CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- tenda f1202, fh1202, f1202 firmware +1 more +3 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda f1202, fh1202, ac7 firmware +3 more +5 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- archerirm archerAn issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an...6.0 Medium
- archerirm archerCross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6...5.4 Medium
- archerirm archerCross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6...8.1 High
- archerirm archerAn issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an...7.7 High
- archerirm archerAn issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an...7.5 High
- glpi-project glpiGLPI vulnerable to SQL injection via dashboard administration6.8 Medium
- significant-gravitas auto-gpt, agpt autogpt classic +1 moreSystem logs spoofable in Auto-GPT via ANSI control sequences3.1 Low
- significant-gravitas auto-gpt, agpt autogpt classic +1 morePython code execution sandbox escape in non-docker version in Auto-GPT7.6 High
- significant-gravitas auto-gpt, agpt autogpt classic +1 moreDocker escape in Auto-GPT when running from docker-compose.yml included in git repo8.1 High
- sos-berlin jobscheduler, joc-cockpit +1 moreXSS vulnerability in JOC Cockpit branch 1.136.3 Medium
- discourseCSP nonce reuse vulnerability in Discourse6.8 Medium
- envoyproxy envoy, nghttp2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec7.5 High
- thm feedbacksystemStoring unencrypted LDAP passwords in feedbacksystem6.0 Medium
github.com/superfly/tokenizerGoTokenizer vulnerable to client brute-force of token secretsNo score- github cmark-gfmQuadratic complexity bugs may lead to a denial of service6.4 Medium
- becton dickinson & co cqi reporter, bd guardrails cqi reporter +1 moreCQI Data Sniffing3.5 Low
- bd alaris systems manager, becton dickinson & co bd alarisâ„¢ systems manager +1 moreStored Cross-Site Scripting on Device Import Functionality6.9 Medium
- bd alaris systems manager, becton dickinson & co bd alarisâ„¢ systems manager +1 moreStored Cross-Site Scripting on User Import Functionality8.2 High
- bd alaris guardrails editor, becton dickinson & co bd alarisâ„¢ guardrailsâ„¢ editor +1 moreLack of Dataset Integrity Checking6.7 Medium
- bd alaris 8015 pcu firmware, becton dickinson & co bd alarisâ„¢ point-of-care unit (pcu) model 8015 +1 moreLack of Cryptographic Security of IUI Bus6.1 Medium
- bd alaris 8015 pcu firmware, becton dickinson & co bd alarisâ„¢ point-of-care unit (pcu) model 8015, becton dickinson and co bd alarisa point of care unit model 8015 +2 morePCU Configuration Lacks Authentication6.8 Medium
- bd alaris 8015 pcu firmware, becton dickinson & co bd alaris™ point-of-care unit (pcu) model 8015 +1 moreWireless Card Firmware Improperly Signed5.2 Medium
- multiversx mx-chain-gomx-chain-go's relayed transactions always increment nonce7.1 High
- patriksimek vm2vm2 Sandbox Escape vulnerability9.8 Critical
- patriksimek vm2Sandbox Escape in vm29.8 Critical
- redis, fedoraproject fedora +1 moreHeap overflow issue with the Lua cjson library used by Redis7.0 High
- movimMovim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This...8.0 High
- umbraco cms, umbraco-cms +1 moreUmbraco allows possible Admin-level access to backoffice without Auth under rare conditions7.5 High
- vegagroup web collectionSQL in VegaGroup Web Collection9.8 Critical
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System sql injection6.3 Medium
- campcodes retro cellphone online store, retro cellphone online store project cellphone online store +1 moreCampcodes Retro Cellphone Online Store add_user_modal.php cross site scripting2.4 Low
- unitronics vision1210, vision1210 firmware +1 moreEmbedded malicious code vulnerability in Unitronics Vision12109.1 Critical
- honeywell direct station, engineering station, experion server +1 more +3 moreServer Data type confusion - info leak7.5 High
- honeywell c300, c300 firmware +1 moreController DOS on sending error response7.5 High
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System cross site scripting3.5 Low
- honeywell c300, c300 firmware +1 moreController stack overflow on decoding messages from the server9.8 Critical
- honeywell c300, c300 firmware +1 moreController design flaw - unsigned firmware9.8 Critical
- honeywell direct station, engineering station, experion server +1 more +3 moreDoS due to heap overflow9.8 Critical
- honeywell c300, c300 firmware +1 moreController stack overflow when decoding messages from the server9.8 Critical
- honeywell experion server, direct station, engineering station +1 more +3 moreServer deserialization missing boundary checks - heap overflow in communication between server and controller7.5 High
- honeywell experion server, direct station, engineering station +1 more +3 moreServer DoS due to heap overflow9.8 Critical
- honeywell experion server, direct station, engineering station +1 more +3 moreServer bad parsing implementation - stack overflow in server::get_db_path_for_driver7.5 High
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System HTTP POST Request sql injection6.3 Medium
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System HTTP POST Request sql injection6.3 Medium
- zabbix frontend, zabbix +1 moreInsufficient validation of Action form input fields6.3 Medium
- zabbixDuktape 2.6 bug crashes JavaScript putting too many values in valstack.5.9 Medium
- zabbix frontend, zabbix +1 moreInefficient URL schema validation5.7 Medium
- zabbix frontend, zabbix +1 moreReflected XSS in several fields of graph form5.4 Medium
- Show moreLoading…