CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- youdiancms YouDianCMS ydLib.php curl_exec server-side request forgery 5.3 Medium
- microsoft dynamics 365, dynamics 365 field service (on-premises) v7 series +1 more Microsoft Dynamics 365 Elevation of Privilege Vulnerability 9.0 Critical
- youdiancms YouDianCMS image_upload.php unrestricted upload 5.3 Medium
-
github.com/PromonLogicalis/asn1Go Malicious code in github.com/PromonLogicalis/asn1 No score - youdiancms YouDianCMS information disclosure 6.9 Medium
- rockoa xinhu, xinhu rockoa +1 more Xinhu RockOA openmodhetongAction.php dataAction sql injection 5.3 Medium
- biscuit-auth biscuit Public key confusion in third party block in Biscuit 3.0 Low
- biscuit-auth biscuit-rust, biscuitsec biscuit-auth +1 more biscuit-rust vulnerable to public key confusion in third party block 3.0 Low
- iobit dualsafe password manager IObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path 8.5 High
- lenovo pc manager, pcmanager +1 more A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow... 5.5 Medium
- lenovo pc manager, pcmanager +1 more A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow... 7.8 High
- lenovo pc manager, pcmanager +1 more A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow... 7.8 High
- motorola q14 mesh router firmware An authentication bypass vulnerability could allow an attacker to access API functions without... 7.3 High
- motorola q14 mesh router firmware, q14 firmware +1 more A command injection vulnerability could allow an authenticated user to execute operating system... 7.2 High
- motorola q14 mesh router firmware, q14 firmware +1 more A denial-of-service vulnerability could allow an authenticated user to trigger an internal... 2.7 Low
- lenovo driver manager, drivers management +1 more A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307... 7.8 High
- opentext filr Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites. 2.1 Low
-
IdentityServer4NuGet IdentityServer Open Redirect vulnerability 5.1 Medium - openbmc slpd-lite slpd-lite unauthenticated memory corruption 9.8 Critical
- iobit driver booster IObit Driver Booster BPL VCL120.BPL uncontrolled search path 8.5 High
- akshudev pheonixappapi PheonixAppAPI has visible Encoding Maps 4.4 Medium
- fogproject FOG Weak file permissions 5.3 Medium
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect 5.2 Medium
- fogproject FOG Sensitive Information Disclosure 7.5 High
- fogproject FOG Authenticated File Upload RCE 8.8 High
- biscuit-auth biscuit-java biscuit-java vulnerable to public key confusion in third party block 3.0 Low
- iobit itop data recovery pro IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path 8.5 High
- elastic elasticsearch Elasticsearch elasticsearch-certutil csr fails to encrypt private key 4.9 Medium
-
ezsystems/ezplatform-admin-uiPackagist eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget 4.8 Medium - cato networks sdp client, catonetworks cato client +1 more Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users 5.6 Medium
- cato networks sdp client, catonetworks cato client +1 more Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover 6.5 Medium
- cato networks sdp client, catonetworks cato client +1 more Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file 8.8 High
- cato networks sdp client, catonetworks cato client +1 more Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade 8.8 High
- cato networks sdp client, catonetworks cato client +1 more Remote Code Execution in Cato Windows SDP client via crafted URLs 7.5 High
- harbor Harbor fails to validate the user permissions when updating project configurations 6.4 Medium
- zitadel Zitadel improperly sanitizes HTML in emails and Console UI 4.3 Medium
- zitadel Zitadel has an "Ignoring unknown usernames" vulnerability 5.3 Medium
- drupal view password, view password project password +1 more View Password - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-026 4.8 Medium
- deepset haystack Insecure Jinja2 templates rendered in Haystack Components can lead to RCE 7.5 High
- duende identityserver Duende IdentityServer Open Redirect vulnerability 4.7 Medium
- ibexa admin-ui Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget 5.4 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki Platform XSS through conflict resolution 9.1 Critical
- xwiki, xwiki xwiki-platform +1 more XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet 10.0 Critical
- xwiki, xwiki xwiki-platform +1 more XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader 6.4 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki Platform vulnerable to document deletion and overwrite from edit 4.3 Medium
- weights \& biases weave W&B Weave server remote arbitrary file leak and privilege escalation 8.8 High
- dell data manager appliance software (dmas), dm5500 firmware +1 more DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high... 3.3 Low
- plug&track thermoscan ip A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the... 3.3 Low
- plug&track thermoscan ip A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP... 7.8 High
- plug&track thermoscan ip A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such... 6.5 Medium
- Show olderLoading…