September 2024
Published in September 2024
- criticalexploitedCVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2013-0643
- criticalexploitedCVE-2020-15415: DrayTek Multiple Vigor Routers OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2013-0648
- unknown[Update] Vulnerabilities affecting OpenPrinting CUPS (September 27, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2014-0497
- criticalGitLab Patch Release: 17.4.1, 17.3.4, 17.2.8gitlab
- known exploitedCVE-2014-0502
- criticalGitLab Critical Patch Release: 16.10.10, 16.9.11, 16.8.10, 16.7.10, 16.6.10, 16.5.10, 16.4.7, 16.3.9, 16.2.11,…gitlab
- known exploitedpublic exploitCVE-2016-3714
- criticalGitLab Patch Release: 17.4.1, 17.3.4, 17.2.8gitlab
- known exploitedpublic exploitCVE-2017-1000253
- criticalGitLab Critical Patch Release: 16.10.10, 16.9.11, 16.8.10, 16.7.10, 16.6.10, 16.5.10, 16.4.7, 16.3.9, 16.2.11,…gitlab
- known exploitedCVE-2019-0344
- criticalexploitedCVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-0618
- criticalexploitedCVE-2020-0618: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-14644
- criticalexploitedCVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-15415
- criticalGitLab Critical Patch Release: 17.3.3, 17.2.7, 17.1.8, 17.0.8, 16.11.10gitlab
- known exploitedpublic exploitCVE-2021-20123
- criticalGitLab Critical Patch Release: 17.3.3, 17.2.7, 17.1.8, 17.0.8, 16.11.10gitlab
- known exploitedpublic exploitCVE-2021-20124
- criticalexploitedCVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2022-21445
- criticalexploitedCVE-2024-6670: Progress WhatsUp Gold SQL Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-25280
- criticalexploitedCVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-27348
- unknownGitLab Patch Release: 16.11.9gitlab
- known exploitedCVE-2024-38014
- criticalGitLab Critical Patch Release: 17.3.2, 17.2.5, 17.1.7gitlab
- known exploitedCVE-2024-38217
- unknownGitLab Patch Release: 16.11.9gitlab
- known exploitedCVE-2024-38226
- criticalGitLab Critical Patch Release: 17.3.2, 17.2.5, 17.1.7gitlab
- known exploitedCVE-2024-40766
- criticalexploitedCVE-2024-38217: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerabilitycisa-kev
- known exploitedCVE-2024-43461
- unknownexploitedVulnerability in SonicWall (September 10, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2024-6670
- criticalexploitedCVE-2016-3714: ImageMagick Improper Input Validation Vulnerabilitycisa-kev
- known exploitedCVE-2024-7262
- criticalexploitedCVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability cisa-kev
- known exploitedpublic exploitCVE-2024-7593
- criticalexploitedCVE-2021-20124: Draytek VigorConnect Path Traversal Vulnerability cisa-kev
- known exploitedpublic exploitCVE-2024-8190
- known exploitedpublic exploitCVE-2024-8963