CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- egroupwareEGroupware mishandles an ORDER BY clause9.8 Critical
- mudler localai, mudler/localai +1 moreSSRF and Partial LFI in /models/apply Endpoint in mudler/localai5.8 Medium
- codeastrology ultraaddons, saiful islam ultraaddons elementor lite +1 moreWordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- axelerant testimonials widgetWordPress Testimonials Widget plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- livemesh elementor addons, addons for elementor +1 moreWordPress Elementor Addons by Livemesh plugin <= 8.4.0 - Local File Inclusion vulnerability6.5 Medium
- biplob018 image hover effects - caption hover with carousel, oxilab image hover effects for elementor with lightbox and flipbox +1 moreWordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdevart gallery, responsive image gallery, gallery album +1 moreWordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability5.4 Medium
- staxwp elementor addons, widgets and enhancements – stax, stax +1 moreWordPress Elementor Addons, Widgets and Enhancements – Stax plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- delower wp to doWordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
wasmtime-jit-debugcrates.iowasmtime_jit_debug Dumps Undefined Memory by `JitDumpFile`5.5 Medium- kodezen limited academy lmsWordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability3.5 Low
- rico-macchi wp scraperWordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- theme-ruby foxizWordPress Foxiz Theme theme <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- linux, linux kernel +1 moredrm/drm_file: Fix pid refcounting race7.8 High
- mudler localai, mudler/localai +1 moreCSRF Vulnerability in mudler/LocalAI4.3 Medium
- mediawikiAn issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS...4.8 Medium
- mediawikiAn issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via...4.8 Medium
- mediawikiAn issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special...4.3 Medium
- mediawikiAn issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via...4.8 Medium
- mediawikiAn issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can...6.5 Medium
- mediawiki, mediawiki metrolook skin +1 moreAn issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS...4.8 Medium
- mediawikiAn issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via...4.8 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can...4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose...7.5 High
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special...4.3 Medium
- No product listedThe OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores...2.3 Low
google.golang.org/grpcGoPrivate tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-goNo score- vanna-ai vanna, vanna-ai/vanna +1 moreLocal File Read (LFI) by Prompt Injection via Postgres SQL in vanna-ai/vanna7.5 High
- evmosEvmos vulnerable to exploit of smart contract account and vesting8.8 High
- matrix-org matrix-appservice-ircMalicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to4.3 Medium
- certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 moreCertifi removes GLOBALTRUST root certificate7.5 High
- pi-holePi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)8.6 High
- @fedify fedifyFedify vulnerable to allowing access to internal network resources7.2 High
- traefikTraefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes7.5 High
- joinmastodon mastodonMastodon has improper authorship check on audience extension for existing posts8.2 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: virtio-net: queue index out-of-bounds access in software rss6.8 Medium
- apache cloudstackApache CloudStack: Unauthenticated cluster service port leads to remote execution9.8 Critical
- apache cloudstackApache CloudStack: Integration API service uses dynamic port when disabled9.8 Critical
- codeigniter, codeigniter ecommerce-codeigniter-bootstrap +1 moreCodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting5.3 Medium
- hcl software nomad server on dominoA denial of service vulnerability affects HCL Nomad server on Domino5.3 Medium
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 decodmail.php deserialization5.1 Medium
- gongfuxiang shopxoShopXO Uploader.php server-side request forgery5.3 Medium
intel-microcodeTuxCareUpdate of alt-phpNo score- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreunauthorized file access9.4 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreremote code execution9.4 Critical
- zkteco biotimeZKTeco BioTime system-group-add cross site scripting5.3 Medium
- linux, linux kernel +1 moremedia: v4l: async: Properly re-initialise notifier entry in unregister5.5 Medium
- linux, linux kernel +1 moremmc: davinci: Don't strip remove function when driver is builtin5.5 Medium
- linux, linux kernel +1 moreKVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morebcache: fix variable length array abuse in btree_iter7.8 High
- Show moreLoading…