EresusSecurity

Selected CVE References

Selected critical vulnerability records from 2023–2024. Follow each NVD source link; this reference set is not live or real-time.

Selected CVE Reference Set

CURATED ARCHIVE
CVE-2024-3094
CVSS: 10

Malicious code discovered in the upstream tarballs of xz, starting with version 5.6.0. Allows unauthenticated remote code execution.

Published: 3/29/2024
CVE-2024-3400
CVSS: 10

A command injection vulnerability in GlobalProtect feature of Palo Alto Networks PAN-OS software allows unauthenticated execution.

Published: 4/12/2024
CVE-2024-21111
CVSS: 9.8

Oracle WebLogic Server vulnerability allowing unauthenticated remote code execution via T3/IIOP protocols.

Published: 4/16/2024
CVE-2023-46805
CVSS: 8.2

Authentication bypass vulnerability in the web component of Ivanti ICS limits affecting 9.x and 22.x gateway versions.

Published: 1/10/2024
CVE-2024-1709
CVSS: 10

ConnectWise ScreenConnect authentication bypass flaw leading to immediate administrative control dropping ransomware.

Published: 2/19/2024
CVE-2023-4966
CVSS: 9.4

Citrix Bleed: Information Disclosure in NetScaler ADC and Gateway allowing session token extraction and replay.

Published: 10/10/2023