CVE Arsenal Intel

CVE-2024-6396

aimhubio/aim General ⚡ nuclei

9.8

CRITICAL

EPSS

90.0%

2024 CWE-29 0 PoCs

A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the `run_hash` and `repo.path` parameters, which can be manipulated to create and write to arbitrary file paths. This can lead to denial of service by overwriting critical system files, loss of private data, and potential remote code execution.

nuclei -t CVE-2024-6396.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2024-36404

geotools General ⚡ nuclei

9.8

CRITICAL

EPSS

90.7%

2024 CWE-95 2 PoCs

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution (RCE) is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6 contain a fix for this issue. As a workaround, GeoTools can operate with reduced functionality by removing the `gt-complex` jar from one's application. As an example of the impact, application schema `datastore` would not function without the ability to use XPath expressions to query complex content.

nuclei -t CVE-2024-36404.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2024-13160

🔥 KEV Endpoint Manager General ⚡ nuclei

9.8

CRITICAL

EPSS

93.8%

2024 CWE-36 1 PoC

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

nuclei -t CVE-2024-13160.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2024-4040

🔥 KEV CrushFTP General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2024 CWE-1336 21 PoCs

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

nuclei -t CVE-2024-4040.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +15 más 🔍 GCVE ⚔ EDB

CVE-2024-55956

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

91.2%

2024 3 PoCs

In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.

nuclei -t CVE-2024-55956.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2024-22320

Operational Decision Manager General ⚡ nuclei

9.8

CRITICAL

EPSS

90.8%

2024 CWE-502 1 PoC

IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.

nuclei -t CVE-2024-22320.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2024-4358

🔥 KEV Telerik Report Server General ⚡ nuclei

9.8

CRITICAL

EPSS

94.3%

2024 CWE-290 7 PoCs

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

nuclei -t CVE-2024-4358.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2024-40711

🔥 KEV Backup and Recovery General ⚡ nuclei

9.8

CRITICAL

EPSS

68.2%

2024 4 PoCs

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

nuclei -t CVE-2024-40711.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 🔍 GCVE ⚔ EDB

CVE-2024-7593

🔥 KEV vTM General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2024 CWE-287 6 PoCs

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

nuclei -t CVE-2024-7593.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 🔍 GCVE ⚔ EDB

CVE-2024-6782

Calibre General ⚡ nuclei

9.8

CRITICAL

EPSS

93.8%

2024 CWE-863 6 PoCs

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

nuclei -t CVE-2024-6782.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 🔍 GCVE ⚔ EDB

CVE-2024-22729

Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

91.2%

2024 0 PoCs

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.

nuclei -t CVE-2024-22729.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2024-28000

LiteSpeed Cache General ⚡ nuclei

9.8

CRITICAL

EPSS

92.1%

2024 CWE-266 7 PoCs

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

nuclei -t CVE-2024-28000.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2024-36858

Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

73.6%

2024 0 PoCs

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

nuclei -t CVE-2024-36858.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2024-0204

GoAnywhere MFT General ⚡ nuclei

9.8

CRITICAL

EPSS

93.0%

2024 CWE-425 7 PoCs

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

nuclei -t CVE-2024-0204.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2019-15107

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.5%

2019 45 PoCs

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

nuclei -t CVE-2019-15107.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +39 más 🔍 GCVE ⚔ EDB

CVE-2019-3396

🔥 KEV Confluence Server General ⚡ nuclei

9.8

CRITICAL

EPSS

94.5%

2019 26 PoCs

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.

nuclei -t CVE-2019-3396.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +20 más 🔍 GCVE ⚔ EDB

CVE-2019-16057

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.0%

2019 1 PoC

The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

nuclei -t CVE-2019-16057.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-7194

🔥 KEV QNAP NAS devices running Photo Station General ⚡ nuclei

9.8

CRITICAL

EPSS

93.9%

2019 1 PoC

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

nuclei -t CVE-2019-7194.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-7195

🔥 KEV QNAP NAS devices running Photo Station General ⚡ nuclei

9.8

CRITICAL

EPSS

94.1%

2019 1 PoC

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

nuclei -t CVE-2019-7195.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-7256

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2019 4 PoCs

Linear eMerge E3-Series devices allow Command Injections.

nuclei -t CVE-2019-7256.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 🔍 GCVE ⚔ EDB