CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- amit agarwal google xml sitemap for mobileWordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ozette simple mobile url redirectWordPress Simple Mobile URL Redirect Plugin <= 1.7.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- webdevstudios wds multisite aggregateWDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting3.5 Low
- scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 moreWordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hasthemes ht feed, ht plugins feed +1 moreWordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- magenet website monetization by magenet, website monetization +1 moreWordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- squidex squidex/squidex, squidex.io squidex +1 moreImproper Handling of Additional Special Element in squidex/squidex5.4 Medium
- hadskyHadSky User cross-site request forgery4.3 Medium
- dedecmsDedeCMS co_do.php server-side request forgery5.5 Medium
- scott paterson contact form 7 redirect & thank you page, wpplugin contact form 7 redirect \& thank you page +1 moreWordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreCleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local...5.3 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreObservable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify...5.3 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreImproper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a...5.3 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreUnauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to...7.5 High
- sick ag icr890-4, sick icr890-4 firmware +1 moreImproper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to...7.5 High
- apache camel, apache software foundation camel jira +1 moreApache Camel JIRA: Temporary file information disclosure in Camel-Jira3.3 Low
- oomphinc view all post\'s pagesView All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting3.5 Low
- apache sshd, apache software foundation mina sshd +1 moreApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreCleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote...7.5 High
- sick ag icr890-4, sick icr890-4 firmware +1 moreImproper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to...8.2 High
- sick ag icr890-4, sick icr890-4 firmware +1 moreExposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an...8.6 High
- pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 moreImproper Authorization in pimcore/customer-data-framework6.3 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments, fossbilling +2 moreOpen Redirect in alextselegidis/easyappointments6.3 Medium
- osnexus quantastorAuthenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others9.1 Critical
- osnexus quantastorAuthenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.3559.1 Critical
- osnexus quantastorReflected XSS vulnerability in OSNEXUS QuantaStor before 6.0.0.3557.4 High
- osnexus quantastorSSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.3556.2 Medium
- osnexus quantastorAuthenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.3358.7 High
- osnexus quantastorLocal Privilege Escalation to root in OSNEXUS QuantaStor before 6.0.0.3557.8 High
- zephyrproject zephyrHCI send_sync Dangling Semaphore Reference Re-use5.9 Medium
- zephyrproject zephyrBT HCI host union variant confusion6.8 Medium
- zephyrproject zephyrHCI Connection Creation Dangling State Reference Re-use5.9 Medium
- zephyrproject zephyripv6: Missing ipv6 nullptr-check in handle_ra_input5.9 Medium
- ibm watson knowledge catalog on cloud pak for dataIBM Watson Knowledge Catalog denial of service6.5 Medium
- ibm watson knowledge catalog on cloud pak for dataIBM Watson Knowledge Catalog CSV injection7.0 High
- ibm watson cp4d data stores, cloud pak for data +1 moreIBM Watson CP4D Data Stores denial of service5.9 Medium
- ibm cognos analytics cartridge for cloud pak for data, cognos analytics cartridge for ibm cloud pak for data +1 moreIBM Cognos Analytics on Cloud Pak for Data improper access control3.1 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.9 Medium
- tenda ac1206, f1202, fh1202 +3 more +5 moreTenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to...9.8 Critical
- tenda ac10, ac1206, ac10 firmware +1 more +3 moreTenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in...9.8 Critical
- tenda ac10, ac1206, ac10 firmware +1 more +3 moreTenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in...9.8 Critical
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the...9.8 Critical
- samrtsoft smartbpm.netSmartBPM.NET - Path Traversal6.5 Medium
- Show moreLoading…