Skip to content
OpenAdvisories

Archive

August 2024

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6670 Exploited · Ransomware Public exploit Scanner template EPSS 93%

    WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

    In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

    KEV Sep 16, 2024
  • Critical 9.1
    CVE-2024-28987 Exploited Public exploit Scanner template EPSS 93%

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

    KEV Oct 15, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    KEV Sep 24, 2024
  • Critical 9.3
    CVE-2024-42009 Exploited Public exploit Scanner template EPSS 83%

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to ste…

    KEV Jun 9, 2025