-2024-38257
CVE-2024-38263	7.5	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	secure@microsoft.com CWE-591 2024-09-10 CVE-2024-38263
CVE-2024-43467	7.5	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	CWE-362 secure@microsoft.com 2024-09-10 CVE-2024-43467
CVE-2024-8232	7.5	Sept. 10, 2024, 8:15 p.m.	SpiderControl SCADA Web Server	ics-cert@hq.dhs.gov CWE-434 2024-09-10 CVE-2024-8232
CVE-2024-45596	7.4	Sept. 10, 2024, 7:15 p.m.	Directus	security-advisories@github.com CWE-524 2024-09-10 CVE-2024-45596
CVE-2024-8478	7.3	Sept. 10, 2024, 3:15 a.m.	Affiliate Super Assistent plugin for WordPress	security@wordfence.com CWE-94 2024-09-10 CVE-2024-8478
CVE-2024-39581	7.3	Sept. 10, 2024, 9:15 a.m.	Dell PowerScale InsightIQ	security_alert@emc.com CWE-552 2024-09-10 CVE-2024-39581
CVE-2024-33508	7.3	Sept. 10, 2024, 3:15 p.m.	Fortinet FortiClientEMS	CWE-77 psirt@fortinet.com 2024-09-10 CVE-2024-33508
CVE-2024-38226	7.3	Sept. 10, 2024, 5:15 p.m.	Microsoft Publisher	secure@microsoft.com CWE-693 2024-09-10 CVE-2024-38226
CVE-2024-43470	7.3	Sept. 10, 2024, 5:15 p.m.	Azure Network Watcher	CWE-59 secure@microsoft.com 2024-09-10 CVE-2024-43470
CVE-2024-43475	7.3	Sept. 10, 2024, 5:15 p.m.	Microsoft Windows Admin Center	CWE-126 secure@microsoft.com 2024-09-10 CVE-2024-43475
CVE-2024-43495	7.3	Sept. 10, 2024, 5:15 p.m.	Windows libarchive	CWE-190 secure@microsoft.com 2024-09-10 CVE-2024-43495
CVE-2024-38227	7.2	Sept. 10, 2024, 5:15 p.m.	Microsoft SharePoint Server	CWE-77 secure@microsoft.com 2024-09-10 CVE-2024-38227
CVE-2024-38228	7.2	Sept. 10, 2024, 5:15 p.m.	Microsoft SharePoint Server	CWE-77 secure@microsoft.com 2024-09-10 CVE-2024-38228
CVE-2024-38239	7.2	Sept. 10, 2024, 5:15 p.m.	Windows	secure@microsoft.com CWE-1390 2024-09-10 CVE-2024-38239
CVE-2024-43464	7.2	Sept. 10, 2024, 5:15 p.m.	Microsoft SharePoint Server	CWE-502 secure@microsoft.com 2024-09-10 CVE-2024-43464
CVE-2024-44871	7.2	Sept. 10, 2024, 5:15 p.m.	moziloCMS	cve@mitre.org CWE-434 2024-09-10 CVE-2024-44871
CVE-2024-8190	7.2	Sept. 10, 2024, 9:15 p.m.	Ivanti Cloud Services Appliance	CWE-78 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8190
CVE-2024-37337	7.1	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-197 secure@microsoft.com 2024-09-10 CVE-2024-37337
CVE-2024-37342	7.1	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-125 secure@microsoft.com 2024-09-10 CVE-2024-37342
CVE-2024-37966	7.1	Sept. 10, 2024, 5:15 p.m.	Microsoft SQL Server	CWE-125 secure@microsoft.com 2024-09-10 CVE-2024-37966
CVE-2024-38188	7.1	Sept. 10, 2024, 5:15 p.m.	Azure Network Watcher VM Agent	CWE-59 secure@microsoft.com 2024-09-10 CVE-2024-38188
CVE-2024-43454	7.1	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	secure@microsoft.com CWE-23 2024-09-10 CVE-2024-43454
CVE-2024-38246	7.0	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-121 secure@microsoft.com 2024-09-10 CVE-2024-38246
CVE-2024-38248	7.0	Sept. 10, 2024, 5:15 p.m.	Windows Storage	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38248
CVE-2024-6979	6.8	Sept. 10, 2024, 6:15 a.m.	AXIS OS	product-security@axis.com 2024-09-10 CVE-2024-6979
CVE-2024-31489	6.8	Sept. 10, 2024, 3:15 p.m.	FortiClientWindows	CWE-295 psirt@fortinet.com 2024-09-10 CVE-2024-31489
CVE-2024-39574	6.7	Sept. 10, 2024, 9:15 a.m.	Dell PowerScale InsightIQ	security_alert@emc.com CWE-269 2024-09-10 CVE-2024-39574
CVE-2024-39580	6.7	Sept. 10, 2024, 9:15 a.m.	Dell PowerScale InsightIQ	security_alert@emc.com CWE-284 2024-09-10 CVE-2024-39580
CVE-2024-8441	6.7	Sept. 10, 2024, 9:15 p.m.	Ivanti EPM	CWE-427 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8441
CVE-2024-45286	6.5	Sept. 10, 2024, 4:15 a.m.	SAP Production and Revenue Accounting	CWE-862 cna@sap.com 2024-09-10 CVE-2024-45286
CVE-2024-6173	6.5	Sept. 10, 2024, 5:15 a.m.	Axis Guard Tour	product-security@axis.com 2024-09-10 CVE-2024-6173
CVE-2024-6509	6.5	Sept. 10, 2024, 5:15 a.m.	Axis OS	product-security@axis.com 2024-09-10 CVE-2024-6509
CVE-2024-43389	6.5	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43389
CVE-2024-43390	6.5	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43390
CVE-2024-43391	6.5	Sept. 10, 2024, 9:15 a.m.	Unknown	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43391
CVE-2024-43392	6.5	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43392
CVE-2024-43393	6.5	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	CWE-74 info@cert.vde.com 2024-09-10 CVE-2024-43393
CVE-2024-37990	6.5	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)	CWE-912 productcert@siemens.com 2024-09-10 CVE-2024-37990
CVE-2024-45407	6.5	Sept. 10, 2024, 4:15 p.m.	Sunshine	security-advisories@github.com CWE-300 2024-09-10 CVE-2024-45407
CVE-2023-6841	6.5	Sept. 10, 2024, 5:15 p.m.	Keycloak	secalert@redhat.com 2024-09-10 CVE-2023-6841 CWE-231
CVE-2024-38230	6.5	Sept. 10, 2024, 5:15 p.m.	Windows Standards-Based Storage Management Service	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38230
CVE-2024-38231	6.5	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	CWE-285 secure@microsoft.com 2024-09-10 CVE-2024-38231
CVE-2024-38234	6.5	Sept. 10, 2024, 5:15 p.m.	Windows	CWE-20 secure@microsoft.com 2024-09-10 CVE-2024-38234
CVE-2024-38235	6.5	Sept. 10, 2024, 5:15 p.m.	Windows Hyper-V	CWE-416 secure@microsoft.com 2024-09-10 CVE-2024-38235
CVE-2024-38258	6.5	Sept. 10, 2024, 5:15 p.m.	Windows Remote Desktop Licensing Service	secure@microsoft.com CWE-23 2024-09-10 CVE-2024-38258
CVE-2024-43466	6.5	Sept. 10, 2024, 5:15 p.m.	Microsoft SharePoint Server	CWE-502 secure@microsoft.com 2024-09-10 CVE-2024-43466
CVE-2024-43482	6.5	Sept. 10, 2024, 5:15 p.m.	Microsoft Outlook for iOS	CWE-285 secure@microsoft.com 2024-09-10 CVE-2024-43482
CVE-2024-43487	6.5	Sept. 10, 2024, 5:15 p.m.	Windows	secure@microsoft.com CWE-693 2024-09-10 CVE-2024-43487
CVE-2024-8241	6.4	Sept. 10, 2024, 10:15 a.m.	Nova Blocks by Pixelgrade plugin for WordPress	CWE-79 security@wordfence.com 2024-09-10 CVE-2024-8241
CVE-2024-8543	6.4	Sept. 10, 2024, 10:15 a.m.	Slider comparison image before and after plugin for WordPress	CWE-79 security@wordfence.com 2024-09-10 CVE-2024-8543
CVE-2024-45393	6.4	Sept. 10, 2024, 3:15 p.m.	Computer Vision Annotation Tool (CVAT)	security-advisories@github.com CWE-862 2024-09-10 CVE-2024-45393
CVE-2024-42378	6.1	Sept. 10, 2024, 3:15 a.m.	SAP S/4HANA	CWE-79 cna@sap.com 2024-09-10 CVE-2024-42378
CVE-2024-45279	6.1	Sept. 10, 2024, 5:15 a.m.	SAP NetWeaver Application Server for ABAP	CWE-79 cna@sap.com 2024-09-10 CVE-2024-45279
CVE-2024-7784	6.1	Sept. 10, 2024, 6:15 a.m.	AXIS OS	product-security@axis.com 2024-09-10 CVE-2024-7784
CVE-2024-42423	6.1	Sept. 10, 2024, 3:15 p.m.	Citrix Workspace App	security_alert@emc.com CWE-863 2024-09-10 CVE-2024-42423
CVE-2024-44676	6.1	Sept. 10, 2024, 4:15 p.m.	eladmin	cve@mitre.org CWE-79 2024-09-10 CVE-2024-44676
CVE-2024-45595	6.1	Sept. 10, 2024, 4:15 p.m.	D-Tale	security-advisories@github.com CWE-79 2024-09-10 CVE-2024-45595
CVE-2024-44872	6.1	Sept. 10, 2024, 5:15 p.m.	moziloCMS	cve@mitre.org CWE-79 2024-09-10 CVE-2024-44872
CVE-2024-34831	6.1	Sept. 10, 2024, 6:15 p.m.	Gibbon Core	cve@mitre.org CWE-79 2024-09-10 CVE-2024-34831
CVE-2024-45283	6.0	Sept. 10, 2024, 5:15 a.m.	SAP NetWeaver AS for Java	CWE-256 cna@sap.com 2024-09-10 CVE-2024-45283
CVE-2024-21528	5.9	Sept. 10, 2024, 5:15 a.m.	node-gettext	CWE-1321 report@snyk.io 2024-09-10 CVE-2024-21528
CVE-2023-28827	5.9	Sept. 10, 2024, 10:15 a.m.	SIMATIC IPC DiagBase	CWE-476 productcert@siemens.com 2024-09-10 CVE-2023-28827
CVE-2023-30756	5.9	Sept. 10, 2024, 10:15 a.m.	SIMATIC IPC DiagBase	CWE-476 productcert@siemens.com 2024-09-10 CVE-2023-30756
CVE-2024-25073	5.9	Sept. 10, 2024, 3:15 p.m.	Samsung Exynos Processors	cve@mitre.org 2024-09-10 CVE-2024-25073
CVE-2024-25074	5.9	Sept. 10, 2024, 3:15 p.m.	SAMSUNG Exynos Processors	cve@mitre.org 2024-09-10 CVE-2024-25074
CVE-2024-45281	5.8	Sept. 10, 2024, 5:15 a.m.	SAP BusinessObjects Business Intelligence Platform	cna@sap.com CWE-426 2024-09-10 CVE-2024-45281
CVE-2024-8321	5.8	Sept. 10, 2024, 9:15 p.m.	Ivanti EPM	CWE-306 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8321
CVE-2024-44072	5.7	Sept. 10, 2024, 7:15 a.m.	BUFFALO wireless LAN routers and wireless LAN repeaters	vultures@jpcert.or.jp CWE-78 2024-09-10 CVE-2024-44072
CVE-2024-7698	5.7	Sept. 10, 2024, 9:15 a.m.	UNKNOWN	info@cert.vde.com CWE-212 2024-09-10 CVE-2024-7698
CVE-2024-42344	5.5	Sept. 10, 2024, 10:15 a.m.	SINEMA Remote Connect Client	CWE-532 productcert@siemens.com 2024-09-10 CVE-2024-42344
CVE-2024-43781	5.5	Sept. 10, 2024, 10:15 a.m.	SINUMERIK 828D	CWE-532 productcert@siemens.com 2024-09-10 CVE-2024-43781
CVE-2024-8645	5.5	Sept. 10, 2024, 10:15 a.m.	Wireshark	CWE-824 cve@gitlab.com 2024-09-10 CVE-2024-8645
CVE-2024-21753	5.5	Sept. 10, 2024, 3:15 p.m.	Fortinet FortiClientEMS	CWE-22 psirt@fortinet.com 2024-09-10 CVE-2024-21753
CVE-2024-38254	5.5	Sept. 10, 2024, 5:15 p.m.	Windows	secure@microsoft.com CWE-908 2024-09-10 CVE-2024-38254
CVE-2024-38256	5.5	Sept. 10, 2024, 5:15 p.m.	Windows Operating System	secure@microsoft.com CWE-908 2024-09-10 CVE-2024-38256
CVE-2024-42371	5.4	Sept. 10, 2024, 3:15 a.m.	SAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-42371
CVE-2024-44117	5.4	Sept. 10, 2024, 5:15 a.m.	SAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-44117
CVE-2024-45285	5.4	Sept. 10, 2024, 5:15 a.m.	SAP GUI	CWE-862 cna@sap.com 2024-09-10 CVE-2024-45285
CVE-2024-6282	5.4	Sept. 10, 2024, 12:15 p.m.	Master Addons for Elementor plugin for WordPress	CWE-79 security@wordfence.com 2024-09-10 CVE-2024-6282
CVE-2024-38217	5.4	Sept. 10, 2024, 5:15 p.m.	Windows	secure@microsoft.com CWE-693 2024-09-10 CVE-2024-38217
CVE-2024-38270	5.3	Sept. 10, 2024, 2:15 a.m.	Zyxel GS1900-10HP firmware	security@zyxel.com.tw CWE-331 2024-09-10 CVE-2024-38270
CVE-2024-42424	5.3	Sept. 10, 2024, 8:15 a.m.	Dell Precision Rack	security_alert@emc.com CWE-20 2024-09-10 CVE-2024-42424
CVE-2024-7734	5.3	Sept. 10, 2024, 8:15 a.m.	UNKNOWN	CWE-770 info@cert.vde.com 2024-09-10 CVE-2024-7734
CVE-2023-49069	5.3	Sept. 10, 2024, 10:15 a.m.	Mendix Runtime	CWE-204 productcert@siemens.com 2024-09-10 CVE-2023-49069
CVE-2024-37991	5.3	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT	CWE-200 productcert@siemens.com 2024-09-10 CVE-2024-37991
CVE-2024-37993	5.3	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT	CWE-284 productcert@siemens.com 2024-09-10 CVE-2024-37993
CVE-2024-8369	5.3	Sept. 10, 2024, 12:15 p.m.	EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress	security@wordfence.com CWE-862 2024-09-10 CVE-2024-8369
CVE-2024-45412	5.3	Sept. 10, 2024, 4:15 p.m.	Yeti	security-advisories@github.com CWE-770 2024-09-10 CVE-2024-45412
CVE-2024-45591	5.3	Sept. 10, 2024, 4:15 p.m.	XWiki Platform	security-advisories@github.com CWE-359 2024-09-10 CVE-2024-45591
CVE-2024-8655	5.3	Sept. 10, 2024, 8:15 p.m.	Mercury MNVR816	CWE-552 cna@vuldb.com 2024-09-10 CVE-2024-8655
CVE-2024-8320	5.3	Sept. 10, 2024, 9:15 p.m.	Ivanti EPM	CWE-306 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8320
CVE-2024-45597	5.3	Sept. 10, 2024, 10:15 p.m.	Pluto	security-advisories@github.com CWE-93 2024-09-10 CVE-2024-45597
CVE-2024-6876	5.1	Sept. 10, 2024, 4:15 p.m.	OSCAT Basic Library	CWE-125 info@cert.vde.com 2024-09-10 CVE-2024-6876
CVE-2024-8654	5.0	Sept. 10, 2024, 2:15 p.m.	MongoDB Server	cna@mongodb.com CWE-908 2024-09-10 CVE-2024-8654
CVE-2023-44254	5.0	Sept. 10, 2024, 3:15 p.m.	FortiAnalyzer	CWE-639 psirt@fortinet.com 2024-09-10 CVE-2023-44254
CVE-2024-23184	5.0	Sept. 10, 2024, 3:15 p.m.	Dovecot	CWE-770 security@open-xchange.com 2024-09-10 CVE-2024-23184
CVE-2024-43796	5.0	Sept. 10, 2024, 3:15 p.m.	Express.js	security-advisories@github.com CWE-79 2024-09-10 CVE-2024-43796
CVE-2024-43799	5.0	Sept. 10, 2024, 3:15 p.m.	send	security-advisories@github.com CWE-79 2024-09-10 CVE-2024-43799
CVE-2024-43800	5.0	Sept. 10, 2024, 3:15 p.m.	serve-static	security-advisories@github.com CWE-79 2024-09-10 CVE-2024-43800
CVE-2024-37992	4.9	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT	productcert@siemens.com CWE-703 2024-09-10 CVE-2024-37992
CVE-2024-45280	4.8	Sept. 10, 2024, 5:15 a.m.	SAP NetWeaver AS Java	CWE-79 cna@sap.com 2024-09-10 CVE-2024-45280
CVE-2024-7955	4.8	Sept. 10, 2024, 6:15 a.m.	Starbox WordPress plugin	contact@wpscan.com 2024-09-10 CVE-2024-7955
CVE-2022-45856	4.8	Sept. 10, 2024, 3:15 p.m.	FortiClientWindows	CWE-295 psirt@fortinet.com 2024-09-10 CVE-2022-45856
CVE-2024-44120	4.7	Sept. 10, 2024, 5:15 a.m.	SAP NetWeaver Enterprise Portal	CWE-79 cna@sap.com 2024-09-10 CVE-2024-44120
CVE-2024-7618	4.4	Sept. 10, 2024, 8:15 a.m.	The Community by PeepSo plugin for WordPress	CWE-79 security@wordfence.com 2024-09-10 CVE-2024-7618
CVE-2024-7655	4.4	Sept. 10, 2024, 8:15 a.m.	Community by PeepSo plugin for WordPress	CWE-79 security@wordfence.com 2024-09-10 CVE-2024-7655
CVE-2023-30755	4.4	Sept. 10, 2024, 10:15 a.m.	SIMATIC IPC DiagBase	CWE-476 productcert@siemens.com 2024-09-10 CVE-2023-30755
CVE-2024-41729	4.3	Sept. 10, 2024, 3:15 a.m.	SAP BEx Analyzer	cna@sap.com CWE-359 2024-09-10 CVE-2024-41729
CVE-2024-42380	4.3	Sept. 10, 2024, 3:15 a.m.	SAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-42380
CVE-2024-44113	4.3	Sept. 10, 2024, 3:15 a.m.	SAP Business Warehouse (BEx Analyzer)	cna@sap.com CWE-359 2024-09-10 CVE-2024-44113
CVE-2024-44115	4.3	Sept. 10, 2024, 3:15 a.m.	SAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-44115
CVE-2024-44116	4.3	Sept. 10, 2024, 3:15 a.m.	SAP BusinessObjects Business Intelligence Platform	CWE-862 cna@sap.com 2024-09-10 CVE-2024-44116
CVE-2024-44112	4.3	Sept. 10, 2024, 4:15 a.m.	SAP for Oil & Gas (Transportation and Distribution)	CWE-862 cna@sap.com 2024-09-10 CVE-2024-44112
CVE-2024-0067	4.3	Sept. 10, 2024, 5:15 a.m.	Axis Communications - AXIS OS	product-security@axis.com 2024-09-10 CVE-2024-0067
CVE-2024-44121	4.3	Sept. 10, 2024, 5:15 a.m.	SAP S/4 HANA	cna@sap.com CWE-213 2024-09-10 CVE-2024-44121
CVE-2023-2919	4.3	Sept. 10, 2024, 10:15 a.m.	Tutor LMS plugin for WordPress	security@wordfence.com CWE-352 2024-09-10 CVE-2023-2919
CVE-2024-32006	4.3	Sept. 10, 2024, 10:15 a.m.	SINEMA Remote Connect Client	CWE-613 productcert@siemens.com 2024-09-10 CVE-2024-32006
CVE-2024-37994	4.3	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT	CWE-912 productcert@siemens.com 2024-09-10 CVE-2024-37994
CVE-2024-42345	4.3	Sept. 10, 2024, 10:15 a.m.	SINEMA Remote Connect Server	productcert@siemens.com CWE-384 2024-09-10 CVE-2024-42345
CVE-2024-27257	4.3	Sept. 10, 2024, 3:15 p.m.	IBM OpenPages	psirt@us.ibm.com CWE-540 2024-09-10 CVE-2024-27257
CVE-2024-31490	4.3	Sept. 10, 2024, 3:15 p.m.	Fortinet FortiSandbox	CWE-200 psirt@fortinet.com 2024-09-10 CVE-2024-31490
CVE-2024-45323	4.3	Sept. 10, 2024, 3:15 p.m.	FortiEDR Manager API	CWE-284 psirt@fortinet.com 2024-09-10 CVE-2024-45323
CVE-2024-8322	4.3	Sept. 10, 2024, 9:15 p.m.	Ivanti EPM	CWE-1390 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 2024-09-10 CVE-2024-8322
CVE-2024-35282	4.2	Sept. 10, 2024, 3:15 p.m.	FortiClient VPN iOS	psirt@fortinet.com CWE-316 2024-09-10 CVE-2024-35282
CVE-2024-42425	3.8	Sept. 10, 2024, 9:15 a.m.	Dell Precision Rack 14G Intel BIOS	security_alert@emc.com CWE-788 2024-09-10 CVE-2024-42425
CVE-2024-36511	3.7	Sept. 10, 2024, 3:15 p.m.	FortiADC Web Application Firewall (WAF)	psirt@fortinet.com CWE-358 2024-09-10 CVE-2024-36511
CVE-2024-8443	3.4	Sept. 10, 2024, 2:15 p.m.	libopensc	secalert@redhat.com CWE-122 2024-09-10 CVE-2024-8443
CVE-2024-41728	2.7	Sept. 10, 2024, 4:15 a.m.	SAP NetWeaver Application Server for ABAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-41728
CVE-2024-37995	2.7	Sept. 10, 2024, 10:15 a.m.	SIMATIC Reader RF610R CMIIT	productcert@siemens.com CWE-703 2024-09-10 CVE-2024-37995
CVE-2024-45284	2.4	Sept. 10, 2024, 5:15 a.m.	SAP	CWE-862 cna@sap.com 2024-09-10 CVE-2024-45284
CVE-2024-39582	2.3	Sept. 10, 2024, 9:15 a.m.	Dell PowerScale InsightIQ	security_alert@emc.com CWE-798 2024-09-10 CVE-2024-39582
CVE-2024-44114	2.0	Sept. 10, 2024, 3:15 a.m.	SAP NetWeaver Application Server for ABAP	CWE-863 cna@sap.com 2024-09-10 CVE-2024-44114
CVE-2024-45504	None	Sept. 10, 2024, 5:15 a.m.	Alps System Integration products	vultures@jpcert.or.jp 2024-09-10 CVE-2024-45504
CVE-2024-7891	None	Sept. 10, 2024, 6:15 a.m.	Floating Contact Button WordPress plugin	contact@wpscan.com 2024-09-10 CVE-2024-7891
CVE-2024-8258	None	Sept. 10, 2024, 9:15 a.m.	Logitech Options Plus	CWE-94 cve-coordination@logitech.com 2024-09-10 CVE-2024-8258
CVE-2023-37234	None	Sept. 10, 2024, 4:15 p.m.	Loftware Spectrum	cve@mitre.org 2024-09-10 CVE-2023-37234
CVE-2024-43040	None	Sept. 10, 2024, 8:15 p.m.	Renwoxing Enterprise Intelligent Management System	cve@mitre.org 2024-09-10 CVE-2024-43040
CVE-2024-8504	None	Sept. 10, 2024, 8:15 p.m.	VICIdial	CWE-78 bbf0bd87-ece2-41be-b873-96928ee8fab9 2024-09-10 CVE-2024-8504

» Click here to see all Vulnerabilities «

Tag : 2024-09-10