Lucene search
+L

1981 matches found

Rapid7 Blog
Rapid7 Blog
added 2024/06/25 6:16 p.m.44 views

Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

On June 25, 2024, Progress Software published information on two new vulnerabilities in MOVEit Transfer and MOVEit Gateway: CVE-2024-5806, a critical authentication bypass affecting the MOVEit Transfer SFTP service in a default configuration; and CVE-2024-5805, a critical SFTP-associated...

9.1CVSS9.8AI score0.81474EPSS
SaveExploits3
NVD
NVD
added 2024/06/25 3:15 p.m.57 views

CVE-2024-5806

Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2...

9.8CVSS0.81474EPSS
SaveExploits3References2
NVD
NVD
added 2024/06/25 3:15 p.m.32 views

CVE-2024-5805

Improper Authentication vulnerability in Progress MOVEit Gateway SFTP modules allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0...

9.1CVSS0.07615EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/25 3:4 p.m.30 views

CVE-2024-5806 MOVEit Transfer Authentication Bypass Vulnerability

Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2...

9.1CVSS9.4AI score0.81474EPSS
SaveExploits3References2
CVE
CVE
added 2024/06/25 3:4 p.m.151 views

CVE-2024-5806

CVE-2024-5806 affects the MOVEit Transfer SFTP module. The issue is an Improper Authentication vulnerability that can lead to an Authentication Bypass . Affected versions include MOVEit Transfer 2023.0.x prior to 2023.0.11, 2023.1.x prior to 2023.1.6, and 2024.0.x prior to 2024.0.2. Root cause is...

9.8CVSS9.2AI score0.81474EPSS
SaveIn wildExploits3References2Affected Software1
CVE
CVE
added 2024/06/25 3:3 p.m.74 views

CVE-2024-5805

CVE-2024-5805 is an improper authentication vulnerability in Progress MOVEit Gateway (SFTP module) that allows authentication bypass affecting MOVEit Gateway 2024.0.0. A fix exists in MOVEit Gateway 2024.0.1; 2024.0.0 remains vulnerable. Vendor advisories and national/corporate feeds confirm patc...

9.1CVSS9.4AI score0.07615EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/25 3:3 p.m.21 views

CVE-2024-5805 MOVEit Gateway Authentication Bypass Vulnerability

Improper Authentication vulnerability in Progress MOVEit Gateway SFTP modules allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0...

9.1CVSS7AI score0.07615EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:29 p.m.7 views

Malicious code in ITLec.XamаrinForms.Toоl.AdvancedProgressBar (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.10 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3, whi...

9.8CVSS8.1AI score0.64779EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.6 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3 that...

9.8CVSS7.4AI score0.24306EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.6 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3, whi...

7.5CVSS6.9AI score0.00847EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.10 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3, whi...

8.6CVSS6.9AI score0.00445EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.6 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3, whi...

7.5CVSS6.8AI score0.47092EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.11 views

PT-2024-33246 · Progress · Progress Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Progress WhatsUp Gold versions prior to 2023.1.3 Description: A Remote Code Execution issue exists in Progress WhatsUp Gold, allowing an unauthenticated attacker to achieve Remote Code Execution as a service account through NmApi.exe...

9.8CVSS8.1AI score0.64779EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.7 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3, whi...

7.5CVSS6.5AI score0.69952EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.9 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3 that...

8.8CVSS7.4AI score0.1733EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.5 views

PT-2024-33247 · Progress · Progress Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Progress WhatsUp Gold versions prior to 2023.1.3 Description: The issue concerns an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. Specifically, the Apm.UI.Areas.APM.Controllers.CommunityController allows executi...

9.8CVSS8.4AI score0.24306EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.8 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3 that...

9.8CVSS7.4AI score0.99288EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2024/06/24 4:28 p.m.728 views

Exploit for Improper Authentication in Progress Moveit_Transfer

CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5...

9.8CVSS9.4AI score0.81474EPSS
SaveExploits3
NVD
NVD
added 2024/06/16 9:15 p.m.44 views

CVE-2023-27636

Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor...

6.5CVSS0.01302EPSS
SaveExploits4References2
Rows per page
Query Builder