CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- kepware kepserverex PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively... 7.5 High
- hashicorp vault, vault enterprise +1 more Vault's LDAP Auth Method Allows for User Enumeration 5.3 Medium
- matrix sydent Sydent does not verify email server certificates 9.3 Critical
- xithrius twitch-tui twitch-tui's connection is not encrypted 7.5 High
-
silverstripe/adminPackagist Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE 5.4 Medium - qemu, fedora extra packages for enterprise linux, fedora +7 more +9 more Triggerable assertion due to race condition in hot-unplug 5.6 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 more Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 6.5 Medium
-
kubevirtopenSUSE Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container No score - debian linux, linux kernel, fedoraproject fedora +19 more +21 more Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 7.8 High
- splunk soar, soar (cloud), soar (on-premises) +2 more Unauthenticated Log Injection In Splunk SOAR 8.6 High
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Excessive time spent checking DH q parameter value 5.3 Medium
-
luceneOSS-Fuzz Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton No score - unknown woocommerce pre-orders, woocommerce pre-orders +1 more WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF 6.5 Medium
- unknown woocommerce pre-orders, woocommerce pre-orders +1 more WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF 6.5 Medium
- themegrill masteriyo, unknown lms by masteriyo +1 more LMS by Masteriyo < 1.6.8 - Information Exposure 6.5 Medium
- unknown grid-kit-premium, wpsofts portfolio gallery\, product catalog - grid kit portfolio +1 more Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting 6.1 Medium
- incsub forminator Forminator < 1.24.4 - Reflected XSS 6.1 Medium
- kaizencoders short url Short URL < 1.6.5 - Admin+ Cross Site Scripting 4.8 Medium
- johnnie2u twittee text tweet Twittee Text Tweet <= 1.0.8 - Reflected XSS 6.1 Medium
- addify abandoned cart recovery, advanced free gifts, checkout fields manager +10 more +12 more Multiple Plugins from Addify - Multiple CSRF 6.5 Medium
- asus rt-ax88u, rt-ax88u firmware +1 more ASUS RT-AX88U - Stored XSS 8.2 High
- asus rt-ax88u, rt-ax88u firmware +1 more ASUS RT-AX88U - Out-of-bounds Read - 2 7.5 High
- asus rt-ax88u, rt-ax88u firmware +1 more ASUS RT-AX88U - Out-of-bounds Read - 1 7.5 High
- ibm tririga application platform IBM TRIRIGA information disclosure 4.3 Medium
- ibm b2b advanced communications, multi-enterprise integration gateway +1 more IBM B2B Advanced Communication denial of service 7.5 High
- ibm b2b advanced communications, multi-enterprise integration gateway +1 more IBM B2B Advanced Communication cross-site scripting 5.4 Medium
- ibm storage scale container native storage access, spectrum scale container native storage access +1 more IBM Spectrum Scale privilege escalation 7.4 High
- ibm security verify governance, identity manager, security verify governance +1 more IBM Security Verify Governance path traversal 6.5 Medium
- ibm security verify governance, identity manager, security verify governance +1 more IBM Security Verify Governance command execution 7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 more Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq 8.8 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 more Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq 8.8 High
- fossbilling, fossbilling fossbilling/fossbilling +1 more Insufficient Session Expiration in fossbilling/fossbilling 3.8 Low
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Libtiff: potential integer overflow in raw2tiff.c 6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 more Libtiff: integer overflow in tiffcp.c 6.5 Medium
- advantech iview An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4... 8.8 High
- bmc control-m BMC Control-M Software v9.0.20.200 was discovered to contain a SQL injection vulnerability via... 9.8 Critical
- jeesite An issue in the delete function in the UserController class of jeesite v1.2.6 allows... 4.3 Medium
- zimbra In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10... 7.5 High
- webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... 5.4 Medium
- webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... 5.4 Medium
- webmin An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was... 6.1 Medium
- webmin An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was... 6.1 Medium
- webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... 5.4 Medium
- webmin An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was... 6.1 Medium
- webmin An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit... 6.1 Medium
- webmin An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was... 5.4 Medium
- webmin An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS)... 5.4 Medium
- phpgurukul art gallery management system Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter... 9.8 Critical
- sem-cms semcms SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at ... 9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. 6.1 Medium
- Show olderLoading…