CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- zabbix frontend, zabbix +1 morePersistent XSS in the user form5.4 Medium
- zabbixRemove possibility to add html into Geomap attribution field5.5 Medium
- zabbixDenial of service caused by a bug in the JSON parser4.7 Medium
installation-images-SLEDSUSE,installation-images-SLESSUSE +1 moreSecurity update for installation-imagesNo score- zabbixUnauthorized limited filesystem access from preprocessing8.5 High
- zabbixLimited control of resource utilization in JS preprocessing5.9 Medium
- bullwark, biges bullwark momentum series +1 morePath Traversal in Bullwark7.5 High
- idisplay platplay dsXSS in iDisplays PlatPlay DS5.4 Medium
- lisa software florist siteSQLi in Lisa Softwares Florist Site9.8 Critical
- elra parkmatikSQLi in Elra Computers Parkmatik9.8 Critical
- apache software foundation airflow apache hive provider, apache apache-airflow-providers-apache-hive +1 moreApache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_user8.8 High
installation-images-SLESSUSESecurity update for installation-imagesNo score- elecom wrc-1167febk-a, wrc-1167febk-s, wrc-1167gebk-s +7 more +9 moreCode injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent...8.0 High
- elecom wrc-1167febk-a, wrc-1167febk-s, wrc-1167gebk-s +7 more +9 moreOS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent...8.0 High
- elecom co.,ltd. wrc-1167febk-a, wrc-1167febk-s, wrc-1167gebk-s +14 more +16 moreExposure of sensitive information to an unauthorized actor issue exists in ELECOM wireless LAN...6.5 Medium
- elecom wtc-c1167gc-b, wtc-c1167gc-w, wtc-c1167gc-b firmware +1 more +3 moreCross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and...8.8 High
- sonicwall analytics, gms, global management system +2 moreSonicWall GMS and Analytics CAS Web Services application use static values for authentication...9.8 Critical
- sonicwall analytics, gms, global management system +2 moreVulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a...9.8 Critical
- sonicwall analytics, gms, global management system +2 morePath Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated...6.5 Medium
- sonicwall analytics, gms, global management system +2 moreExposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and...6.5 Medium
- sonicwall analytics, gms, global management system +2 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...7.5 High
- sonicwall analytics, gms, global management system +2 moreUse of password hash instead of password for authentication vulnerability in SonicWall GMS and...9.8 Critical
- sonicwall analytics, gms, global management system +2 moreExposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and...5.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.5 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab5.3 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab3.9 Low
- gitlabIncorrect Authorization in GitLab5.7 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload9.9 Critical
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- gitlabImproper Encoding or Escaping of Output in GitLab4.1 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab6.5 Medium
- elecom wrc-1167gebk-s, wrc-1167ghbk-s, wrc-1167gebk-s firmware +1 more +3 moreELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and...8.0 High
- elecom lan-w301nr, wrc-1167ghbk3-a, wrc-1467ghbk-a +5 more +7 moreELECOM wireless LAN router WRC-1167GHBK3-A v1.24 and earlier allows a remote unauthenticated...9.8 Critical
- elecom lan-w301nr, wrc-1167febk-a, wrc-1167ghbk3-a +7 more +9 moreELECOM wireless LAN routers WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and...8.0 High
- elecom co.,ltd. wrh-300wh-h, wtc-300hwh, wtc-c1167gc-b +5 more +7 moreOpen redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters...6.1 Medium
- elecom co.,ltd. wrh-300wh-h, wtc-300hwh, elecom wrh-300wh-h firmware +1 more +3 moreCross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and...6.1 Medium
- sonicwall analytics, gms, global management system +2 moreSonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to...9.8 Critical
- sonicwall analytics, gms, global management system +2 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...8.8 High
- sonicwall analytics, gms, global management system +2 moreTomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file....9.8 Critical
- sonicwall analytics, gms, global management system +2 moreImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...8.8 High
- sonicwall analytics, gms, global management system +2 moreVulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on...8.8 High
- sonicwall analytics, gms, global management system +2 morePath Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read...6.5 Medium
- sonicwall analytics, gms, global management system +2 moreThe authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks,...9.8 Critical
- google androidIn notification access permission dialog box, malicious application can embedded a very long...5.5 Medium
- owasp corerulesetcoreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not block multiple Content...9.8 Critical
- acme.sh project acme.shacme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the...9.8 Critical
- qt, fedoraproject fedora +1 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6...7.5 High
- watchguard panda security vpnA DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows...6.5 Medium
- Show moreLoading…