CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- akhlesh-nagar, a.ankit social media icons widget, social media icons widget project media icons widget +1 moreWordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- radiustheme classified listingWordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- staxwp visibility logic for elementorWordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- media library helperWordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- smart youtube pro project youtube pro, vladimir prelovac smart youtube pro +1 moreWordPress Smart YouTube PRO Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apollo theme ap page builderSQL injection vulnerability in LeoTheme's Ap Page Builder7.5 High
- nootheme noo timetableWordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- sitealertWordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- flickr justified gallery project justified gallery, miro mannino flickr justified gallery +1 moreWordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- keetrax wp tilesWordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
cni-pluginsopenSUSESecurity update for cni-pluginsNo scorecniopenSUSESecurity update for cniNo score- jeffparker yarpp – yet another related posts plugin, yarpp yet another related posts plugin +1 moreYARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wp donate project donatewp-donate Plugin donate-display.php sql injection6.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation7.5 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update8.8 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.1 - Missing Authorization to User Import5.4 Medium
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change7.2 High
- hitachi device managerImproper Validation of Certificate Vulnerability in Hitachi Device Manager5.6 Medium
- hitachi device managerCleartext Transmission Vulnerability in Hitachi Device Manager9.0 Critical
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure5.3 Medium
- deothemes amela, arendelle, everse +3 more +5 moreMultiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting6.1 Medium
- hitachi replication managerEL Injection Vulnerability in Hitachi Replication Manager7.3 High
- hitachi compute systems manager, device manager, replication manager +2 more +4 moreFile and Directory Permission Vulnerability in Hitachi Command Suite6.6 Medium
- ubiquiti aircube, edgerouter, ui aircube firmware +1 more +3 moreA heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to...5.9 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet...6.3 Medium
- xhttp project xhttpxHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.7.5 High
- goproxy project goproxygoproxy Denial of Service vulnerability7.5 High
- d-link dir-815, dlink dir-815 firmware +1 moreD-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.7.5 High
- microsoft chakracoreChakraCore branch master cbb9b was discovered to contain a segmentation violation via the...5.5 Medium
- microsoft chakracoreChakraCore branch master cbb9b was discovered to contain a segmentation violation via the...5.5 Medium
- microsoft chakracoreChakraCore branch master cbb9b was discovered to contain a segmentation violation via the...5.5 Medium
- microsoft chakracoreChakraCore branch master cbb9b was discovered to contain a segmentation violation via the...5.5 Medium
- microsoft chakracoreChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the...5.5 Medium
- kratosdefense ngc indoor unit, ngc indoor unit firmware +1 moreA remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4....9.8 Critical
- kratosdefense ngc indoor unit, ngc indoor unit firmware +1 moreMissing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11...9.8 Critical
- hazelcast, hazelcast imdg +1 moreHazelcast Executor Services don't check client permissions properly8.8 High
- ncia advisor networkIn NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an...5.5 Medium
- tp-link archer c2, archer c20, archer c50 +3 more +5 moreTP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP...7.5 High
- prestashop payplugAn SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0,...9.8 Critical
- ostree project ostreelibostree vulnerable to denial of service attack7.5 High
- pcre pcre2Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of...7.5 High
- libsndfile project libsndfileMultiple signed integers overflow in function au_read_header in src/au.c and in functions...7.8 High
- libsndfile project libsndfileAn off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a...7.8 High
- tildeslash monitAn issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain...8.8 High
- locke-bot project locke-botSQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary...9.8 Critical
- atasm project atasmAn issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function...9.8 Critical
- htmldoc project htmldocAn Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this...7.8 High
- htmldoc project htmldocA flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw...7.8 High
- elfutils project elfutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which...5.5 Medium
- Show moreLoading…