October 2024
Published in October 2024
- criticalexploitedCVE-2024-20481: Cisco ASA and FTD Denial-of-Service Vulnerabilitycisa-kev
- known exploitedCVE-2024-20481
- criticalGitLab Patch Release: 17.5.1, 17.4.3, 17.3.6gitlab
- known exploitedpublic exploitCVE-2024-23113
- criticalGitLab Patch Release: 17.5.1, 17.4.3, 17.3.6gitlab
- known exploitedpublic exploitCVE-2024-28987
- criticalexploitedCVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-29824
- unknown[Update] Multiple vulnerabilities in Fortinet FortiManager (October 23, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2024-30088
- unknownexploitedExploitation of vulnerabilities in Ivanti Cloud Services Appliance (CSA) (October 22, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2024-37383
- criticalGitLab Critical Patch Release: 17.4.2, 17.3.5, 17.2.9gitlab
- known exploitedCVE-2024-38094
- criticalGitLab Critical Patch Release: 17.4.2, 17.3.5, 17.2.9gitlab
- known exploitedpublic exploitCVE-2024-40711
- criticalexploitedCVE-2024-23113: Fortinet Multiple Products Format String Vulnerabilitycisa-kev
- known exploitedCVE-2024-43047
- criticalexploitedCVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-43572
- criticalexploitedCVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-43573
- unknownJenkins Security Advisory 2024-10-02jenkins
- known exploitedpublic exploitCVE-2024-45519
- known exploitedpublic exploitCVE-2024-47575
- known exploitedpublic exploitCVE-2024-8190
- known exploitedCVE-2024-9379
- known exploitedCVE-2024-9380
- known exploitedCVE-2024-9537
- known exploitedpublic exploitCVE-2024-9680