CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 moreQuiz And Survey Master < 9.0.2 - Contributor+ Stored XSS5.5 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 moreIn gnss service, there is a possible out of bounds write due to improper input validation. This...6.7 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +36 more +38 moreIn gnss service, there is a possible escalation of privilege due to improper certificate...9.8 Critical
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt6989, mt8666, mt8667, mt8673, mt8676, mt8678 +1 moreIn gnss service, there is a possible out of bounds write due to improper input validation. This...6.7 Medium
- google android, mediatek mt6768, mt6779 +19 more +21 moreIn venc, there is a possible out of bounds write due to type confusion. This could lead to local...9.8 Critical
- changing mobile one time passwordCHANGING Mobile One Time Password - Arbitrary File Upload7.2 High
- changing mobile one time passwordCHANGING Mobile One Time Password - Arbitrary File Reading4.9 Medium
- kakao piccoma corp. "piccoma" app for android, "piccoma" app for ios +1 more"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an...4.0 Medium
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dos8.1 High
- adolphdudu ratio-swiper, swiperjs swiper +1 moreadolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function...6.5 Medium
- thunderobot control centerAn issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2...10.0 Critical
- async project asyncAsync <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while...7.5 High
- gradio project gradioWithdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py9.8 Critical
- harvey-woo key-serializer@cat5th/key-serializer Prototype Pollution vulnerability6.3 Medium
- agreejs shared sharedagreejs shared v0.0.1 was discovered to contain a prototype pollution via the function...9.8 Critical
- che3vinci utilsche3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function...8.1 High
- cafebazaar hodcafebazaar hod v0.4.14 was discovered to contain a prototype pollution via the function request....9.8 Critical
- cahilfoley utilsahilfoley cahil/utils v2.3.2 was discovered to contain a prototype pollution via the function set...9.8 Critical
- 2o3t 2o3t-utility2o3t-utility v0.1.2 was discovered to contain a prototype pollution via the function extend. This...9.8 Critical
- robinweser fast-loopsrobinweser fast-loops vulnerable to prototype pollution10.0 Critical
- amoyjs commonamoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function...7.3 High
- richardrodger jsonic, rjrodger jsonic-next +1 morerjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function...6.3 Medium
- ag-grid, ag-grid ag-grid-enterprise, ag charts +2 moreag-grid packages vulnerable to Prototype Pollution6.3 Medium
- adolphdudu ratio-swiper, swiperjs swiper +1 moreadolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function...6.5 Medium
- jrburke requirejsjrburke requirejs vulnerable to prototype pollution10.0 Critical
- adolphdudu ratio-swiper, swiperjs swiper +1 moreadolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults6.5 Medium
- ag-grid, ag-grid ag-grid-enterprise +1 morePrototype pollution in ag-grid-community via the _.mergeDeep function9.8 Critical
- amoyjs common@amoy/common v was discovered to contain a prototype pollution via the function extend7.3 High
- richardrodger jsonic, rjrodger jsonic-next +1 morejsonic was discovered to contain a prototype pollution via the function empty.9.8 Critical
- airvert thuan frappejsfrappejs was discovered to contain a prototype pollution via the function registerView8.8 High
- akbr patch-intoakbr patch-into was discovered to contain a prototype pollution via the function patchInto8.8 High
- tada5hi sp commonTada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function...6.3 Medium
- ageoflearning cli-lib@aofl/cli-lib Prototype Pollution vulnerability6.3 Medium
- phpokphpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the...6.1 Medium
- machformMachform up to version 19 is affected by an authenticated Blind SQL injection in the user account...8.8 High
- machformMachForm up to version 19 is affected by an authenticated stored cross-site scripting.5.4 Medium
- machformMachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which...5.4 Medium
- machformMachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to...9.9 Critical
- google android, imaginationtech powervr-gpu +1 moreIn PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic...7.8 High
- google android, imaginationtech powervr-gpu +1 moreIn DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due...7.0 High
- google android, imaginationtech powervr-gpu +1 moreIn _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race...7.0 High
- google androidIn onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to...7.8 High
- google androidIn ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by...5.5 Medium
- google androidIn com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of...7.8 High
- ffmpegFFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.8.4 High
- ffmpegFFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in...6.6 Medium
- google androidIn multiple functions of StatsService.cpp, there is a possible memory corruption due to a use...7.8 High
- google android, imaginationtech powervr-gpu +1 moreIn DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due...7.8 High
- google android, imaginationtech powervr-gpu +1 moreIn DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code...7.8 High
- google androidIn multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi...7.8 High
- Show moreLoading…