Veille CVE

Août 2024

3 CVE

  1. CVE-2024-40766 9.8 Critique Exploitée Rançongiciel

    SonicWall SonicOS

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

  2. CVE-2024-28987 9.1 Critique Exploitée

    SolarWinds Web Help Desk · solarwinds webhelpdesk

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

  3. CVE-2024-7694 7.2 Élevée Exploitée

    TeamT5 ThreatSonar Anti-Ransomware

    ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.