CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server weakness with encoded question marks in backreferences9.8 Critical
- apache http server, netapp ontap +1 moreApache HTTP Server proxy encoding problem8.1 High
- apache http server, netapp ontap +1 moreApache HTTP Server on WIndows UNC SSRF7.5 High
- apache http server, netapp ontap +1 moreApache HTTP Server: DoS by Null pointer in websocket over HTTP/25.4 Medium
python-imageioMageiaUpdated python-imageio packages fix security vulnerabilityNo score- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile...5.0 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App...4.1 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint4.6 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Web Bulletin5.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged user could create experimental items4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash7.5 High
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreDenial of Service through null pointer reference in “cluster/config” REST endpoint7.5 High
- splunk, splunk enterprise +1 morePath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows7.5 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service (DoS) on the datamodel/web REST endpoint6.5 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise8.8 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard Elements5.4 Medium
- splunk, splunk enterprise, enterprise security +2 moreRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows8.8 High
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreRisky command safeguards bypass through Search ID query in Analytics Workspace6.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure of user names5.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreCommand Injection using External Lookups8.0 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard Elements5.4 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreLow-privileged user could create notifications in Splunk Web Bulletin Messages6.5 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreInsecure File Upload in the indexing/preview REST endpoint4.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software CLI Command Injection Vulnerability6.0 Medium
- flowiseai flowiseGHSL-2023-245: Flowise xss in api/v1/chatflows/id6.1 Medium
- flowiseai flowiseGHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts7.5 High
- flowiseai flowiseGHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file7.5 High
- geoserver, geotools +1 moreRemote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver9.8 Critical
- mongodb compassejson shell parser in MongoDB Compass maybe bypassed7.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMissing authorization check may lead to shard key refinement5.4 Medium
- geoserverGeoServer's Server Status shows sensitive environmental variables and Java properties4.5 Medium
- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +67 more +69 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader6.8 Medium
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +222 more +224 morePermissions, Privileges, and Access Control issues in TZ Secure OS7.3 High
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +257 more +259 moreBuffer Over-read in Trusted Execution Environment7.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +309 more +311 moreBuffer Over-read in TZ Secure OS7.1 High
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +311 more +313 moreDouble Free in HLOS8.4 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware +13 more +15 moreUse of Insufficiently Random Values in Core7.1 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +40 more +42 moreImproper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services8.4 High
- geoserverClasspath resource disclosure in GWC Web Resource API on Windows / Tomcat7.5 High
- sokrates sowa opacReflected XSS in SOWA OPAC5.3 Medium
- mesbookIncorrect Provision of Specified Functionality vulnerability in MESbook9.1 Critical
- mesbookServer-Side Request Forgery vulnerability in MESbook9.3 Critical
- abb aspect enterprise (asp-ent-x), aspect-ent-12 firmware, aspect-ent-256 firmware +19 more +21 moreHard coded default credential contained in install package8.7 High
zeroveccrates.iozerovec incorrectly uses `#[repr(packed)]`6.9 Mediumzerovec-derivecrates.iozerovec-derive incorrectly uses `#[repr(packed)]`6.9 Medium- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618 +1 moreIn faceid servive, there is a possible out of bounds write due to a missing bounds check. This...5.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618 +1 moreIn faceid servive, there is a possible out of bounds write due to a missing bounds check. This...5.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn trusty service, there is a possible out of bounds write due to a missing bounds check. This...6.8 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn trusty service, there is a possible out of bounds write due to a missing bounds check. This...5.1 Medium
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.26 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…