Skip to content
OpenAdvisories

Archive

25 June 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.4
    CVE-2024-5009 Public exploit EPSS 17%

    WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

    In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.

  • High 7.5
    CVE-2024-37843 Public exploit Scanner template EPSS 53%

    Craft CMS SQL injection vulnerability via the GraphQL API endpoint

    Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

  • High 8.2
    CVE-2024-37742 Public exploit

    Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share cl…