Security Vulnerabilities - CVEs Published In October 2024
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
CVSS Score
6.7
EPSS Score
0.006
Published
2024-10-08
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
CVSS Score
6.7
EPSS Score
0.006
Published
2024-10-08
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVSS Score
7.5
EPSS Score
0.013
Published
2024-10-08
Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.006
Published
2024-10-08
Windows Hyper-V Security Feature Bypass Vulnerability
CVSS Score
7.1
EPSS Score
0.009
Published
2024-10-08
Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score
8.0
EPSS Score
0.007
Published
2024-10-08
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.
CVSS Score
6.2
EPSS Score
0.002
Published
2024-10-08
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
CVSS Score
6.7
EPSS Score
0.006
Published
2024-10-08
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
CVSS Score
7.2
EPSS Score
0.156
Published
2024-10-08
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
CVSS Score
8.7
EPSS Score
0.005
Published
2024-10-08