CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- radiustheme the post grid, techlabpro1 the post grid – shortcode, gutenberg blocks and elementor addon for post grid +1 moreThe Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag6.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor, choijun la studio element kit for elementor +2 moreLA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion8.8 High
- voidcoders void contact form 7 widget for elementor page builderVoid Contact Form 7 Widget For Elementor Page Builder <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute6.4 Medium
- sur boot storeBoot Store <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- hitachi ops center common servicesFile Permission Vulnerability in Hitachi Ops Center Common Services5.1 Medium
- hitachi job management partner1/extensible snmp agent, jp1/extensible snmp agent, jp1/extensible snmp agent for windows +2 more +4 moreFolder Permission Vulnerability in JP1/Extensible SNMP Agent7.8 High
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/write7.8 High
- debian linux, linux kernel +1 morescsi: mpi3mr: Sanitise num_phys7.8 High
- openbsd opensshOpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password...7.5 High
- twilio authy, authy 2-factor authentication, authy authenticator +2 moreIn the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an...5.3 Medium
- msp360 backup agentAn issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain...7.5 High
- coderberg residencecmsA stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal...5.4 Medium
- jungo windriver, iconics genesis64, mitsubishielectric c controller module setting and monitoring tool +45 more +47 moreImproper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to...7.8 High
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreImproper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate...7.8 High
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreImproper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate...7.8 High
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreImproper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate...7.8 High
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreOut-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreOut-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreOut-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreDenial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to...5.5 Medium
- jungo windriver, mitsubishielectric cpu module logging configuration tool, cw configurator +32 more +34 moreImproper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate...7.8 High
- linux, linux kernel +1 moreblock: null_blk: end timed out poll request5.5 Medium
- realtek rtsper, rtsuer, rtsper pcie card reader driver +2 moreVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355...7.8 High
- realtek rtsper, rtsuer, rtsper pcie card reader driver +1 more +3 moreVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355...5.5 Medium
- realtek rtsper, rtsuer +1 moreVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355...7.8 High
- realtek rtsper, rtsuer +1 moreVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355...5.5 Medium
- kisaragieffective toy-blogtoy-blog administrative token leaked through the command line parameter4.7 Medium
- kisaragieffective toy-blogtoy-blog Improper Input Validation vulnerability6.5 Medium
- axiomthemes basilWordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability5.4 Medium
- envoyproxy envoyEnvoy Proxy use after free when route hash policy is configured with cookie attributes6.5 Medium
- cocoapods, cocoapods trunk.cocoapods.org +1 moreTrunk's 'Claim your pod' could be used to obtain un-used pods9.3 Critical
- n-able n-centralN-central Authentication Bypass9.1 Critical
- cocoapods, cocoapods trunk.cocoapods.org +1 moreCoacoaPods trunk sessions verification step could be manipulated for owner session hijacking8.2 High
- n-able n-centralN-central Authentication Bypass via Session Rebinding9.1 Critical
- cocoapods, cocoapods trunk.cocoapods.org +1 moreCoacoaPods trunk RCE in email verification system rfc-82210.0 Critical
- weblateWeblate vulnerabler to improper sanitization of project backups4.4 Medium
- parse community server, parse-community parse-server +1 moreZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability9.8 Critical
- gofiber fiberFiber Session Middleware Token Injection Vulnerability10.0 Critical
- gorilla schemaPotential memory exhaustion attack due to sparse slice deserialization7.5 High
- flowiseai flowiseGHSL-2023-248: Flowise xss in /api/v1/credentials/id6.1 Medium
- flowiseai flowiseGHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id6.1 Medium
- flowiseai flowiseGHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id6.1 Medium
- apache http server, netapp ontap +1 moreApache HTTP Server: mod_rewrite proxy handler substitution7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect9.8 Critical
- apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 moreApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.9.1 Critical
- Show moreLoading…