CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
opentelemetry_apicrates.io`opentelemetry_api` has been merged into the `opentelemetry` crateNo score- mesbookUncontrolled Resource Consumption vulnerability in MESbook7.5 High
- mesbookInformation exposure vulnerability vulnerability in MESbook8.1 High
- playsmsplaySMS Template injection5.1 Medium
- mattermostLimited DoS due to permitting creating users with user-defined IDs5.3 Medium
- mattermostRemoteClusterFrame payloads are audit logged in full2.7 Low
- mattermostCreating posts with user-defined IDs permitted in CreatePost API3.1 Low
- mattermostTiming attack during remote cluster token comparison when shared channels are enabled8.1 High
- mattermostChannel IDs of archived/restored channels leaked via webhook events3.1 Low
- mattermostLack of permission check when updating the profile picture of a remote user (shared channels enabled)2.7 Low
- smub wp lightbox 2WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
podofoSUSESecurity update for podofoNo score- cloud foundry haproxy-boshreleaseSecurity check loophole in HAProxy release (in combination with routing release) in Cloud Foundry...9.1 Critical
- 2code wpqa builderWPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF8.8 High
- 2code wpqa builderWPQA < 6.1.1 - Contributor+ Stored XSS5.4 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF4.3 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS5.4 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.1 - Multiple CSRF on the Group Section4.3 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR6.5 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.1 - Arbitrary Group Joining via CSRF4.3 Medium
- aliakro snippet shortcodesSnippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery4.3 Medium
- samsung open source walrusImproper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly...6.7 Medium
- ietf tcpThe TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers...4.3 Medium
- zncIn ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.9.8 Critical
- fikeulous simpcmsA cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary...5.4 Medium
- ginuerzh gostMissing key verification in gost9.8 Critical
- bas-ip aa-07bd, aa-07bdi, av-01bd +26 more +28 moreBAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR...6.5 Medium
- avalara for salesforce cpqThe Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key....7.5 High
- micro star international co msi centerInsecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0...6.8 Medium
- artifex ghostscript, afpl ghostscript +1 moreArtifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal...7.5 High
- artifex ghostscriptArtifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf)...8.8 High
- artifex ghostscriptArtifex Ghostscript before 10.0.3.0 has a heap-based pointer disclosure (observable in a...3.3 Low
- artifex ghostscriptArtifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the...5.4 Medium
- artifex ghostscriptArtifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter()...8.8 High
- 7-zipThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read...8.2 High
- 7-zip 7zipThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer...8.4 High
- myscada mypromySCADA myPRO Use of Hard-coded Password9.3 Critical
- angeljudesuarez farm management system, farm management system project management system +1 moreitsourcecode Farm Management System sql injection5.3 Medium
- nationalsecurityagency skills-serviceSkillTree CSRF Vulnerability allows an attacker to modify the Video and Captions of a Skill4.4 Medium
- aimeos ai-controller-frontend, frontend controller +1 moreaimeos/ai-controller-frontend doesn't reset payment status in basket5.3 Medium
- aimeos ai-admin-jsonadm, aimeos project ai-controller-frontend +1 moreaimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records5.5 Medium
- go standard library net/http, net\/http +1 moreDenial of service due to improper 100-continue handling in net/http7.5 High
- aimeos ai-admin-graphqlaimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services3.8 Low
- pomeriumPomerium exposed OAuth2 access and ID tokens in user info endpoint response5.7 Medium
- linlinjava litemalllinlinjava litemall AdminGoodscontroller.java sql injection5.3 Medium
- ethyca fidesInclusion of Untrusted polyfill.io Code Vulnerability in fides.js0.0 None
- go toolchain cmd/go, gotoolchain cmd\/go +1 moreOutput of "go env" does not sanitize values in cmd/go9.8 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/acme/autocert +1 moreLimited directory traversal vulnerability on Windows in golang.org/x/crypto7.5 High
- Show moreLoading…