CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device...7.4 High
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device...9.9 Critical
- siemens sipass integratedA vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected...7.5 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +19 more +21 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM...3.7 Low
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +19 more +21 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM...7.5 High
- fortinet fortiauthenticator, fortios +1 moreA clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6...5.3 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an OS command ('OS Command Injection')...7.2 High
- bluemark dronescout ds230 firmware, ds230 +1 moreDenial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations9.3 Critical
- bluemark dronescout ds230, dronescout ds230 firmware, ds230 +2 moreMissing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations8.1 High
- bluemark ds230, dronescout ds230 firmware +1 moreDenial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations4.7 Medium
- pi websolution conditional shipping & advanced flat rate shipping rates / flexible shipping for woocommerce shipping, piwebsolution advanced-free-flat-shipping-woocommerce +1 moreWordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- oopspam anti-spamWordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- lws toolsWordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- kevon adonis wp abstractsWordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gitlabExposure of Private Personal Information to an Unauthorized Actor in GitLab3.5 Low
- aurelienlws lws cleaner, lws cleaner +1 moreWordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- galleryplugins video contest wordpress plugin, video contest wordpress project contest wordpress +1 moreWordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pvmg reservation.studio, reservation.studio widget +1 moreWordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- database collation fix project collation fix, dave jesch database collation fix +1 moreWordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pixelgrade comments ratings, comments rating +1 moreWordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pixelgrade pixtypesWordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wp engine php compatibility checkerWordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- comment reply notification project reply notification, denishua comment reply notification +1 moreWordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hastheme wishsuiteWordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hasthemes ht menuWordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hasthemes justtablesWordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hasthemes swatchlyWordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreUnauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)7.2 High
- sap erp defense forces and public securityLog Injection vulnerability in SAP ERP Defense Forces and Public Security4.9 Medium
- sap se ecc and sap s/4hana (is-oil), sap netweaver +1 moreOS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)9.1 Critical
- sap solution manager, sap se solution manager (diagnostic agent) +1 moreHeader Injection in SAP Solution Manager (Diagnostic Agent)7.2 High
- sap enable nowInformation Disclosure in SAP Enable Now5.3 Medium
- sap enable nowCross-Site Scripting vulnerability in SAP Enable Now6.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 morePassword Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform5.9 Medium
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreImproper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform6.0 Medium
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)6.5 Medium
- sap netweaver process integration, sap se netweaver process integration (message display tool) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)6.5 Medium
- sap web dispatcherMemory Corruption vulnerability in SAP Web Dispatcher7.7 High
- sap s4core, sap se s/4hana (manage journal entry template) +1 moreImproper Access Control in SAP S/4HANA (Manage Journal Entry Template)6.3 Medium
- sap business warehouse, sap se business warehouse and sap bw/4hana, sap bw\/4hana +2 moreMissing Authorization Check in SAP Business Warehouse and SAP BW/4HANA4.5 Medium
- sap sql anywhereDenial of Service (DoS) vulnerability in SAP SQL Anywhere7.8 High
- sap se netweaver (bi cont add on), sap netweaver bi content +1 moreDirectory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)8.7 High
- sap enable nowCross-Site Scripting vulnerability in SAP Enable Now6.1 Medium
- sap web dispatcherRequest smuggling and request concatenation in SAP Web Dispatcher8.6 High
- sap se netweaver as for java (log viewer), sap netweaver application server for java +1 moreLog Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)5.3 Medium
- buymeacoffee buy me a coffee – button and widget plugin, buy me a coffee +1 moreBuy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgery7.1 High
- buymeacoffee buy me a coffee – button and widget plugin, buy me a coffee +1 moreBuy Me a Coffee – Button and Widget Plugin <= 3.7 - Missing Authorization7.3 High
- gpacGPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the...5.5 Medium
- gpacGPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the...5.5 Medium
- gpacGPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the...5.5 Medium
- Show moreLoading…