CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- oliva expertise eks, olivaekspertiz oliva ekspertiz +1 moreSQLi in Oliva Expertise9.8 Critical
- really simple plugins recipe maker for your food blog from zip recipesWordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- oliva expertise eks, olivaekspertiz oliva ekspertiz +1 moreXSS in Oliva Expertise6.1 Medium
- mediaburst gravity forms, unknown gravityforms +1 moreGravity Forms < 2.7.5 - Reflected XSS6.1 Medium
- basix nex-formsNEX-Forms < 8.4.4 - Authenticated Stored XSS5.4 Medium
- gsheetconnector caldera forms google sheets connectorCaldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRF8.8 High
- premio chaty, unknown floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button +1 moreFloating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- liquidweb restrict content, unknown membership plugin +1 moreMembership Plugin - Restrict Content < 3.2.3 - Reflected XSS6.1 Medium
- unknown post smtp mailer, wpexperts post smtp +1 morePOST SMTP Mailer < 2.5.7 - Account Takeover via CSRF8.8 High
- login configurator project configurator, unknown login configurator +1 moreLogin Configurator <= 2.1 - Reflected Cross-Site Scripting6.1 Medium
- unknown enable svg, webp & ico upload, ideastocode enable svg\, webp \& ico upload +1 moreEnable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS5.4 Medium
- an gradebook project gradebook, unknown an gradebook +1 moreAN_GradeBook <= 5.0.1 - Subscriber+ SQLi8.8 High
- supsystic popup, popup by supsystic +1 moreSupsystic Popup < 1.10.19 - Prototype Pollution9.8 Critical
- autochat automatic conversation, unknown autochat automatic conversation +1 moreAutochat <= 1.1.7- Unauthenticated Stored XSS6.1 Medium
- inventorypress project inventorypressInventoryPress <= 1.7 - Author+ Stored XSS5.4 Medium
- gsheetconnector woocommerce google sheet connectorWooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRF8.8 High
- 3dprint project 3dprint3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad5.3 Medium
- wpexperts wp pdf generatorWordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- oliva expertise eks, olivaekspertiz oliva ekspertiz +1 moreAuthentication Bypass by Primary Weakness in Oliva Expertise7.5 High
- digital strategy zekiwebSQLi in Digital Strategys Zekiweb9.8 Critical
- secomea sitemanager embeddedSiteManager Embedded service disruption5.9 Medium
installation-images-SLESSUSESecurity update for installation-imagesNo score- inactive user deleter project user deleter, korol yuriy aka shra inactive user deleter +1 moreWordPress Inactive User Deleter Plugin <= 1.59 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- avro project avroAttacker-controlled parameter can cause denial of service in hamba avro7.5 High
- premmerceWordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mr.vibe vslider multi image slider for wordpress, vibethemes vslider +1 moreWordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- msh134 wp reroute email, wp reroute email project reroute email +1 moreWordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- spring hateoas, vmware spring hateoas +1 moreForwarded header exploit with Spring HATEOAS on WebFlux5.3 Medium
- apache eventmesh, eventmesh-connector-rabbitmq, apache software foundation eventmesh (incubating) rabbitmq connector +2 moreApache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data9.8 Critical
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreAuthorization Bypass Through User-Controlled Key in alextselegidis/easyappointments6.3 Medium
- taphome core platform, core firmware +1 moreTAPHOME SQL Injection in Core Platform7.6 High
- taphome core platform, core firmware +1 moreTAPHOME Improper Authentication in Core Platform8.8 High
- omnisharp csharp-language-server-protocol, dotnetfoundation c\# language server protocol +1 moreOmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption3.5 Low
- campcodes beauty salon management systemCampcodes Beauty Salon Management System add-product.php sql injection6.3 Medium
- ibm db2, db2 for linux, unix and windows, db2 for linux unix and windows +2 moreIBM Db2 code execution6.7 Medium
- automattic automattic/mongoose, mongoosejs mongoose +1 morePrototype Pollution in automattic/mongoose10.0 Critical
- linux kernel, netapp h300s, h410s +4 more +6 moreAn issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does...9.1 Critical
- linux kernel, netapp h300s, h410s +3 more +5 moreAn issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd...9.1 Critical
- linux kernel, netapp h300s, h410s +3 more +5 moreAn issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request...9.1 Critical
- linux kernelAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an...9.8 Critical
- linux kernel, netapp h300s, h410s +4 more +6 moreAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not...9.1 Critical
- linux kernel, netapp h300s, h410s +2 more +4 moreAn issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an...9.8 Critical
- linux kernel, netapp h300s, h410s +4 more +6 moreAn issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in...9.1 Critical
- linux kernelAn issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel...5.5 Medium
- crestron 3-series control systems, cp3-gv 6506034 firmware, cp3 6504877 firmware +1 more +3 moreOn Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet...7.5 High
- veritas infoscale operations managerThe XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows...7.2 High
- es iperf3, apple macos, debian linux +3 more +5 moreiperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted...7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at...9.8 Critical
- emqxAn issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal...6.5 Medium
- Show moreLoading…