Veille CVE

Août 2024

3 CVE sur 7

Critique 3 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-6670 9.8 Critique Exploitée Rançongiciel

    Progress Software Corporation WhatsUp Gold · progress whatsupgold · Progress whatsup gold

    In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

  2. CVE-2024-40766 9.8 Critique Exploitée Rançongiciel

    SonicWall SonicOS

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

  3. CVE-2024-28987 9.1 Critique Exploitée

    SolarWinds Web Help Desk · solarwinds webhelpdesk

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.