CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- dedecmsAn arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109...9.8 Critical
- jpeg libjpeglibjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester:...6.5 Medium
- jpeg libjpeglibjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook...6.5 Medium
- geeklogMultiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute...4.8 Medium
- geeklogMultiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute...4.8 Medium
- impresscmsImpressCMS Cross-site Scripting vulnerability4.8 Medium
- phpgurukul maid hiring management systemA cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers...6.1 Medium
- phpgurukul maid hiring management systemA cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers...6.1 Medium
- phpgurukul maid hiring management systemMaid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- phpgurukul teacher subject allocation systemA cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows...6.1 Medium
- issabel pbxAn issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via...7.5 High
- issabel pbxA Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote...4.5 Medium
- ysoft safeq serverAn issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP...6.5 Medium
- belkin wemo smart plug wsp080, wemo smart plug wsp080 firmware +1 moreIncorrect signature verification of the firmware during the Device Firmware Update process of...6.5 Medium
- inageyaAn issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive...7.5 High
- dericia deliciaAn issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to...7.5 High
- maruiAn issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to...7.5 High
- entetsu storeAn issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive...7.5 High
- albisAn issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive...7.5 High
- shizutetsu storeAn issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive...7.5 High
- keisei store livreAn issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain...7.5 High
- task reminder system project reminder systemA Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0...5.4 Medium
- oretnom23 online computer and laptop storeSourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control,...9.8 Critical
- boxtal envoimoinscherA SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version...9.8 Critical
- zemana antimalware, watchdog anti-virus +1 moreCertain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti...6.7 Medium
- google androidIn getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a...7.8 High
- google androidIn showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a...7.8 High
- sonicwall analytics, gms, global management system +2 moreUse of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This...7.5 High
- squareup okioOkio GzipSource unhandled exception Denial of Service5.9 Medium
drupal/tfaPackagistThis module enables you to allow and/or require users to use a second authentication method in addition to password authentication. The module doesn't sufficiently ensure all core login routes, includ…No score- oretnom23 service provider management systemSourceCodester Service Provider Management System sql injection6.3 Medium
- carel boss mini firmwareBoss Mini document file inclusion7.3 High
- gz scripts vacation rental websiteGZ Scripts Vacation Rental Website HTTP POST Request cross site scripting4.3 Medium
- khodakhah nodcmskhodakhah NodCMS POST Request blog-comment-4 cross site scripting4.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Read System Files and Resources During Configuration Commit5.5 Medium
- adobe indesign[FG-VD-23-006] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IV Notification5.5 Medium
- adobe indesign[FG-VD-23-013] Adobe InDesign 2023 Out-of-Bound Read Vulnerability X Notification5.5 Medium
- adobe indesign[FG-VD-23-004] Adobe InDesign 2023 Out-of-Bound Read Vulnerability II Notification5.5 Medium
- adobe indesign[FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification7.8 High
- adobe indesign[FG-VD-23-011] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VIII Notification5.5 Medium
- adobe indesign[FG-VD-23-003] Adobe InDesign 2023 Out-of-Bound Read Vulnerability Notification5.5 Medium
- adobe indesign[FG-VD-23-005] Adobe InDesign 2023 Out-of-Bound Read Vulnerability III Notification5.5 Medium
- adobe indesign[FG-VD-23-012] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IX Notification5.5 Medium
- adobe indesign[FG-VD-23-014] Adobe InDesign 2023 Out-of-Bound Read Vulnerability XI Notification5.5 Medium
- adobe indesign[FG-VD-23-008] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VI Notification5.5 Medium
- adobe indesign[FG-VD-23-010] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VII Notification5.5 Medium
- adobe indesign[FG-VD-23-007] Adobe InDesign 2023 Out-of-Bound Read Vulnerability V Notification5.5 Medium
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreJenkins ElasticBox CI Plugin missing permission check7.1 High
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreJenkins ElasticBox CI Plugin vulnerable to cross-site request forgery8.8 High
- jenkins benchmark evaluator, jenkins project benchmark evaluator plugin +1 moreJenkins Benchmark Evaluator Plugin missing permission check5.4 Medium
- Show moreLoading…