CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- cisco cjoseIncorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose8.6 High
- eng knowage, knowagelabs knowage-server +1 moreQuery injection in Knowage server7.7 High
- zenstruck collectionLimited code execution in zenstruck/collections8.6 High
- 9001 copypartyPath traversal in copyparty7.5 High
- bitdefender enginesOut of Bounds Memory Corruption Issue in CEVA Engine8.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received6.5 Medium
- microsoft edge for android, edge chromium +1 moreMicrosoft Edge for Android (Chromium-based) Tampering Vulnerability6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.8 High
- microsoft edge, edge for ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The FPC will crash on receiving a malformed CFM packet6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run5.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed4.7 Medium
- microsoft dynamics 365, dynamics 365 for finance and operations +1 moreDynamics 365 Finance Spoofing Vulnerability5.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel7.5 High
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.c4.7 Medium
- tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in strnew_size() at w3m/str.c4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS6.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps6.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core occurs when running a low privileged CLI command5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface7.5 High
installation-images-SLESSUSESecurity update for installation-imagesNo score- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied7.5 High
ndpiOSS-FuzzHeap-buffer-overflow in check_content_type_and_change_protocolNo score- savoir-faire linux jamiQRC Handler without Input Validation in Jami4.4 Medium
- savoir-faire linux jamiLocal Denial of Service in Jami5.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcore7.2 High
- openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 moreAES-SIV implementation ignores empty associated data entries5.3 Medium
- plaidweb plaidweb/webmention.js, webmention.js +1 moreCross-site Scripting (XSS) - DOM in plaidweb/webmention.js7.3 High
installation-images-SLESSUSESecurity update for installation-imagesNo score- wiresharkBuffer Over-read in Wireshark5.3 Medium
- wiresharkMismatched Memory Management Routines in Wireshark5.3 Medium
- razer centralRazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability7.8 High
- razer centralRazerCentralService Unsafe Deserialization Escalation of Privilege7.8 High
- buymeacoffee buy me a coffee – button and widget plugin, buy me a coffee +1 moreBuy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- froxlor, froxlor froxlor/froxlor +1 moreImproper Encoding or Escaping of Output in froxlor/froxlor9.1 Critical
- rswag project rswagrswag vulnerable to arbitrary JSON and YAML file read via directory traversal7.5 High
- netkitnetkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used...9.8 Critical
- cryptography.io cryptographycryptography mishandles SSH certificates7.5 High
- codecentric spring boot admin, thymeleaf +1 moreSpring-boot-admin sandbox bypass via crafted HTML7.5 High
- wayos fbm-291w, fbm-291w firmware +1 moreWAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the...9.8 Critical
- wayos fbm-291w, fbm-291w firmware +1 moreWAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component ...9.8 Critical
- tenda f1202, fh1202, 4g300 firmware +4 more +6 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda f1202, fh1202, 4g300 firmware +2 more +4 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda f1202, fh1202, 4g300 firmware +4 more +6 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda f1202, fh1202, f1202 firmware +3 more +5 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda f1202, fh1202, 4g300 firmware +2 more +4 moreTenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack...9.8 Critical
- tenda ac10, ac1206, ac5 +11 more +13 moreTenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5...9.8 Critical
- tenda ac10, ac1206, ac5 +11 more +13 moreTenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5...9.8 Critical
- Show moreLoading…