Sbond

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Sbond records in CISA KEV

No Sbond vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Watcharr · all components

TI-2024-34053 CVE-2024-50634 · GHSA-mmv8-59h2-5hqj

HIGH 73

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-11-08 No fix listed CWE-319

TI-2024-32532 CVE-2024-48827 · GHSA-9q4h-7j59-q25x

MEDIUM 45

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02794 Published 2024-10-11 No fix listed CWE-613