CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- omnis studioOmnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis...5.3 Medium
- omnis studioOmnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for...6.5 Medium
- icewarpIcewarp Icearp v10.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability.6.1 Medium
- agentejo cockpitCockpit CMS Cross-Site Request Forgery vulnerability8.8 High
- agentejo cockpitCockpit CMS vulnerable to incorrect access control7.5 High
- eyoucmseyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the...5.3 Medium
- alkacon opencmsAlkacon OpenCMS arbitrary file upload vulnerability6.1 Medium
- mobisystems office suiteOffice Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI)...7.5 High
- mobisystems office suiteOffice Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site...6.1 Medium
- google chromeInsufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98...4.3 Medium
- google chromeInsufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0...6.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a...4.3 Medium
- google chromeInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98...4.3 Medium
- google chromeInappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790...4.3 Medium
- google chromeInappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98...4.3 Medium
- google chromeInappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a...4.3 Medium
- google chromeOut of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote...8.8 High
- google chromeUse after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to...8.8 High
- millhouse-project project millhouse-projectMillhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability...9.8 Critical
- diafan diafan.cmsDiafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id...6.1 Medium
- showmojo mojobox, mojobox firmware +1 moreShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation...8.1 High
- endonesiaSQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute...9.8 Critical
- steelseries ggAn issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted...8.8 High
- steelseries ggAttackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application...7.5 High
- advancedplugins ultimateimagetoolIn the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in...7.5 High
- okta imprivata privileged access managementImprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3...5.4 Medium
- seeddmsSeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit...6.1 Medium
- swooleA HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute...6.5 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Search API Leaks Information About CSI Plugins5.3 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Caller ACL Token's Secret ID is Exposed to Sentinel3.4 Low
- hashicorp nomad, nomad enterprise +1 moreNomad ACL Policies without Label are Applied to Unexpected Resources4.1 Medium
- keysight geolocation server, keysight technologies n6845a geolocation server +1 moreKeysight Geolocation Server Exposed Dangerous Method or Function7.8 High
- keysight geolocation server, keysight technologies n6845a geolocation server +1 moreKeysight N6845A Relative Path Traversal7.8 High
- weintek weincloudWeintek Weincloud Improper Authentication7.2 High
- weintek weincloudWeintek Weincloud Improper Restriction of Excessive Authentication Attempts5.3 Medium
- weintek weincloudWeintek Weincloud Improper Handling of Structural Elements7.5 High
- weintek weincloudWeintek Weincloud Weak Password Recovery Mechanism for Forgotten Password7.4 High
- squareup okhttp-brotliDoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response5.9 Medium
- tibco ebx add-onsTIBCO EBX Add-ons SQL Injection Vulnerability8.8 High
- avaya aura device servicesAvaya Aura Device Services Remote Code Execution8.6 High
- feathersjs feathersfeathersjs socket handler allows abusing implicit toString7.5 High
- aio-libs aiohttpaiohttp vulnerable to HTTP request smuggling5.3 Medium
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 morePrivilege Escalation to root administrator (nsroot)8.0 High
- keylime, fedoraproject fedora, red hat enterprise linux 9 +2 moreKeylime: attestation failure when the quote's signature does not validate2.3 Low
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreReflected Cross-Site Scripting (XSS)8.3 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 moreUnauthenticated remote code execution9.8 Critical
curlUbuntucurl regressionNo score- Show moreLoading…