Security Vulnerabilities - CVEs Published In October 2024
TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability.
CVSS Score
3.1
EPSS Score
0.003
Published
2024-10-08
Microsoft Office Spoofing Vulnerability
CVSS Score
6.5
EPSS Score
0.02
Published
2024-10-08
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.018
Published
2024-10-08
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
CVSS Score
5.5
EPSS Score
0.006
Published
2024-10-08
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVSS Score
7.1
EPSS Score
0.012
Published
2024-10-08
Power BI Report Server Spoofing Vulnerability
CVSS Score
6.9
EPSS Score
0.007
Published
2024-10-08
Visual Studio Collector Service Denial of Service Vulnerability
CVSS Score
5.5
EPSS Score
0.008
Published
2024-10-08
Outlook for Android Elevation of Privilege Vulnerability
CVSS Score
5.7
EPSS Score
0.011
Published
2024-10-08
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.013
Published
2024-10-08
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.013
Published
2024-10-08