Skip to content
OpenAdvisories

Archive

25 June 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4885 Exploited Public exploit Scanner template EPSS 99%

    WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

    In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

    KEV Mar 3, 2025
  • Medium 6.8
    CVE-2024-37085 Exploited · Ransomware Public exploit EPSS 27%

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) pe…

    KEV Jul 30, 2024