CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

6 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-8037 Crítica · 9.8 KEV Urgente · 70 Exploit público CWE-77 04/06/2026
Progress LoadMaster Command Injection Vulnerability
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
CVE-2024-6670 Crítica · 9.8 KEV Urgente · 90 Exploit público Ransomware CWE-89 29/08/2024
Progress WhatsUp Gold SQL Injection Vulnerability
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
CVE-2024-4885 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-22 25/06/2024
Progress WhatsUp Gold Path Traversal Vulnerability
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.
CVE-2024-4358 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-290 29/05/2024
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
CVE-2024-1212 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-78 21/02/2024
Progress Kemp LoadMaster OS Command Injection Vulnerability
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
CVE-2023-40044 Alta · 8.8 KEV Urgente · 89 Exploit público Ransomware CWE-502 27/09/2023
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.