Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.1	EPSS 1.6%	CVE-2024-3777014Finger · n/a Critical9.1EPSS 1.6%2024-07-10CVE Database V5CVE-2024-37770 14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. EPSS 1.6%Vulnerability	CVE Database V5	2024-07-10
High	8.8	EPSS 0.5%	CVE-2024-3776914Finger · n/a High8.8EPSS 0.5%2024-07-05CVE Database V5CVE-2024-37769 Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request. EPSS 0.5%Vulnerability	CVE Database V5	2024-07-05
High	7.5	EPSS 0.4%	CVE-2024-3776714Finger · n/a High7.5EPSS 0.4%2024-07-05CVE Database V5CVE-2024-37767 Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-05

Page 1 of 1