CISA Adds Three Known Exploited Vulnerabilities to Catalog

🗓️ 15 Oct 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 12 Views

CISA adds three exploited vulnerabilities to its catalog, urging timely remediation for protection.

Reporter	Title	Published	Views	Family All 397
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	21 Apr 202519:44	–	githubexploit
GithubExploit	Exploit for Use After Free in Mozilla Firefox	17 Oct 202416:10	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft	5 Jul 202416:02	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	24 Sep 202418:12	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft	15 Jul 202408:07	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	5 Sep 202409:01	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft	27 Jul 202410:41	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft	16 Apr 202620:29	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	5 Sep 202409:01	–	githubexploit
0day.today	Microsoft Windows TOCTOU Local Privilege Escalation Exploit	18 Sep 202400:00	–	zdt

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

15 Oct 2024 12:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.8

EPSS0.9429

SSVC

known exploited vulnerabilities microsoft windows kernel mozilla firefox solarwinds web help desk federal civilian executive branch vulnerability management.