CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- open babel babel, openbabel open babel +1 moreOpen Babel has out-of-bounds write in Gaussian translationVectors[]9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has uninitialized pointer dereference in GRO residue parser9.8 Critical
- open babel babel, openbabel open babel +1 moreOpen Babel has uninitialized pointer dereference in MSI atom parser9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has uninitialized pointer dereference in PQS pFormat9.8 Critical
- open babel babel, openbabel open babel +1 moreOpen Babel has out-of-bounds write in PQS coord_file parser9.8 Critical
- open babel babel, openbabel open babel +1 moreDuplicate Advisory: Open Babel has out-of-bounds write in Gaussian coords_type orientation parser7.3 High
copypartyPyPIcopyparty vulnerable to reflected cross-site scripting via hc parameter6.3 Medium- 1panel-dev kubepiLeak password hash of any user6.5 Medium
- 1panel-dev kubepiPrivilege Escalation in kubepi9.1 Critical
- daprAPI token authentication bypass in HTTP endpoints in Dapr6.8 Medium
- objectcomputing openddsMalformed PID_PROPERTY_LIST parameter in DATA submessage remotely crashes OpenDDS7.5 High
- fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 moreProcessing sftp server read may cause null dereference3.1 Low
- esri arcgis server, arcgis enterprise server +1 moreBUG-000158075 Stored XSS issue in ArcGIS Server6.1 Medium
- esri arcgis server, arcgis enterprise server +1 moreBUG-000154070 Stored XSS issue in the ArcGIS REST Services directory3.4 Low
- cern indicoCross-Site-Scripting via confirmation prompts5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.7 Medium
- microsoft edge for android, edge chromium +1 moreMicrosoft Edge for Android Spoofing Vulnerability4.3 Medium
- hp laserjet pro, color laserjet pro 4201-4203 4ra87f firmware, color laserjet pro 4201-4203 4ra88f firmware +17 more +19 moreCertain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege...9.8 Critical
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore6.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcore7.2 High
- pimcore, pimcore pimcore/pimcore +1 moreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore7.6 High
- gitlabIncorrect Authorization in GitLab8.0 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.c5.5 Medium
python-pipSUSESecurity update for python-pipNo scorepython-pipopenSUSESecurity update for python-pipNo score- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSamba: check attribute access rights for ldap adds of computers7.5 High
- asus rt-ac86u, rt-ax56u v2, rt-ac86u firmware +1 more +3 moreASUS RT-AX56U V2 & RT-AC86U - Format String - 29.8 Critical
- asus rt-ac86u, rt-ax56u v2, rt-ac86u firmware +1 more +3 moreASUS RT-AX56U V2 & RT-AC86U - Format String -17.2 High
- panasonic control fpwin proA memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous...7.8 High
- panasonic control fpwin proA type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous...7.8 High
- panasonic control fpwin proA stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous...7.8 High
- dell powerstore, powerstoreos +1 moreDell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log...9.0 Critical
- ruoyiy_project RuoYi File Upload uploadFilesPath cross site scripting3.5 Low
- hospital management system project management system, rickxy hospital management system +1 moreHospital Management System patientprofile.php sql injection6.3 Medium
- hgiga isherlock, isherlock 4.5, isherlock 5.5 +2 moreHGiga iSherlock - Command Injection9.8 Critical
- hospital management system project management system, rickxy hospital management system +1 moreHospital Management System patientappointment.php sql injection6.3 Medium
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.8.4 High
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000135364 XSS in 10.8.1 sites builder iframe source5.4 Medium
- hospital management system project management system, rickxy hospital management system +1 moreHospital Management System patient.php sql injection6.3 Medium
- galaxy software services vitals esp, gss vitals enterprise social platform +1 moreGalaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key8.6 High
- hospital management system project management system, rickxy hospital management system +1 moreHospital Management System patientforgotpassword.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit_product.php sql injection6.3 Medium
- artbees jupiter x coreJupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download7.5 High
- sourcecodester house rental and property listing system, house rental and property listing php project rental and property listing php +1 moreSourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload6.3 Medium
- four-faith video surveillance management systemXiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization7.3 High
- Show moreLoading…