CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- xalpha project xalphaxalpha vulnerable to Remote Code Execution9.8 Critical
- fastposter fast-posterfast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img,...5.4 Medium
- lm21 twonavTwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).5.4 Medium
- websiteguide project websiteguideWebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.9.8 Critical
- issabel pbxCross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker...8.1 High
- issabel pbxCross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker...8.1 High
- issabel pbxA stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows...4.8 Medium
- issabel pbxA stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows...4.8 Medium
- issabel pbxA stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX...4.8 Medium
- gpacGPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the...5.5 Medium
- wmanagerSQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain...7.5 High
- buildagate project buildagateCross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to...6.1 Medium
- robtopgames geometry dashA buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows...9.8 Critical
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +6 more +8 moreASP.NET and Visual Studio Security Feature Bypass Vulnerability8.1 High
- marukyu lineAn issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive...7.5 High
- brother dcp-1610w firmware, dcp-1610we firmware, dcp-1610wr firmware +216 more +218 moreNull pointer dereference vulnerability exists in multiple vendors MFPs and printers which...7.5 High
- vivawallet viva walletSQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote...9.8 Critical
- opendkimAn issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to...5.3 Medium
- avast antivirusBuffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a...5.5 Medium
whatsapp-chat-exporterPyPIWhatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.5.4 Medium- ckeditor-wordcount-plugin project ckeditor-wordcount-plugin, typo3 cms-rte-ckeditor +1 moreCross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin6.1 Medium
- zope restrictedpythonRestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape8.4 High
- eclipse jettyMadeYouReset HTTP/2 vulnerability7.7 High
- eclipse jettyEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations3.7 Low
- eclipse jetty, netapp active iq unified manager, bootstrap os +2 moreJetty DOS vulnerability on DosFilter5.3 Medium
- eclipse jettyJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9 Medium
- eclipse jettyJetty PushSessionCacheFilter can cause remote DoS attacks3.1 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 more +4 moreJetty connection leaking on idle timeout when TCP congested7.5 High
- eclipse jettyEclipse Jetty GZIP buffer release7.2 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 High
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty's OpenId Revoked authentication allows one request3.5 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty accepts "+" prefixed value in Content-Length5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty vulnerable to errant command quoting in CGI Servlet3.5 Low
- ruijie bcr810w, ruijienetworks bcr810w firmware +1 moreRuijie BCR810W Tracert Page os command injection4.7 Medium
- citrix sharefile storage zones controller, content collaboration +1 moreA vulnerability has been discovered in the customer-managed ShareFile storage zones controller...9.8 Critical
- palantir foundry comments, com.palantir.comments:comments +1 moreIDOR in Foundry Comments allows retrieval of attachments5.3 Medium
- citrix linux virtual delivery agent, virtual delivery agents for linux for cvad and citrix daas security, virtual delivery agents for windows for cvad and citrix daas security +1 more +3 moreUsers with only access to launch VDA applications can launch an unauthorized desktop6.3 Medium
- palantir foundry job-tracker, com.palantir.foundry.jobtracker:job-tracker +1 moreInsecure Direct Object Reference (IDOR) in Foundry job-tracker4.3 Medium
- palantir foundry frontend, com.palantir.foundry:foundry-frontend +1 moreStored XSS in Foundry Slate Query Dropdown menu5.4 Medium
- kalcaddle kodboxkodbox WebConsole Plug-In webconsole.php.txt Execute os command injection5.5 Medium
- palantir foundry frontend, foundry issues, com.palantir.foundry:foundry-frontend +1 more +3 moreDenial of Service in Foundry Issues7.7 High
- citrix adc and citrix gateway, gateway, application delivery controller +2 moreArbitrary file read6.3 Medium
- citrix adc and citrix gateway, gateway, application delivery controller +2 moreCross site scripting6.1 Medium
- citrix workspace app for linux, workspace +1 moreLocal user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications5.5 Medium
- tamronosTamronOS ping os command injection6.3 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.c7.8 High
- campcodes online shopping portalPHPGurukul Online Shopping Portal Registration Page excessive authentication6.5 Medium
sweetalert2npmsweetalert2 contains potentially undesirable behaviorNo score- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master Improper Access Control8.8 High
- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master Improper Access Control6.5 Medium
- Show moreLoading…