Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-18 CVE-2024-4740 Use of Hard-coded Credentials vulnerability in Moxa Mxsecurity 1.0/1.0.1
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials.
network
low complexity
moxa CWE-798
7.5
2024-10-18 CVE-2023-6055 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates.
network
high complexity
bitdefender CWE-295
7.4
2024-10-18 CVE-2023-6056 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates.
network
high complexity
bitdefender CWE-295
7.4
2024-10-18 CVE-2023-6057 Unspecified vulnerability in Bitdefender Total Security
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of certificates issued using the DSA signature algorithm.
network
high complexity
bitdefender
7.4
2024-10-18 CVE-2024-10079 Deserialization of Untrusted Data vulnerability in Newsignature WP Easy Post Types
The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' function.
network
low complexity
newsignature CWE-502
8.8
2024-10-18 CVE-2024-9264 Command Injection vulnerability in Grafana 11.0.0
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input.
network
low complexity
grafana CWE-77
8.8
2024-10-17 CVE-2024-10093 Uncontrolled Search Path Element vulnerability in Vso-Software Convertxtodvd 7.0.0.83
A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83.
local
low complexity
vso-software CWE-427
7.8
2024-10-17 CVE-2024-43578 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
network
low complexity
microsoft
8.3
2024-10-17 CVE-2024-43579 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
network
low complexity
microsoft
8.3
2024-10-17 CVE-2024-43587 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
network
high complexity
microsoft
8.1