Skip to content
OpenAdvisories

Archive

August 2024

Vulnerabilities first published in this month (UTC), newest first.

← July 2024 2024 / August September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6670 Exploited · Ransomware Public exploit Scanner template EPSS 93%

    WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

    In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

    Progress Software WhatsUp Gold
    KEV Sep 16, 2024
  • Critical 9.3
    CVE-2024-40766 Exploited · Ransomware EPSS 18%

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

    SonicWall SonicOS Network devices
    KEV Sep 9, 2024
  • Medium 6.6
    CVE-2024-39717 Exploited

    The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only ava…

    Versa Director
    KEV Aug 23, 2024
  • Critical 9.1
    CVE-2024-28987 Exploited Public exploit Scanner template EPSS 93%

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

    SolarWinds Web Help Desk
    KEV Oct 15, 2024
  • High 8.8
    CVE-2024-7971 Exploited Public exploit EPSS 21%

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Aug 26, 2024
  • High 8.8
    CVE-2024-7965 Exploited Public exploit EPSS 19%

    Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exp…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Aug 28, 2024
  • Critical 9.3
    CVE-2024-7262 Exploited

    Arbitrary Code Execution in WPS Office

    Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-clic…

    Kingsoft WPS Office
    KEV Sep 3, 2024
  • Critical 9.8
    CVE-2024-28986 Exploited Scanner template EPSS 85%

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, Sola…

    SolarWinds Web Help Desk
    KEV Aug 15, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • High 8.8
    CVE-2024-38189 Exploited

    Microsoft Project Remote Code Execution Vulnerability

    Microsoft Project Remote Code Execution Vulnerability

    Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
    KEV Aug 13, 2024
  • High 7.8
    CVE-2024-38107 Exploited

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • High 7.0
    CVE-2024-38106 Exploited

    Windows Kernel Elevation of Privilege Vulnerability

    Windows Kernel Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • Medium 6.5
    CVE-2024-38213 Exploited EPSS 14%

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Windows Mark of the Web Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • High 7.8
    CVE-2024-38193 Exploited Public exploit EPSS 29%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • High 7.5
    CVE-2024-38178 Exploited EPSS 41%

    Scripting Engine Memory Corruption Vulnerability

    Scripting Engine Memory Corruption Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • High 7.2
    CVE-2024-7694 Exploited

    TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload

    ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the s…

    TeamT5 ThreatSonar Anti-Ransomware
    KEV Feb 17, 2026
  • Medium 6.1
    CVE-2024-27443 Exploited Scanner template EPSS 25%

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists i…

    KEV May 19, 2025
  • Medium 6.8
    CVE-2024-41710 Exploited EPSS 42%

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit,…

    KEV Feb 12, 2025
  • High 8.8
    CVE-2024-7399 Exploited Public exploit Scanner template EPSS 92%

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before …

    Samsung Electronics MagicINFO 9 Server
    KEV Apr 24, 2026
  • High 8.1
    CVE-2024-38856 Exploited Public exploit Scanner template EPSS 99%

    Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

    Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of …

    Apache Software Foundation Apache OFBiz
    KEV Aug 27, 2024
  • Critical 9.3
    CVE-2024-42009 Exploited Public exploit Scanner template EPSS 83%

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to ste…

    roundcube roundcube Debian Ubuntu
    KEV Jun 9, 2025