Weekly Briefing: Top 5 Hacker-Relevant Vulnerabilities

Calendar Week 35, 2024

Every 15 minutes, a new vulnerability emerges, leading to an average of around 650 new vulnerabilities each week — an overwhelming pace to manage. The average cost of a data breach has skyrocketed to a record high of $4.45 million globally. To help organizations allocate resources effectively and address the most risky vulnerabilities, we are developing a novel decision-tree-based prioritization approach. Trained on over 100,000 vulnerabilities and threat intelligence, this method extends industry standards like CVSS and EPSS, capturing the real-time risk and context of new vulnerabilities. In this series, we present the top 5 vulnerabilities of the week based on a sub-tree of the model.

Wordpress Litespeed Cache - Unauthenticated Remote Attack - Incorrect Privilege Assignment Vulnerability - CVE-2024-28000 AVTECH IP Cameras - Unauthenticated Remote Attack - Command Injection Vulnerability - CVE-2024-7029 Apache OFBiz - Unauthenticated Remote Attack - Path Traversal and Incorrect Authorization Vulnerabilities - CVE-2024-32113, CVE-2024-38856 Google Chromium V8 - Unauthenticated Remote Attack - Confusion and Inappropriate Implementation Vulnerabilities - CVE-2024-5274, CVE-2024-7965 SonicWall SonicOS - Unauthenticated Remote Attack - Improper Access Control Vulnerability - CVE-2024-40766