CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- gnu binutilsAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack...6.5 Medium
- asn1c project asn1cAn issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the...5.5 Medium
- asn1c project asn1cStack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in...5.5 Medium
- advancemameHeap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.7.1 High
- evertz 3080ipx, 7801fc, 7890ixg +3 more +5 moreEVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are...8.8 High
- openenclaveImproper sanitization of MXCSR and RFLAGS in OpenEnclave5.3 Medium
- wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1 Critical
- openrefineZip slip in OpenRefine5.5 Medium
- meterspherePath traversal in metersphere5.6 Medium
topgradecrates.iotopgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_allNo score- zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 moreA command injection vulnerability in the access point (AP) management feature of the Zyxel ATP...8.0 High
- zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch...6.5 Medium
- zyxel usg flex series firmware, vpn series firmware, usg 2200-vpn firmware +16 more +18 moreA command injection vulnerability in the Free Time WiFi hotspot feature of in the Zyxel USG FLEX...8.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 moreA command injection vulnerability in the hotspot management feature of the Zyxel ATP series...8.0 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 moreA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware...8.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...8.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreThe configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware...8.8 High
- mattermost, mattermost server +1 moreServer crash via a specially crafted markdown input4.3 Medium
- mattermost, mattermost ios app +1 moreLack of server certificate validation in websockets connection8.1 High
- mattermost, mattermost server +1 moreDenial of Service via specially crafted gif image4.3 Medium
- mattermost plugins, server +1 moreGuest accounts invited and added to channels by Welcomebot plugin3.5 Low
- mattermost, mattermost server +1 moreLack of previous password reset tokens on new token creation4.8 Medium
- mattermost, mattermost server +1 moreDeleted attachments in Boards remain accessible3.1 Low
- mattermost, mattermost server +1 moreInconsistent state in UI after boards permission change by system admin2.7 Low
- mattermost, mattermost server +1 moreDisabling publicly-shared boards does not disable existing publicly available board links4.2 Medium
- mattermost, mattermost server +1 morechannel DoS by sharing a boards link4.3 Medium
- mattermost, mattermost server +1 moreMember can create team with team override scheme3.1 Low
- mattermost, mattermost server +1 moreLack of channel membership check when linking a board to a channel4.3 Medium
- metagauss download themeWordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mattermost, mattermost server +1 moreWebSockets accept connections from HTTPS origin6.2 Medium
- mattermost, mattermost server +1 moreLimited blind SSRF to localhost/intranet in interactive dialog implementation3.5 Low
- easy-appointments easy appointmentsWordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- fivestarplugins five star restaurant menu, restaurant menu and food ordering by five star plugins +1 moreWordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
java-1_8_0-ibmSUSESecurity update for java-1_8_0-ibmNo scorejava-1_8_0-ibmopenSUSESecurity update for java-1_8_0-ibmNo score- justin klein wp social autoconnect, wp social autoconnect project social autoconnect +1 moreWordPress WP-FB-AutoConnect Plugin <= 4.6.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- faboba falang, falang multilanguage for wordpress +1 moreWordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- etoile web design front end usersWordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- icewhale casaosWeak json web token (JWT) secrets in CasaOS9.8 Critical
- hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- icewhale casaos, casaos-gateway +1 moreIncorrect identification of source IP addresses in CasaOS9.8 Critical
- woocommerce shipping multiple addressesWordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- woocommerce automatewooWordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- woocommerce order barcodesWordPress WooCommerce Order Barcodes Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- origin software ats proIDOR in ATS Pro9.8 Critical
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo scoreopenscOSS-FuzzHeap-buffer-overflow in cosm_new_fileNo score- ultimate member member, ultimatemember ultimate member +1 moreWordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- woocommerce brandsWordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mycredWordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- Show moreLoading…