Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Sbond records in CISA KEVNo Sbond vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00441 · Published 2024-11-08 · No fix listed CWE-319
Priority MEDIUM 45
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02794 · Published 2024-10-11 · No fix listed CWE-613
