CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Sensitive Information Disclosure in ArubaOS Command Line Interface6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Sensitive Information Disclosure in ArubaOS Command Line Interface6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in the ArubaOS Command Line Interface7.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in the ArubaOS Command Line Interface7.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in ArubaOS Web-based Management Interface7.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreUnauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface8.8 High
- gitea, go-gitea go-gitea/gitea +1 moreOpen Redirect in go-gitea/gitea3.0 Low
javaparserOSS-FuzzSecurity exception in com.github.javaparser.ast.validator.TreeVisitorValidator.acceptNo score- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips mode7.0 High
- huawei emui, harmonyos +1 moreKey management vulnerability on system. Successful exploitation of this vulnerability may affect...9.1 Critical
- huawei emui, harmonyos +1 moreVulnerability of unstrict data verification and parameter check. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of incomplete read and write permission verification in the GPU module. Successful...9.8 Critical
- tyan s5552 bmc, s5552\/s5552gm2nr firmware, s5552\/s5552gm4nr firmware +2 more +4 moreTLS Private Key Accessible to External Parties5.8 Medium
- huawei emui, harmonyos +1 moreVulnerability of incomplete read and write permission verification in the GPU module. Successful...9.8 Critical
- moxa tn-5900, tn-5900 series, tn-5900 firmware +2 moreTN-5900 Series User Enumeration Vulnerability5.3 Medium
- mozilla firefoxMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory...8.8 High
- mozilla firefoxA website could prevent a user from exiting full-screen mode via alert and prompt calls. This...6.5 Medium
- mozilla firefoxA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry...8.8 High
- frauscher diagnostic system 101, frauscher sensortechnik diagnostic system fds101 for fadc/fadci +1 moreFrauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability7.5 High
- mozilla firefoxUploading files which contain symlinks may have allowed an attacker to trick a user into...6.5 Medium
- mozilla firefoxThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This...6.5 Medium
- mozilla firefoxA website could have obscured the fullscreen notification by using an option element by...6.5 Medium
- mozilla firefoxInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have...7.8 High
- mozilla firefoxWhen Firefox is configured to block storage of all cookies, it was still possible to store data...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a URL with a scheme handled by...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...8.8 High
- apache any23Apache Any23: Possible excessive allocation of resources reading input.6.5 Medium
- progress moveit transferIn Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7),...9.1 Critical
- progress moveit transferIn Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022...7.5 High
- progress moveit transferIn Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7),...8.1 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...5.3 Medium
- protobufjs project protobufjsprotobufjs Prototype Pollution vulnerability9.8 Critical
- loxone miniserver go gen 2, miniserver go gen 2 firmware +1 moreLoxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to...7.8 High
- loxone miniserver go gen 2, miniserver go gen 2 firmware +1 moreThe root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded...7.8 High
- loxone miniserver go gen 2, miniserver go gen 2 firmware +1 moreThe websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows...7.2 High
- madefornet http debuggerIn MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry...5.3 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view...4.9 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write Vulnerability7.8 High
- taogogo taocmstaocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- sophos iviewCross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname...6.1 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability7.8 High
- kodiA divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers...5.5 Medium
- paxtechnology pax a930, pax a930 firmware +1 morePAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a...6.7 Medium
- paxtechnology pax a930, pax a930 firmware +1 morePAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary...6.8 Medium
- paxtechnology pax a930 firmwarePAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root...6.7 Medium
- Show moreLoading…