CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- google android, mediatek, inc. mt6739, mt6768, mt6771, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8786, mt8789, mt8797 +1 moreIn cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6739, mt6768, mt6771, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8786, mt8789, mt8797 +1 moreIn cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds write due to an integer overflow. This could...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797 +1 moreIn rpmb, there is a possible out of bounds write due to a logic error. This could lead to local...6.7 Medium
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file...3.3 Low
- nvidia dgx a100/a800, dgx a100, dgx a100 firmware +2 more +4 moreNVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause...7.5 High
- nvidia dgx a100/a800, dgx a100, dgx a100 firmware +2 more +4 moreNVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution...7.5 High
- nvidia vgpu software, gpu display driver +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a...7.1 High
- nvidia gpu display driver for linux, gpu display driver +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an...7.1 High
- ibm iIBM i command execution8.6 High
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 more?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in...6.5 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 moreThe affected TBox RTUs allow low privilege users to access software security tokens of higher...6.5 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 more?The affected TBox RTUs generate software security tokens using insufficient entropy. The random...5.9 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +8 more +10 moreThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration...7.2 High
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 moreThe affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure...6.5 Medium
- eng knowage, knowagelabs knowage-server +1 moreKnowage-Server vulnerable to Path traversal in download functionalities6.5 Medium
- stalin-143 website, kingstemple the king\'s temple church website +1 moreThe King's Temple Church website Leaked Stripe API Key in Public Code Repository7.5 High
- google chromeOut of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to...4.6 Medium
- zope products.cmfcorezopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module7.5 High
- cometbftCometBFT PeerState JSON serialization deadlock3.7 Low
- cometbftCometBFT may duplicate transactions in the mempool's data structures8.2 High
- 2fauthCross-Site Scripting (XSS) at Account creation in 2FAuth6.1 Medium
terraformSUSESecurity update for terraformNo scoreamazon-ecs-initopenSUSESecurity update for amazon-ecs-initNo scorejsignOSS-FuzzSecurity exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.readNo score- apache software foundation airflow apache hive provider, apache apache-airflow-providers-apache-hive +1 moreApache Airflow Hive Provider Beeline RCE with Principal9.8 Critical
- trellix enterprise security managerA vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file...8.1 High
- trellix enterprise security managerAn OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly...7.8 High
- trellix moveAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier...4.4 Medium
prometheus-sap_host_exporterSUSESecurity update for prometheus-sap_host_exporterNo scoreprometheus-sap_host_exporterSUSESecurity update for prometheus-sap_host_exporterNo score- nullsoft scriptable install systemNullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an...5.3 Medium
- osslsigncode project osslsigncodeBuffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker...7.8 High
- maxsite cmsCross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute...6.1 Medium
- langchainlangchain arbitrary code execution vulnerability9.8 Critical
- bbs-goCross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote...5.4 Medium
- bbs-goCross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote...5.4 Medium
- openimageioBuffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute...7.8 High
- zzcmsCross Site Request Forgery vulnerability in ZZCMS v.2023 alows a remote attacker to gain...8.8 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 High
- anydeskAnyDesk 7.0.8 allows remote Denial of Service.7.5 High
- arcserve udpArcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at...9.8 Critical
- heroelectronix qubo hcd01, qubo hcd01 firmware, qubo hcd02 +1 more +3 moreHero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default,...8.8 High
- jerrscript-project jerryscriptAn issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary...9.8 Critical
- thedaylightstudio fuel cmsFile Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code...9.8 Critical
- thedaylightstudio fuel cmsCross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker...5.4 Medium
- thedaylightstudio fuel cmsPermissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code...9.8 Critical
serenityOSS-FuzzHeap-buffer-overflow in Gfx::BooleanDecoder::initializeNo scoreassimpOSS-FuzzHeap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeaderNo score- gstreamerGStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- Show moreLoading…