CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- dlink dir-859 firmware** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-859 FW105b03...9.8 Critical
- d-link dir-895, dlink dir-895l firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-895 FW102b07...9.8 Critical
- dlink dir-885l firmware** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-885L FW102b01...9.8 Critical
- d-link dir-645 firmware** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-645 firmware...9.8 Critical
- supermicro h12dst-b, h12dgo-6 firmware, h12dgq-nt6 firmware +163 more +165 moreA shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST...9.8 Critical
- vound-software intella connectVound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting (XSS).5.4 Medium
- vound-software intella connectVound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.6.1 Medium
- cms project cmsFuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java.6.1 Medium
- cms project cmsFuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.6.1 Medium
- freedesktop popplerA vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a...5.5 Medium
- dedecmsRemote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run...9.8 Critical
- ruijienetworks eap, nbc, rap +68 more +70 moreRemote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0...9.8 Critical
- wifi-soft unibox administrationWifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability...9.8 Critical
- guanzhou tozed kangwei intelligent technology zlts10g, sztozed zlt s10g firmware +1 moreA Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G...8.8 High
- precisely spectrum spatial analystPrecisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery (SSRF).9.1 Critical
- precisely spectrum spatial analystPrecisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal.5.3 Medium
- ultralytics yolov3Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary...7.8 High
- ultralytics yolov5Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary...7.8 High
- neofr neofragCross Site Scripting (XSS) vulnerability in neofarg-cms 0.2.3 allows remoate attacker to run...4.8 Medium
- duxcms project duxcmsCross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary...5.4 Medium
- duxcms project duxcmsCross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote...6.5 Medium
- yunyecmsSQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL...9.8 Critical
dlopen_derivecrates.io`dlopen_derive` is unmaintainedNo score- tadiran telecom composit, tadirantele aeonix +1 moreTadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File7.3 High
- tadiran telecom aeonix, tadirantele aeonix +1 moreTadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory7.5 High
- tadiran telecom aeonix, tadirantele aeonix +1 moreTadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy5.3 Medium
- anasystem sensmini m4, sensmini m4 firmware +1 moreAnaSystem SensMini M4 – an authenticated user can cause Denial of Service7.5 High
- jbl soundbar multibeam, bar 5.1 surround firmware +1 moreJBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials6.2 Medium
- heights telecom ero1xs-pro dual-band wifi, heights-t ero1xs-pro firmware +1 moreHeights Telecom ERO1xS-Pro Dual-Band WiFi command injection9.8 Critical
- synel synergy fingerprint terminals, synergy\/a firmware +1 moreSynel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'8.8 High
- synel synergy fingerprint terminals, synergy\/a firmware +1 moreSynel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials9.8 Critical
- sysaid, sysaid on-premises +1 moreSysaid - CWE-552: Files or Directories Accessible to External Parties8.3 High
- sysaid, sysaid on-premises +1 moreSysaid - CWE-434: Unrestricted Upload of File with Dangerous Type9.8 Critical
- apache nifiApache NiFi: Potential Code Injection with Properties Referencing Remote Resources8.8 High
- google chromeInsufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a...6.5 Medium
- silabs.com gecko bootloader, silabs gecko software development kit +1 moreUninitialized variable in Gecko Bootloader can leak secure stack3.8 Low
umaminpmAnyone with a share link can RESET all website data in Umami9.6 Critical- discourseDiscourse's restricted tag information visible to unauthenticated users4.3 Medium
- discourseDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions5.3 Medium
- discourseDiscourse vulnerable to DoS via defer queue4.3 Medium
- discourseDiscourse vulnerable to DoS via post edit reason4.3 Medium
- discourseDiscourse Race Condition in Accept Invite2.6 Low
- discourseDiscourse CSP nonce reuse vulnerability for anonymous users6.8 Medium
radare2OSS-FuzzHeap-use-after-free in Elf32_freeNo score- abb ao-opcUnquoted Service Path in ABB AO-OPC7.2 High
- codesys development system, scripting +1 moreCodesys: Vulnerability in CODESYS Development System and CODESYS Scripting7.3 High
- mingsoft mcmsMingsoft MCMS HTTP POST Request search.do cross site scripting3.5 Low
- jewelry store system project store system, sourcecodester jewelry store system +1 moreSourceCodester Jewelry Store System add_customer.php cross site scripting3.5 Low
- cafe billing system project billing systemCafe Billing System Order index.php sql injection6.3 Medium
- sourcecodester simple online mens salon management system, oretnom23 simple online men\'s salon management system +1 moreSourceCodester Simple Online Mens Salon Management System sql injection6.3 Medium
- Show moreLoading…