NVD disclosure day

Published threat advisories for October 28, 2024

CVE-2024-50492

ScottCart Code Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical code injection vulnerability exists in the ScottCart plugin, impacting versions up to and including 1.1. This flaw could permit attackers to inject and execute malicious code, potentially leading to system compromise. The primary concern is confirming the plugin's presence and the extent of its use within yo

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2024-50623

Cleo Products: Unrestricted File Upload Risk

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Certain Cleo products are affected by an unrestricted file upload and download vulnerability. This could allow unauthorized code execution, leading to potential system compromise and data risk. This vulnerability has been observed in ransomware campaigns.

NVD modified: NVD date unavailable • CISA KEV