Security Vulnerabilities - CVEs Published In March 2024
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
CVSS Score
7.3
EPSS Score
0.005
Published
2024-03-12
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.
CVSS Score
8.4
EPSS Score
0.001
Published
2024-03-12
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
CVSS Score
5.9
EPSS Score
0.002
Published
2024-03-12
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
CVSS Score
7.4
EPSS Score
0.004
Published
2024-03-12
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-03-12
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.
CVSS Score
5.3
EPSS Score
0.002
Published
2024-03-12
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
CVSS Score
9.8
EPSS Score
0.024
Published
2024-03-12
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.
CVSS Score
5.3
EPSS Score
0.006
Published
2024-03-12
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.
CVSS Score
5.3
EPSS Score
0.001
Published
2024-03-12
The f(x) Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the API. This makes it possible for unauthenticated attackers to obtain page and post contents of a site protected with this plugin.
CVSS Score
5.3
EPSS Score
0.004
Published
2024-03-12