THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-23113 | Format String Vulnerability Enables Unauthenticated RCE in Fortinet FortiOS and FortiProxy | 9.8 | 62% | KEV | KEV |
| CVE-2024-28987 | Hardcoded Credential in SolarWinds Web Help Desk Allows Unauthenticated Access | 9.1 | 93% | KEV | KEV |
| CVE-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition Privilege Escalation (CVE-2024-30088) | 7.0 | 68% | KEVRansomware | KEV |
| CVE-2024-38178 | Unauthenticated RCE via Memory Corruption in Microsoft Windows Scripting Engine | 7.5 | 41% | KEV | KEV |
| CVE-2024-40711 | Unauthenticated Deserialization RCE in Veeam Backup & Replication | 9.8 | 90% | KEVRansomwarePoC | KEV |
| CVE-2024-44133 | This issue was addressed by removing the vulnerable code | 5.5 | 7% | ||
| CVE-2024-8963 | Unauthenticated Path Traversal in Ivanti Cloud Services Appliance | 9.1 | 99% | KEV | KEV |
| CVE-2024-9164 | An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4… | 8.8 | 1% | ||
| CVE-2024-9486 | A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process | 9.8 | 2% | ||
| CVE-2024-9487 | Improper SAML Signature Verification Bypasses SSO in GitHub Enterprise Server | 9.5 | 26% |
From the original article
6 min read at thehackernews.com
The Hacker News Oct 21, 2024 Cybersecurity / Weekly Recap Hi there! Here’s your quick update on the latest in cybersecurity. Hackers are using new tricks to break into systems we thought were secure—like finding hidden doors in locked houses.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.