Skip to content
OpenAdvisories

Archive

August 2024

Vulnerabilities first published in this month (UTC), newest first.

← July 2024 2024 / August September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6670 Exploited · Ransomware Public exploit EPSS 93%

    WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

    In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

    Progress Software WhatsUp Gold
    KEV Sep 16, 2024
  • Critical 9.1
    CVE-2024-28987 Exploited Public exploit EPSS 93%

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

    SolarWinds Web Help Desk
    KEV Oct 15, 2024
  • High 8.8
    CVE-2024-7971 Exploited Public exploit EPSS 21%

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a…

    Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
    KEV Aug 26, 2024
  • High 8.8
    CVE-2024-7965 Exploited Public exploit EPSS 19%

    Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exp…

    Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
    KEV Aug 28, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • High 7.8
    CVE-2024-38193 Exploited Public exploit EPSS 29%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 13, 2024
  • High 8.8
    CVE-2024-7399 Exploited Public exploit EPSS 92%

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before …

    Samsung Electronics MagicINFO 9 Server
    KEV Apr 24, 2026
  • High 8.1
    CVE-2024-38856 Exploited Public exploit EPSS 99%

    Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

    Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of …

    Apache Software Foundation Apache OFBiz
    KEV Aug 27, 2024
  • Critical 9.3
    CVE-2024-42009 Exploited Public exploit EPSS 83%

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to ste…

    roundcube roundcube Debian Ubuntu
    KEV Jun 9, 2025