CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 moremedia: mc: Fix graph walk in media_pipeline_start7.8 High
- linux, linux kernel +1 morekdb: Fix buffer overflow during tab-complete8.4 High
- linux, linux kernel +1 moredrm/i915/hwmon: Get rid of devm7.8 High
- linux, linux kernel +1 morecrypto: starfive - Do not free stack buffer7.8 High
- linux, linux kernel +1 moremm/hugetlb: do not call vma_add_reservation upon ENOMEM7.8 High
- linux, linux kernel +1 moremd/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING5.5 Medium
- linux, linux kernel +1 morefbdev: savage: Handle err return when savagefb_check_var failed5.5 Medium
- linux, linux kernel +1 moremm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL5.5 Medium
- linux, linux kernel +1 moreASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension5.5 Medium
- linux, linux kernel +1 morexfs: fix log recovery buffer allocation for the legacy h_size fixup7.3 High
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c6.5 Medium
- uclouvain openjpeg, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: denail of service via crafted image file5.5 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: malicious files can cause the program to enter a large loop4.3 Medium
- best house rental management system house rental management system, mayurik best house rental management system +1 moreBest House Rental Management System v1.0 was discovered to contain an arbitrary file read...7.5 High
- ispmanagerAn information disclosure vulnerability in ISPmanager v6.98.0 allows attackers to access...7.5 High
- maipu mypower vc8100MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via...5.4 Medium
- yzmcmsA cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows...6.1 Medium
- b3log vditorvditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.5.9 Medium
- seacmsAn issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code...9.8 Critical
- seacmsSeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the...7.5 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...5.4 Medium
- b1ackc4t 14fingerInsecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to...8.8 High
- b1ackc4t 14finger14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the...9.1 Critical
- b1ackc4t 14fingerInsecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access...7.5 High
- drupal wiki, kontextwork drupal wiki +1 moredrupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of...6.1 Medium
- opcfoundation ua-.netstandardOPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability7.5 High
- personal-management-system personal management systemVolmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via...9.8 Critical
- personal-management-system personal management systemVolmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via...5.4 Medium
- eskooly, eskooly web product +1 moreCross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0...6.5 Medium
- eskooly web productCross Site Scripting vulnerability in Eskooly Web Product v.3.0 and before allows a remote...5.4 Medium
- eskooly, eskooly web product +1 moreAn issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...8.2 High
- eskooly, eskooly web product +1 moreAn issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...8.8 High
- eskoolyAn issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...9.8 Critical
- eskooly, eskooly free online school management software +1 moreAn issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...8.8 High
- eskooly, eskooly free online school management software +1 moreAn issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...9.8 Critical
- eskooly web productSQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute...9.8 Critical
- goanother another redis desktop managergoanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via...9.6 Critical
- lukasbach yanaLukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.9.6 Critical
- ruoyiy_project RuoYi Content-Type isJsonRequest cross site scripting5.3 Medium
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wofficeio wofficeWordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- automattic newspack adsWordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- automattic newspack campaigns, newspack popups +1 moreWordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vmware cloud directorVMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor...6.4 Medium
- mrw, mrw plugin +1 moreInformation exposure vulnerability in the MRW plug-in8.2 High
- deeplakeDeep Lake Kaggle command injection8.1 High
- Show moreLoading…