Skip to content
OpenAdvisories

Archive

25 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-6592 Public exploit

    WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

    An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to …

  • Critical 9.8
    CVE-2024-8275 Public exploit EPSS 50%

    The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection

    The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function in all versions up to, and including, 6.6.4 due to insufficient escaping on the user supplied parameter and lack of su…