Veille CVE

Lundi 16 septembre 2024

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2024-6670 – Non évaluée Exploitée Rançongiciel

    Progress WhatsUp Gold

    Progress WhatsUp Gold SQL Injection Vulnerability — Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.

  2. CVE-2024-43461 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows MSHTML Platform Spoofing Vulnerability — Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.