CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- cisco webex meetingsA vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated,...4.3 Medium
- cisco webex meetingsA vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote...5.4 Medium
linux-azureUbuntulinux-azure regressionNo scoreprometheus-ha_cluster_exporteropenSUSESecurity update for prometheus-ha_cluster_exporterNo scoreprometheus-sap_host_exporteropenSUSESecurity update for prometheus-sap_host_exporterNo score- radare radare2Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can...10.0 Critical
- radare radare2Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This...10.0 Critical
- ibm cloud object storage systemIBM Cloud Object Storage System cross-site scripting6.4 Medium
- artifex mujsIn MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may...10.0 Critical
- libpano13A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows...4.7 Medium
- gz scripts time slot booking calendar phpGZ Scripts Time Slot Booking Calendar PHP load.php cross site scripting3.5 Low
- gz scripts availability booking calendar phpGZ Scripts Availability Booking Calendar PHP HTTP POST Request load.php cross site scripting3.5 Low
- linuxfoundation tekton pipelines, tektoncd pipeline +1 morePipelines do not validate child UIDs3.7 Low
- thinutech thinucms, thinu-cms +1 moreThinuTech ThinuCMS contact.php cross site scripting3.5 Low
- thinutech thinucms, thinu-cms +1 moreThinuTech ThinuCMS author_posts.php cross site scripting3.5 Low
- simplephpscripts newsletter script phpSimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting3.5 Low
- simplephpscripts simple forum phpSimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting3.5 Low
- simplephpscripts photo gallery phpSimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting3.5 Low
- simplephpscripts news script php proSimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting3.5 Low
- simplephpscripts funeral script phpSimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scripting3.5 Low
- simplephpscripts faq script phpSimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting3.5 Low
- sanchitkmr shopping websiteSourceCodester Shopping Website check_availability.php sql injection6.3 Medium
- google site kit by google, site kit +1 moreSite Kit by Google plugin for WordPress4.3 Medium
- apache johnzonApache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale5.3 Medium
- opensuse tumbleweedIncorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users...7.8 High
perl-DBD-SQLiteMageiaUpdated perl-DBD-SQLite packages fix security vulnerabilityNo score- node.js, nodejs node, nodejs +2 moreA vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental...7.5 High
- node.js, nodejs node, nodejs +2 moreA vulnerability has been discovered in Node.js version 20, specifically within the experimental...7.7 High
- node.js, nodejs node, nodejs +2 morefs.openAsBlob() can bypass the experimental permission model when using the file system read...7.5 High
- node.js, nodejs node, nodejs +2 moreA vulnerability has been identified in Node.js version 20, affecting users of the experimental...5.3 Medium
- getoutline outline, outline outline/outline +1 moreCross-site Scripting (XSS) - Stored in outline/outline8.5 High
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.1 Medium
debian-archive-keyringDebiandebian-archive-keyring - security updateNo score- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.5.4 Medium
- totolink a3000ru, a3300r firmware +1 moreTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3000ru, a3300r firmware +1 moreTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code...9.8 Critical
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability...9.8 Critical
- tenda ac10, tendacn ac10 firmware +1 moreTenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac...9.8 Critical
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...4.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the...4.8 Medium
- Show moreLoading…