CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit-services.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit_category.php sql injection6.3 Medium
- nodebbNodeBB vulnerable to path traversal and code execution via prototype vulnerability10.0 Critical
- apache shiroApache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.9.8 Critical
- abb ability™ zenon, zenon +1 moreInsecure deserialization in zenon internal DLLs6.3 Medium
- abb ability™ zenon, zenon +1 moreCode Execution through overwriting project file on zenon engineering studio system5.9 Medium
- abb ability™ zenon, zenon +1 moreCode Execution through overwriting service executable in utilities directory7.0 High
- abb ability™ zenon, zenon +1 moreCode Execution through Writable Mosquitto Configuration File7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…7.0 High
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection null pointer dereference denial-of-service vulnerability7.5 High
- linux kernel, fedora, netapp h300s +7 more +9 moreSession race condition remote code execution vulnerability8.1 High
- linux kernel, fedora, netapp h300s +8 more +10 moreSession race condition remote code execution vulnerability8.1 High
- linux kernel, fedora, netapp h300s firmware +8 more +10 moreSession null pointer dereference denial-of-service vulnerability7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file write3.3 Low
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h5.5 Medium
- linux kernel, fedora, netapp h300s +7 more +9 moreSession setup memory exhaustion denial-of-service vulnerability7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags7.8 High
- frrouting, fedora, red hat enterprise linux 8 +1 more +3 moreInifinite loop in babld message parsing may cause dos3.5 Low
- redhat quay, red hat quay 3 +1 moreQuay: stored cross site scripting5.4 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connections7.5 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 moreQemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()6.0 Medium
- debian linux, linux kernel, fedora +4 more +6 moreUse-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c6.4 Medium
- solwininfotech user activity logUser Activity Log < 1.6.3 - Admin+ SQL Injection7.2 High
- premio my sticky elements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs +1 moreAll-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- auto location for wp job manager via google project location for wp job manager via google, unknown auto location for wp job manager via google +1 moreAuto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting4.8 Medium
- gvectors wpforo forumwpForo Forum < 2.1.9 - Reflected Cross-Site Scripting6.1 Medium
- mozilla thunderbird, debian linux +1 moreFile Extension Spoofing using the Text Direction Override Character7.5 High
- otrs, otrs ag ((otrs)) community edition +1 moreHost header injection by attachments in web service6.3 Medium
- otrsTickets can be moved without permissions4.1 Medium
- otrs survey, otrs ag ((otrs)) community edition, otrs +2 moreXSS stored in survey answers4.1 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreCode execution via System Configuration7.2 High
- travelable trek management solution project trek management solution, travelmate travelable trek management solution +1 moreTravelmate Travelable Trek Management Solution Comment Box cross site scripting3.1 Low
- designthemes insurancephpscriptpoint Insurance search.php cross site scripting3.5 Low
- designthemes insurancephpscriptpoint Insurance page.php cross site scripting3.5 Low
- phpscriptpoint car listingphpscriptpoint Car Listing GET Parameter search.php sql injection6.3 Medium
- phpscriptpoint car listingphpscriptpoint Car Listing search.php cross site scripting3.5 Low
- phpscriptpoint ecommercephpscriptpoint Ecommerce product.php cross site scripting3.5 Low
- phpscriptpoint ecommercephpscriptpoint Ecommerce blog-single.php cross site scripting3.5 Low
- assemblysoftware trialworksA cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers...6.1 Medium
- atera, atera agent package availability +1 morePrivilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due...7.8 High
- ateraAtera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure...7.8 High
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security update5.5 Medium
- nokia netact/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able...8.8 High
- nokia netactAn issue was discovered in Nokia NetAct 22 through the Administration of Measurements website...5.4 Medium
- nokia netactAn issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A...5.4 Medium
- nokia netactAn issue was discovered in Nokia NetAct 22 through the Administration of Measurements website...8.8 High
- nokia netactAn issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can...8.8 High
- seeddmsA cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute...6.1 Medium
- phpscriptpoint jobseekerphpscriptpoint JobSeeker search-result.php cross site scripting3.5 Low
- Show moreLoading…