CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- samsung android, samsung mobile devices +1 moreUse of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR...4.0 Medium
- samsung android, samsung mobile devices +1 moreUse of implicit intent for sensitive communication in FCM function in IMS service prior to SMR...4.0 Medium
- samsung android, samsung mobile devices +1 moreUse of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024...5.5 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreImproper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to...7.7 High
- samsung android, samsung mobile devices +1 moreImproper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local...6.5 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1...7.8 High
- samsung android, samsung mobile devices +1 moreImproper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to...5.3 Medium
- samsung mobile devices, samsung android +1 moreImproper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to...7.8 High
- edito cmsLFI in sites managed by Edito CMS7.5 High
- shaonsina sina extension for elementorSina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter6.4 Medium
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability8.2 High
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability8.2 High
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability8.2 High
- openatom openharmonyArkcompiler Ets Runtime has a type confusion vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability8.2 High
- openatom openharmonyArkcompiler Ets Runtime has a use after free vulnerability8.2 High
- openatom openharmonyArkcompiler Ets Runtime has a type confusion vulnerability3.3 Low
- checkmkReflected links in visuals facilitate phishing attacks4.3 Medium
- kiloview p1/p2Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices5.3 Medium
- kiloview p1/p2Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices5.3 Medium
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreInsufficiently protected credentials in Kiloview P1/P2 devices8.8 High
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreWeak Password Requirements in Kiloview P1/P2 devices7.2 High
- kiloview p1/p2, p1 4g video encoder firmware, p1 firmware +2 more +4 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kiloview P1/P2 devices7.2 High
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreDownload of Code Without Integrity Check in Kiloview P1/P2 devices9.8 Critical
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreAuthentication Bypass by Primary Weakness in Kiloview P1/P2 devices9.8 Critical
- kiloview p1/p2, p1 4g video encoder firmware, p1 firmware +2 more +4 moreUse of Hard-coded Credentials in Kiloview P1/P2 devices9.8 Critical
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreMissing Authentication for Critical Function in Kiloview P1/P2 devices10.0 Critical
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreImproper input validation in Kiloview P1/P2 devices allows for remote code execution10.0 Critical
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability8.5 High
- david lingren media library assistantMedia Library Assistant <= 3.17 - Reflected Cross-Site Scripting6.1 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization5.3 Medium
- apollo13themes rife extensions & templates for elementor, rife elementor extensions \& templates +1 moreRife Elementor Extensions & Templates <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Writing Effect Headline Widget6.4 Medium
- dotcamp ultimate blocks, ultimateblocks ultimate blocks – 25+ gutenberg blocks for block editor +1 moreUltimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute6.4 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary...4.4 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky...5.9 Medium
- supsystic easy google mapsEasy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe9.8 Critical
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, alienware m16 r1 firmware +386 more +388 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.1 Medium
- phillip k sitetweetSitetweet <= 0.2 - Stored XSS via CSRF8.8 High
- expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 moreQuiz And Survey Master < 9.0.2 - Contributor+ SQLi8.8 High
- rank math seo math seo, rankmath seo, unknown rank math seo +2 moreRank Math SEO < 1.0.219 - Authenticated Stored XSS5.4 Medium
- spider-themes eazydocsEazyDocs < 2.5.0 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…