ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

16 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: whitebearsolutions ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2024-3788
+9 in the same advisory: …3787 …3789 …3792 …3796 …3795 …3794 +3
Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through License (/admin/CDPUsers).

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through License (/admin/CDPUsers). Exploitation of this vulnerability could allow a remote user to execute arbitrary code.

NVD description · AI analysis pending		6.6
group max
<1%
  • whitebearsolutions wbsairback
—
CVE-2024-3781
+5 in the same advisory: …3782 …3785 …3784 …3786 …3783
Command injection vulnerability in the operating system.

Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows the intended command to be modified when sent to a downstream component in WBSAirback 21.02.04.

NVD description · AI analysis pending		9.1
group max
1%
  • whitebearsolutions wbsairback
—