CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 moreCSRF vulnerability in GitLab Authentication Plugin5.4 Medium
- jenkins gradle, jenkins project gradle plugin +1 moreIncorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log6.5 Medium
- jenkinsJenkins Stored Cross-site Scripting vulnerability5.4 Medium
- solarwinds platformSolarWinds Platform Incorrect Behavior Order Vulnerability7.2 High
- solarwinds platformSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- solarwinds platformSolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability7.2 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions5.2 Medium
intagliocrates.ioUnsoundness in `intern` methods on `intaglio` symbol internersNo score- paddlepaddleCommand injection in fs.py9.6 Critical
- paddlepaddleFPE in paddle.linalg.matrix_power4.7 Medium
- paddlepaddleHeap buffer overflow in paddle.trace8.3 High
- checkpoint gaia portalLocal user may lead to privilege escalation using Gaia Portal hostnames page.7.2 High
- paddlepaddleNull pointer dereference in paddle.flip4.7 Medium
- paddlepaddleUse after free in PaddlePaddle8.3 High
- apache helixApache Helix: Deserialization vulnerability in Helix workflow and REST9.8 Critical
- fujitsu ip-90, ip-90 firmware, ip-920d firmware +16 more +18 moreFujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow...7.5 High
- fujitsu limited si-r 130b, si-r 30b, si-r 90brin +29 more +31 moreAuthentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows...8.8 High
- dell ecs streamerDell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in...5.8 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.0 Medium
- vmware isolation segment, tanzu application service for vms, tanzu application service for virtual machines +2 moreVMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability6.5 Medium
- hitachi energy rtu500 series, hitachienergy rtu500 firmware +1 moreA vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500...7.5 High
- hitachi energy rtu500 series, hitachienergy rtu500 firmware +1 moreA vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the...7.5 High
- trellix epo, mcafee epolicy orchestrator +1 moreA reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a...5.4 Medium
- deepen bajracharya video conferencing with zoomVideo Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure3.7 Low
curlDebiancurl - security updateNo score- owasp modsecurityTrustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.7.5 High
- yasm project yasmYasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c,...5.5 Medium
- octobercms octoberStored Cross-Site Scripting October CMS5.4 Medium
- netdiscoNetdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker...6.1 Medium
- netdiscoNetdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability...4.8 Medium
- emlogemlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php.6.5 Medium
- sumatrapdfreader sumatrapdfA buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- fsmlabs timekeeperAn XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration -> Compliance ->...5.4 Medium
- fsmlabs timekeeperAn issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests...9.8 Critical
- zmanda amandaamanda: Fix of 2 CVEs7.8 High
- mremotengmRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <=...7.5 High
- asus armoury crate, setupasusservices +1 moreASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path...7.8 High
- brevoSQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote...9.8 Critical
- gxsoftware xperiencentralInteractive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was...7.5 High
- gxsoftware xperiencentralPOST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not...6.5 Medium
- gxsoftware xperiencentralInteractive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was...6.1 Medium
- gxsoftware xperiencentralInteractive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was...8.8 High
- truedeskA cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute...6.1 Medium
- truedesk* A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute...6.1 Medium
- directusDirectus has Incorrect Permission Checking for GraphQL Subscriptions5.7 Medium
- phpscriptpoint lawyerphpscriptpoint Lawyer search.php cross site scripting3.5 Low
- taosdata tdengineTDengine Database Denial-of-Service6.5 Medium
- cal cal.comCal.com not expiring old sessions after enabling 2FA6.5 Medium
- cryptomatorCryptomator's MSI installer allows local privilege escalation7.0 High
- dataeaseDataEase has a SQL injection vulnerability that can bypass blacklists8.8 High
- Show moreLoading…