#ExploitObserverAlert
CVE-2023-0342
DESCRIPTION: Exploit Observer has 7 entries in 3 file formats related to CVE-2023-0342. MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
FIRST-EPSS: 0.000460000
NVD-IS: 1.4
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.9205301
CVE-2023-0342
DESCRIPTION: Exploit Observer has 7 entries in 3 file formats related to CVE-2023-0342. MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
FIRST-EPSS: 0.000460000
NVD-IS: 1.4
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.9205301
#ExploitObserverAlert
CVE-2024-1441
DESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2024-1441. An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.6969988
CVE-2024-1441
DESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2024-1441. An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.6969988
#ExploitObserverAlert
CVE-2023-2700
DESCRIPTION: Exploit Observer has 13 entries in 3 file formats related to CVE-2023-2700. A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.
FIRST-EPSS: 0.000420000
NVD-IS: 3.6
NVD-ES: 1.8
ARPS-EXPLOITABILITY: 0.7000953
CVE-2023-2700
DESCRIPTION: Exploit Observer has 13 entries in 3 file formats related to CVE-2023-2700. A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.
FIRST-EPSS: 0.000420000
NVD-IS: 3.6
NVD-ES: 1.8
ARPS-EXPLOITABILITY: 0.7000953
#ExploitObserverAlert
CVE-2024-31080
DESCRIPTION: Exploit Observer has 21 entries in 6 file formats related to CVE-2024-31080. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7065507
CVE-2024-31080
DESCRIPTION: Exploit Observer has 21 entries in 6 file formats related to CVE-2024-31080. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7065507
#ExploitObserverAlert
CVE-2023-50868
DESCRIPTION: Exploit Observer has 37 entries in 8 file formats related to CVE-2023-50868. The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
FIRST-EPSS: 0.000460000
ARPS-EXPLOITABILITY: 0.7531041
CVE-2023-50868
DESCRIPTION: Exploit Observer has 37 entries in 8 file formats related to CVE-2023-50868. The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
FIRST-EPSS: 0.000460000
ARPS-EXPLOITABILITY: 0.7531041
#ExploitObserverAlert
CVE-2024-3092
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3092. An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.775
CVE-2024-3092
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3092. An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.775
#ExploitObserverAlert
CVE-2024-21509
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21509. Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.js.
FIRST-EPSS: 0.000440000
ARPS-EXPLOITABILITY: 0.775
CVE-2024-21509
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21509. Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.js.
FIRST-EPSS: 0.000440000
ARPS-EXPLOITABILITY: 0.775
#ExploitObserverAlert
CVE-2021-21238
DESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2021-21238. PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.
FIRST-EPSS: 0.001070000
NVD-IS: 3.6
NVD-ES: 2.8
ARPS-EXPLOITABILITY: 0.6908515
CVE-2021-21238
DESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2021-21238. PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.
FIRST-EPSS: 0.001070000
NVD-IS: 3.6
NVD-ES: 2.8
ARPS-EXPLOITABILITY: 0.6908515
#ExploitObserverAlert
CVE-2023-46724
DESCRIPTION: Exploit Observer has 18 entries in 4 file formats related to CVE-2023-46724. Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.
FIRST-EPSS: 0.006100000
NVD-IS: 3.6
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.7187882
CVE-2023-46724
DESCRIPTION: Exploit Observer has 18 entries in 4 file formats related to CVE-2023-46724. Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.
FIRST-EPSS: 0.006100000
NVD-IS: 3.6
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.7187882
#ExploitObserverAlert
CVE-2024-24786
DESCRIPTION: Exploit Observer has 18 entries in 5 file formats related to CVE-2024-24786. The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7602171
CVE-2024-24786
DESCRIPTION: Exploit Observer has 18 entries in 5 file formats related to CVE-2024-24786. The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7602171
#ExploitObserverAlert
CVE-2024-25617
DESCRIPTION: Exploit Observer has 7 entries in 2 file formats related to CVE-2024-25617. Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7046419
CVE-2024-25617
DESCRIPTION: Exploit Observer has 7 entries in 2 file formats related to CVE-2024-25617. Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.7046419
#ExploitObserverAlert
CVE-2023-6489
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2023-6489. A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 16.10.2 which allows an attacker to spike the GitLab instance resources usage resulting in service degradation via chat integration feature.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.775
CVE-2023-6489
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2023-6489. A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 16.10.2 which allows an attacker to spike the GitLab instance resources usage resulting in service degradation via chat integration feature.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.775
#ExploitObserverAlert
CVE-2024-21507
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21507. Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon (:) character within a value of the attacker-crafted key.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.775
CVE-2024-21507
DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21507. Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon (:) character within a value of the attacker-crafted key.
FIRST-EPSS: 0.000450000
ARPS-EXPLOITABILITY: 0.775
#ExploitObserverAlert
CVE-2022-29599
DESCRIPTION: Exploit Observer has 16 entries in 3 file formats related to CVE-2022-29599. In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
FIRST-EPSS: 0.023170000
NVD-IS: 5.9
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.701915
CVE-2022-29599
DESCRIPTION: Exploit Observer has 16 entries in 3 file formats related to CVE-2022-29599. In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
FIRST-EPSS: 0.023170000
NVD-IS: 5.9
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.701915
#ExploitObserverAlert
CVE-2022-47412
DESCRIPTION: Exploit Observer has 14 entries in 3 file formats related to CVE-2022-47412. Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.
FIRST-EPSS: 0.000560000
NVD-IS: 2.7
NVD-ES: 2.3
ARPS-EXPLOITABILITY: 0.6859383
CVE-2022-47412
DESCRIPTION: Exploit Observer has 14 entries in 3 file formats related to CVE-2022-47412. Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.
FIRST-EPSS: 0.000560000
NVD-IS: 2.7
NVD-ES: 2.3
ARPS-EXPLOITABILITY: 0.6859383
#ExploitObserverAlert
CVE-2023-29483
DESCRIPTION: Exploit Observer has 10 entries in 4 file formats related to CVE-2023-29483. eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.
FIRST-EPSS: 0.000440000
ARPS-EXPLOITABILITY: 0.7538375
CVE-2023-29483
DESCRIPTION: Exploit Observer has 10 entries in 4 file formats related to CVE-2023-29483. eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.
FIRST-EPSS: 0.000440000
ARPS-EXPLOITABILITY: 0.7538375
#ExploitObserverAlert
CVE-2023-51515
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-51515. Missing Authorization vulnerability in Undsgn Uncode Core allows Privilege Escalation.This issue affects Uncode Core: from n/a through 2.8.8.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571
CVE-2023-51515
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-51515. Missing Authorization vulnerability in Undsgn Uncode Core allows Privilege Escalation.This issue affects Uncode Core: from n/a through 2.8.8.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571
#ExploitObserverAlert
CVE-2023-43177
DESCRIPTION: Exploit Observer has 14 entries in 8 file formats related to CVE-2023-43177. CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
FIRST-EPSS: 0.960880000
NVD-IS: 5.9
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.9115715
CVE-2023-43177
DESCRIPTION: Exploit Observer has 14 entries in 8 file formats related to CVE-2023-43177. CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
FIRST-EPSS: 0.960880000
NVD-IS: 5.9
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.9115715
#ExploitObserverAlert
CVE-2023-51409
DESCRIPTION: Exploit Observer has 6 entries in 2 file formats related to CVE-2023-51409. Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6966939
CVE-2023-51409
DESCRIPTION: Exploit Observer has 6 entries in 2 file formats related to CVE-2023-51409. Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6966939
#ExploitObserverAlert
CVE-2023-51499
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-51499. Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipping Per Product: from n/a through 2.5.4.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571
CVE-2023-51499
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-51499. Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipping Per Product: from n/a through 2.5.4.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571
#ExploitObserverAlert
CVE-2023-52211
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-52211. Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571
CVE-2023-52211
DESCRIPTION: Exploit Observer has 5 entries in 1 file formats related to CVE-2023-52211. Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0.
FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.6828571