CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- dietpi-dashboard project dietpi-dashboardDietPi-Dashboard Insufficient TLS Handshake Pool7.5 High
- omeka, omeka omeka/omeka-s, s +2 moreCross-site Scripting (XSS) - Stored in omeka/omeka-s5.4 Medium
- omeka, omeka omeka/omeka-s, s +2 moreServer-Side Request Forgery (SSRF) in omeka/omeka-s6.5 Medium
- omeka, omeka omeka/omeka-s, s +2 moreCross-site Scripting (XSS) - Stored in omeka/omeka-s5.4 Medium
- cncf crossplaneCrossplane vulnerable to possible image tampering from missing image validation for Packages8.4 High
- balderdashy sailsSails DoS vulnerability for apps with sockets enabled7.5 High
- cncf crossplaneCrossplane vulnerable to denial of service from large image3.4 Low
- getkirby kirbyKirby vulnerable to denial of service from unlimited password lengths5.3 Medium
- getkirby kirbyKirby vulnerable to Cross-site scripting (XSS) from MIME type auto-detection of uploaded files5.7 Medium
- getkirby kirbyKirby XML External Entity (XXE) vulnerability in the XML data handler6.8 Medium
- getkirby kirbyKirby vulnerable to Insufficient Session Expiration after a password change7.3 High
- radiustheme variation images gallery for woocommerceWordPress Variation Images Gallery for WooCommerce Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawio8.3 High
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawio9.6 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Reflected in jgraph/drawio9.6 Critical
- getkirby kirbyKirby vulnerable to field injection in the KirbyData text storage handler7.1 High
- matthew fries mf gig calendar, mf gig calendar project gig calendar +1 moreWordPress MF Gig Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- radiustheme variation swatches for woocommerce, variation swatches for woocommerce swatches for woocommerce +1 moreWordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- radio forge muses player with skins, radioforge radio forge muses player with skins +1 moreWordPress Radio Forge Muses Player with Skins Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- getwpfunnels wpfunnels, wpfunnels team drag & drop sales funnel builder for wordpress – wpfunnels +1 moreWordPress WPFunnels Plugin <= 2.7.16 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)7.1 High
feignOSS-FuzzSecurity exception in java.base/java.util.regex.Pattern$GroupTail.matchNo scoreapache-commons-ioOSS-FuzzSecurity exception in java.base/java.util.regex.Pattern$Loop.matchNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- custom field for wp job manager project field for wp job manager, gravity master custom field for wp job manager +1 moreWordPress Custom Field For WP Job Manager Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wpkube authors listWordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- maennchen1 wpshopgermany it-recht kanzleiWordPress wpShopGermany IT-RECHT KANZLEI Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wpstreamWordPress WpStream plugin <= 4.5.4 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- gz scripts availability booking calendar phpGZ Scripts Availability Booking Calendar PHP Image cross site scripting3.5 Low
- gz scripts availability booking calendar phpGZ Scripts Availability Booking Calendar PHP HTTP POST Request index.php cross site scripting3.5 Low
- navneil naicker acf photo gallery fieldACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update4.3 Medium
- instawp connect, connect – 1-click wp staging & migration +1 moreInstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver9.8 Critical
- dell power manager, power manager (dpm) +1 moreDell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A...6.1 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...8.1 High
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, iOS 16.6...7.8 High
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,...8.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5....5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, iOS 16.6...7.2 High
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, iOS 16.6...7.5 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5....5.5 Medium
- apple ipados, watchos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,...7.8 High
- apple ipados, macos, watchos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, watchos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,...7.8 High
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app...7.5 High
- Show moreLoading…