Veille CVE

Mardi 15 octobre 2024

2 CVE sur 3

Critique 2 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2024-9680 9.8 Critique Exploitée Rançongiciel

    mozilla firefox · Mozilla Firefox ESR · mozilla thunderbird · mozilla firefox_esr

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

  2. CVE-2024-28987 9.1 Critique Exploitée

    SolarWinds Web Help Desk · solarwinds webhelpdesk

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.