CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- simple online mens salon management system project online mens salon management system, sourcecodester simple online mens salon management system, oretnom23 simple online men\'s salon management system +2 moreSourceCodester Simple Online Mens Salon Management System cross site scripting2.4 Low
- backupbliss backup migration, clone, cl272 enhanced text widget +12 more +14 moreInisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function4.3 Medium
- backupbliss backup migration, clone, cl272 enhanced text widget +13 more +15 moreInisev Plugins (Various Versions) - Missing Authorization on handle_installation function4.3 Medium
- online jewelry store project jewelry store, sourcecodester online jewelry store +1 moreSourceCodester Online Jewelry Store login.php sql injection7.3 High
- apple ipados, macos, ios and ipados +1 more +3 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15...9.8 Critical
- apple macosAn injection issue was addressed with improved input validation. This issue is fixed in macOS...7.5 High
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...9.8 Critical
- apple music, music for android +1 moreThe issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
- apple ipados, macos, safari +4 more +6 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 16.6,...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and...8.8 High
- apple ipados, macos, tvos +3 more +5 moreAn integer overflow was addressed with improved input validation. This issue is fixed in watchOS...9.8 Critical
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS Big...7.5 High
- apple ipados, macos, safari +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6,...6.1 Medium
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...8.8 High
- apple macosA logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9...7.5 High
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS...9.8 Critical
- apple music, music for android +1 moreThis issue was addressed by using HTTPS when sending information over the network. This issue is...5.9 Medium
- phpscriptpoint recipepointphpscriptpoint RecipePoint recipe-result sql injection6.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Enterprise Namespace Creation May Lead to Denial of Service4.9 Medium
- university compass project compassuniversity compass v2.2.0 and below was discovered to contain a code injection vulnerability in...9.8 Critical
- oscoreCode injection in oscore9.8 Critical
- wix embedded mysqlCode injection in wix-embedded-mysql9.8 Critical
- stanford parserCode injection in stanford-parser9.8 Critical
- bramp ffmpeg-cli-wrapperFFmpeg discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>9.8 Critical
- softwareag quartzquartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the...9.8 Critical
- bbossgroups bbossbboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the...9.8 Critical
- code4craft webmagicCode injection in webmagic-core9.8 Critical
- larsga dukeCode injection in Duke9.8 Critical
- boofcvCode injection in BoofCV9.8 Critical
- jeecg bootSQL injection in jeecg-boot9.8 Critical
- jeesiteAn issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows...4.3 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products...5.4 Medium
- powerjobCode injection in PowerJob9.8 Critical
- phpgurukul rail pass management systemSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker...7.2 High
- phpgurukul rail pass management systemSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker...7.2 High
- phpgurukul rail pass management systemCross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote...4.8 Medium
- phpgurukul rail pass management systemCross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote...4.8 Medium
- phpgurukul rail pass management systemSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker...7.2 High
- phpgurukul rail pass management systemSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker...7.2 High
- yiiframework yiiYii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- arm development studio, ds development studio, arm ltd compiler 5 (ac5), arm compiler for embedded 6 (ac6), fast models (fm), arm compiler for embedded fusa (acef), arm development studio (ads), arm forge (af), arm mobile studio (ams), ds-5 development studio, fast models (fm), gnu toolchain (gt), keil mdk (kmdk), mbed studio (ms) +2 moreIncomplete verification of installation file signature7.8 High
- arm compiler, compiler for embedded fusa, compiler for functional safety +4 more +6 moreIncomplete verification of installation file signature7.8 High
- arm compiler, compiler for embedded fusa, compiler for functional safety +9 more +11 moreInsecure directory permissions on installer files7.8 High
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.8 Medium
@saltcorn/clinpmUnsafe plugins can be installed via pack import by tenant admins8.7 High- tolgee, tolgee tolgee-platform +1 moreTolgee Lacks Permission Check for API Key for some endpoints8.1 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform's obfuscated email addresses should not be sorted4.3 Medium
- Show moreLoading…