CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- grame faustfaust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared:...5.5 Medium
- pixmanstress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component...6.5 Medium
- jaegertracing jaeger uiCross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.5.4 Medium
- espressif esp-eye firmware, esp32-d0wd-v3 firmware, esp32-d0wdr2-v3 firmware +19 more +21 moreAn issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3...6.8 Medium
- totolink cp300\+, cp300\+ firmware +1 moreTOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem...7.5 High
- cudy lt400, lt400 firmware +1 moreCudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network...6.1 Medium
- cudy lt400, lt400 firmware +1 moreCudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network...6.1 Medium
- cudy lt400, lt400 firmware +1 moreCudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin...6.1 Medium
- progress chef infra serverProgress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode...5.5 Medium
- miniupnp project ngiflibAn issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif....6.5 Medium
- furukawa 423-41w\/ac firmware, ld420-10r firmware, ld421-21w firmware +1 more +3 moreFurukawa 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML...7.5 High
- furukawa 423-41w\/ac firmware, ld420-10r firmware, ld421-21w firmware +1 more +3 moreA remote command execution (RCE) vulnerability in the web interface component of Furukawa 423-41W...9.8 Critical
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation security bypass2.7 Low
- projectworlds house rental and property listingSourceCodester/projectworlds House Rental and Property Listing index.php sql injection5.3 Medium
- ibm iIBM i privilege escalation8.4 High
- ibm iIBM i privilege escalation8.4 High
- janobe life insurance management systemSourceCodester Life Insurance Management System login.php sql injection7.3 High
- layuilayui HTML Attribute cross site scripting3.5 Low
- bylancer quickorderBylancer QuickOrder GET Parameter blog sql injection6.3 Medium
- bylancer quickqrBylancer QuickQR GET Parameter blog sql injection6.3 Medium
- bylancer quickjobBylancer QuickJob GET Parameter sql injection6.3 Medium
openscOSS-FuzzHeap-double-free in sc_pkcs15_free_object_contentNo scorendpiOSS-FuzzNegative-size-param in check_content_type_and_change_protocolNo score- bylancer quickvcardBylancer QuickVCard GET Parameter blog sql injection6.3 Medium
- bylancer quickai openaiBylancer QuickAI OpenAI GET Parameter blog sql injection6.3 Medium
- nesote inout search engine ai editionNesote Inout Search Engine AI Edition index.php cross site scripting3.5 Low
- livelyworks articartLivelyWorks Articart Base64 Encoding de_DE redirect3.5 Low
- livelyworks articartLivelyWorks Articart search cross site scripting3.5 Low
- admidio, admidio admidio/admidio +1 moreUnrestricted Upload of File with Dangerous Type in admidio/admidio6.7 Medium
- rigol mso5000, mso5000 firmware +1 moreThe web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows...7.5 High
- rigol mso5000, mso5000 firmware +1 moreThe web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows...9.8 Critical
- clevertap, clevertap cordova plugin +1 moreCleverTap Cordova Plugin 2.6.2 - Reflected XSS9.3 Critical
- makeplane planePlane 0.7.1 - Insecure file upload7.1 High
- makeplane planePlane v0.7.1 - Unauthorized access to files7.1 High
- nesote inout blockchain easypaymentsNesote Inout Blockchain EasyPayments POST Parameter getcoinaddress sql injection6.3 Medium
- campcodes retro cellphone online store, retro cellphone online store project cellphone online store +1 moreCampcodes Retro Cellphone Online Store modal_add_product.php cross site scripting3.5 Low
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System HTTP POST Request sql injection6.3 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System HTTP POST Request sql injection6.3 Medium
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System HTTP POST Request sql injection6.3 Medium
- pnp4nagiosPNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters....5.4 Medium
- pnp4nagiosPNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.8.8 High
- extremenetworks iq engineIQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation...9.8 Critical
- redisRedis before 6cbea7d allows a replica to cause an assertion failure in a primary server by...5.9 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket7.1 High
- discourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse6.5 Medium
- discourseTopic Title Validation Skipped When Changing Category in Discourse3.5 Low
- weave gitops terraform controller, weaveworks tf-controller +1 moreInformation Disclosure Vulnerability in Weave GitOps Terraform Controller8.5 High
- warp-tech warpgateUser login confusion with SSO in warpgate6.4 Medium
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui10.0 Critical
- Show moreLoading…