CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- axis communications ab a1001 network door controller, axis a1001 firmware +1 moreHeap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication7.1 High
- axis os, a1001 firmware, a1210 \(-b\) firmware +8 more +10 moreDenial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication6.5 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System search-appointment.php cross site scripting3.5 Low
- apache inlongApache InLong: SQL injection in audit endpoint9.8 Critical
- apache inlongApache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param7.5 High
- apache inlongApache InLong: General user can delete and update process6.5 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System invoice.php cross site scripting3.5 Low
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit_category.php cross site scripting3.5 Low
- infodrom e-invoice approval systemSQLi in Infodrom Sofwares E-Invoice Approval System9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreIvanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote...10.0 Critical
- infodrom e-invoice approval systemPlaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System7.5 High
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit_product.php cross site scripting3.5 Low
- biltay scientaSQLi in Biltay Technlogys Scienta9.8 Critical
- campcodes beauty salon management systemCampcodes Beauty Salon Management System add-category.php cross site scripting3.5 Low
- generic model organism database project gbrowse** UNSUPPPORTED WHEN ASSIGNED ** GBrowse accepts files with any formats uploaded and places them...9.8 Critical
- campcodes beauty salon management systemCampcodes Beauty Salon Management System edit-accepted-appointment.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System forgot-password.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System del_service.php sql injection6.3 Medium
- moj applicant programmeApplicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE...5.5 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System del_category.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System about-us.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System add-services.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System search-appointment.php sql injection6.3 Medium
- gallagher command centreImproper privilege validation in Command Centre Server allows authenticated unprivileged...4.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System del_feedback.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System admin-profile.php sql injection6.3 Medium
- campcodes beauty salon management systemCampcodes Beauty Salon Management System index.php sql injection7.3 High
- gitpython project gitpythonGitPython vulnerable to remote code execution due to insufficient sanitization of input arguments9.8 Critical
- gnu gdbGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the...5.5 Medium
- gnu gdbGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the...5.5 Medium
- gnu gdb, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function...5.5 Medium
- pandoc, debian linux +1 morePandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted...6.3 Medium
- pligg cmsPligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE)...9.8 Critical
- vanderbilt redcapREDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose,...2.7 Low
- weaver e-officeAn arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute...9.8 Critical
- prestashop amazonAn issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to...5.3 Medium
- vasion printerlogic clientAn issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During...9.9 Critical
- vasion printerlogic clientAn issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During...9.9 Critical
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path...7.5 High
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an...7.5 High
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path...6.5 Medium
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is...7.5 High
- vocera report server, voice server +1 moreAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path...9.8 Critical
- rtx trap project trapRTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.6.1 Medium
- rtx trap project trapRTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the...7.5 High
- thinkificThinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS...6.1 Medium
- gallagher command centreAccess Zone stack overflow6.5 Medium
- gallagher command centreCompetency access levels not enforced in the server7.1 High
- gallagher command centreImproper privilege validation in Command Centre Server allows authenticated operators to modify...7.6 High
s2n-quiccrates.ioPotential denial of service after connection migrationNo score- Show moreLoading…