June 2024

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-4885 Exploited Public exploit Scanner template EPSS 99%

  WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

  In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

  Progress Software WhatsUp Gold
  Jun 25, 2024

  KEV Mar 3, 2025
• Critical 9.8
  CVE-2024-34102 Exploited Public exploit Scanner template EPSS 100%

  XXE can expose crypt key and other secrets granting full admin access

  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

  Adobe Adobe Commerce magento/community-edition Packagist
  Jun 13, 2024

  KEV Jul 17, 2024
• Critical 9.8
  CVE-2024-4577 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Argument Injection in PHP-CGI

  In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32…

  PHP Group PHP php php83 Azure Linux Alpine Wolfi
  Jun 9, 2024

  KEV Jun 12, 2024