A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack. CVSSv3.1 9.8 (CRITICAL) · EPSS 63th percentile
The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. CVSSv3.1 6.1 (MEDIUM) · EPSS 97th percentile
Elastic Security Labs disclosed a flaw in Windows Protected Process Light (PPL) that allows attackers running as SYSTEM to modify the security tokens of protected anti-malware processes, effectively neutering them without termination. The attack exploits a documentation discrepancy in OpenProcessToken and the absence of trust labels on PPL token security descriptors, enabling privilege and integrity level reduction. Microsoft classified the issue as moderate severity and declined to issue a security update, though Elastic has released PPLGuard mitigation code and incorporated fixes into their own products.
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured. CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 56th percentile
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters. CVSSv3.1 9.8 (CRITICAL) · EPSS 67th percentile
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. CVSSv3.1 7.5 (HIGH) · EPSS 97th percentile
Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature. CVSSv3.1 8.8 (HIGH) · EPSS 99th percentile
Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16. CVSSv3.1 8.8 (HIGH) · EPSS 48th percentile
Windows Graphics Component Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 92th percentile
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 59th percentile
Windows Common Log File System Driver Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 95th percentile
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVSSv3.1 8.3 (HIGH) · EPSS 62th percentile
Windows Secure Channel Denial of Service Vulnerability CVSSv3.1 7.5 (HIGH) · EPSS 98th percentile
Windows Secure Channel Denial of Service Vulnerability CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile
Power BI Report Server Spoofing Vulnerability CVSSv3.1 8.2 (HIGH) · EPSS 53th percentile
Windows iSCSI Discovery Service Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 76th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile
Microsoft ODBC Driver Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile
Microsoft ODBC Driver Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability CVSSv3.1 8.7 (HIGH) · EPSS 28th percentile
Microsoft SharePoint Server Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile
Microsoft Word Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile
Microsoft Publisher Security Feature Bypass Vulnerability CVSSv3.1 7.3 (HIGH) · EPSS 96th percentile
Microsoft SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile