CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx unrestricted upload5.5 Medium
- sakura ts webfonts for sakuraCross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier...4.3 Medium
- sakura ts webfonts for sakuraCross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote...6.1 Medium
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random values2.6 Low
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System Ajaxfileupload.ashx unrestricted upload5.5 Medium
- metabaseMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to...9.8 Critical
- asynchronous sockets for c\+\+ project sockets for c\+\+async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when...9.8 Critical
- webboss webboss.io cmsWebBoss.io CMS before v3.6.8.1 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- webboss webboss.io cmsAn access control issue in WebBoss.io CMS v3.7.0 allows attackers to access the Website Backup...7.5 High
- deskproServer Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows...7.2 High
- ibos, ibos oa +1 moreIBOS OA Mobile Notification edit actionEdit sql injection5.5 Medium
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability8.4 High
- wolfcode easyadmin8EasyAdmin8 File Upload Module index.html unrestricted upload3.9 Low
- ibos, ibos oa +1 moreIBOS OA Delete Category del sql injection6.3 Medium
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload5.5 Medium
- gen technology four mountain torrent disaster prevention and control of monitoring and early warning system, istrong four mountain torrent disaster prevention\, control monitoring and early warning system +1 moreGen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System UploadFloodPlanFileUpdate.ashx unrestricted upload5.5 Medium
- bug finder foody friendBug Finder Foody Friend Profile Picture profile unrestricted upload4.3 Medium
- bug finder chaincity real estate investment platform, bugfinder chaincity +1 moreBug Finder ChainCity Real Estate Investment Platform GET Parameter property sql injection5.5 Medium
- bug finder chaincity real estate investment platform, bugfinder chaincity +1 moreBug Finder ChainCity Real Estate Investment Platform New Ticket create cross site scripting3.5 Low
- weaver e-cologyWeaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injection5.5 Medium
- beijing netcon ns-asg, netentsec application security gateway +1 moreBeijing Netcon NS-ASG test_status.php direct request4.3 Medium
- ibos, ibos oa +1 moreIBOS OA Personal Office Address Book export actionExport sql injection6.3 Medium
container-suseconnectSUSESecurity update for container-suseconnectNo score- openidentityplatform openamUser impersonation using SAMLv1.x SSO in Open Access Management9.1 Critical
- boom cms, uxblondon boom cms +1 moreBoom CMS assets-manager add cross site scripting3.5 Low
- paulprinting cms, paulprinting project paulprinting +1 morePaulPrinting CMS Search delivery cross site scripting3.5 Low
- adobe coldfusionAnalysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE9.8 Critical
- activeitzone active super shop cms, active super shop +1 moreActiveITzone Active Super Shop CMS Manage Details Page cross site scripting3.5 Low
- codecanyon tiva events calender, tiva events calendar project events calendar +1 moreCodecanyon Tiva Events Calender cross site scripting3.5 Low
liblouisOSS-FuzzNegative-size-param in passDoActionNo scorephpOSS-FuzzHeap-use-after-free in zval_call_destructorNo score- github enterprise server, micro focus cobol server, enterprise developer +2 more +4 moreMitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.7.1 High
- dell hybrid client, hybrid client (dhc) +1 moreDell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An...6.4 Medium
- aures komet, komet firmware +1 moreAures Komet Kiosk Mode access control4.3 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure...5.5 Medium
- dell wyse management suiteWyse Management Suite versions prior to 4.0 contain a sensitive information disclosure...4.4 Medium
- dell wyse management suiteWyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An...4.9 Medium
- dell wyse management suiteWyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An...4.9 Medium
- infodoc document on-line submission and approval systemInfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)7.5 High
- paulprinting cms, paulprinting project paulprinting +1 morePaulPrinting CMS cross site scripting3.5 Low
- dooblou wifi file explorer, wifi file explorer project file explorer +1 moreDooblou WiFi File Explorer cross site scripting3.5 Low
- product owner: webile webile, webile wifi pc file transfer project wifi pc file transfer +1 moreWebile HTTP POST Request cross site scripting3.5 Low
- adobe indesignAdobe InDesign BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure5.3 Medium
- infodoc document on-line submission and approval systemInfoDoc Document On-line Submission and Approval System - Arbitrary File Upload9.8 Critical
- google chromeInappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote...9.6 Critical
- mobisystems office suiteOffice Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site...6.1 Medium
- samsung fgn1115-wp-wh firmware, fgn1122-cd firmware, fgn1122-sa firmware +31 more +33 moreThe web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for...5.3 Medium
- Show moreLoading…