Veille CVE

Août 2024

5 CVE

Critique 3 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-6670 9.8 Critique Exploitée Rançongiciel

    Progress Software Corporation WhatsUp Gold · progress whatsupgold · Progress whatsup gold

    In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

  2. CVE-2024-40766 9.8 Critique Exploitée Rançongiciel

    SonicWall SonicOS

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

  3. CVE-2024-28987 9.1 Critique Exploitée

    SolarWinds Web Help Desk · solarwinds webhelpdesk

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

  4. CVE-2024-7262 7.8 Élevée Exploitée

    Kingsoft WPS Office · kingsoft wps_office

    Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document

  5. CVE-2024-7694 7.2 Élevée Exploitée

    TeamT5 ThreatSonar Anti-Ransomware

    ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.