CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- travianz project travianzIn TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an...9.8 Critical
- travianz project travianzThe cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in...9.8 Critical
- travianz project travianzPHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote...7.2 High
- online examination system project examination systemThe Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery ...6.5 Medium
- jerryscriptAn issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive...7.5 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...5.4 Medium
- ai-dev declinaisons a la voleeai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability...8.8 High
- gis3w g3w-suiteA Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows...5.4 Medium
- kerawen omnichannel stocksSQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote...9.8 Critical
- multitech conduit ap mtcap2-l4e1-868-042a firmware, conduit ap mtcap2-l4e1 firmware +1 moreCross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1...8.8 High
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Cross-Site Request Forgery8.8 High
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort7.5 High
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Weak Password Requirements7.5 High
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Cross-site Scripting8.0 High
- piigab m-bus softwarepack, m-bus 900s firmware +1 morePiiGAB M-Bus Plaintext Storage of a Password6.5 Medium
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Use of Hard-coded Credentials9.8 Critical
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Unprotected Transport of Credentials7.5 High
- piigab m-bus softwarepack, m-bus 900s firmware +1 morePiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts5.9 Medium
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Code Injection8.8 High
- vmware sd-wan edge, sd-wan edge firmware +1 moreVMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker...7.5 High
- functional sentrySentry CORS misconfiguration vulnerability6.8 Medium
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- graylog, graylog2 graylog2-server +1 morePartial path traversal vulnerability in Support Bundle feature of Graylog3.3 Low
- graylog, graylog2 graylog2-server +1 moreInsecure source port usage for DNS queries in Graylog3.7 Low
- graylog, graylog2 graylog2-server +1 moreUser session is still usable after logout in graylog2-server2.6 Low
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- yt-dlp, fedoraproject fedora, youtube-dlc project youtube-dlc +1 more +3 moreyt-dlp File Downloader cookie leak6.1 Medium
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.1 High
- joinmastodon mastodonMastodon's verified profile links can be formatted in a misleading way5.4 Medium
- joinmastodon mastodonMastodon vulnerable to Denial of Service through slow HTTP responses7.5 High
- joinmastodon mastodonMastodon vulnerable to arbitrary file creation through media attachments10.0 Critical
- rotem dynamics crm, rotem-dynamics rotem crm +1 moreRotem Dynamics Rotem CRM OTP URI Interface information exposure5.3 Medium
- joinmastodon mastodonMastodon vulnerable to Cross-site Scripting through oEmbed preview cards9.3 Critical
- goauthentik authentikAuthentik lacks Proxy IP headers validation8.3 High
- thinutech thinucms, thinu-cms +1 moreThinuTech ThinuCMS category.php sql injection6.3 Medium
- servicenow, servicenow now user experience +1 moreServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS)...4.3 Medium
@vendure/admin-ui-pluginnpm@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerabilityNo score- oauth2-server project oauth2-serverleague/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase8.2 High
- rgrove sanitize, debian linux +1 moreSanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content7.1 High
- sqlfluffSQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.6.3 Medium
- milesight ur32l, ur32l firmware +1 moreAn OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of...7.2 High
- milesight ur32l, ur32l firmware +1 moreA directory traversal vulnerability exists in the luci2-io file-export mib functionality of...6.5 Medium
- milesight ur32l, ur32l firmware +1 moreA buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3...9.8 Critical
- milesight ur32l, ur32l firmware +1 moreAn access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3...7.5 High
- milesight ur32l, ur32l firmware +1 moreAn OS command injection vulnerability exists in the libzebra.so bridge_group functionality of...7.2 High
- milesight milesightvpnAn authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality...7.3 High
- milesight ur32l, ur32l firmware +1 moreAn os command injection vulnerability exists in the libzebra.so change_hostname functionality of...7.2 High
- milesight milesightvpnA directory traversal vulnerability exists in the server.js start functionality of Milesight VPN...7.5 High
- Show moreLoading…