CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- langchainlangchain vulnerable to arbitrary code execution9.8 Critical
- zimbra collaborationFile Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute...8.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreCross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker...9.0 Critical
- chatengine project chatengineCross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp...6.1 Medium
- chatengine project chatengineSQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in...7.5 High
- chatengine project chatengineSQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu...7.5 High
- chatengine project chatengineCross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in...5.4 Medium
- chatengine project chatengineCross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet...9.0 Critical
- chatengine project chatengineCross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java...9.0 Critical
- chatengine project chatengineCross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java...9.6 Critical
- lineagrafica lgdetailedorderIn the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for...7.5 High
- scipyWithdrawn: Use after free in SciPy9.8 Critical
- darktrace threat visualizerAn improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15...6.1 Medium
- zimbra collaborationAn issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary...9.8 Critical
- zimbra collaborationAn issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate...9.8 Critical
- user registration \& login and user management system with admin panel project registration \& login and user management system with admin panelA cross-site scripting (XSS) vulnerability in User Registration & Login and User Management...5.4 Medium
- nio aspen, ec6 aspen +1 moreAn issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows...7.8 High
- nexxtsolutions nebula1200-ac, nebula1200-ac firmware +1 moreNexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the...9.8 Critical
- dronecode px4 drone autopilotBuffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via...7.5 High
- pdfcrack project pdfcrackAn issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code...9.8 Critical
- duxcms project duxcmsDirectory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via ...8.1 High
- duxcms project duxcmsFile upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms...8.8 High
opensource-workshop/connect-cmsPackagistConnect-CMS Privilege Escalation Vulnerability4.3 Medium- statamic, statamic cms +1 moreStatamic's Antlers sanitizer cannot effectively sanitize malicious SVG5.5 Medium
- ethyca fidesFides vulnerable to Path Traversal in Webserver API7.5 High
- louislam uptime-kumaUptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss6.5 Medium
- louislam uptime-kumaUptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation8.8 High
- kanboardKanboard Authenticated SQL Injections vulnerability7.1 High
- kiwitcms kiwi, kiwi tcms +1 moreKiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox8.1 High
- 1panel-dev 1panel1Panel vulnerable to command injection when adding container repositories6.3 Medium
- 1panel-dev 1panel1Panel vulnerable to ommand injection when entering the container terminal6.3 Medium
- glpi-project glpiGLPI vulnerable to SQL injection through Computer Virtual Machine information8.6 High
- glpi-project glpiGLPI vulnerable to unauthenticated access to Dashboard data7.5 High
- glpi-project glpiGLPI vulnerable to unauthorized access to Dashboard data8.1 High
- jgm pandoc, debian linux +1 moreArbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input6.0 Medium
- glpi-project glpiGLPI vulnerable to SQL injection via inventory agent request8.6 High
- mechanicalsoupMechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form5.9 Medium
- glpi-project glpiGLPI vulnerable to reflected XSS in search pages6.5 Medium
- glpi-project glpiGLPI vulnerable to unauthorized access to KnowbaseItem data6.5 Medium
- ami megarac sp-x, megarac spx +1 moreUsage of Hard-coded Credentials6.6 Medium
- ami megarac sp-x, megarac spx +1 moreAMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper...5.7 Medium
- ami megarac sp-x, megarac spx +1 moreMissing Cryptographic Step6.3 Medium
- ami megarac sp-x, megarac spx +1 morehard coded cryptographic key7.1 High
- ami megarac sp-x, megarac spx +1 moreInadequate Encryption Strength7.6 High
- glpi-project glpiGLPI vulnerable to unauthorized access to User data6.5 Medium
- icinga icingaweb2-module-jira, web jira integration +1 moreicingaweb2-module-jira template and field configuration are susceptible to CSRF5.0 Medium
- diagonA heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of...7.8 High
- diagonAn access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0...5.3 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreUnauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface5.3 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreReflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface6.1 Medium
- Show moreLoading…