CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- amttgroup hibosAMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via...5.5 Medium
- fujiankelixun command and dispatch platformFujian Kelixun <=7.6.6.4391 is vulnerable to SQL Injection in send_event.php.9.8 Critical
- ifood order managerAn issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute...7.8 High
- limesurveyLime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is...8.8 High
- silverpeasSilverpeas Core Cross-site Scripting vulnerability5.4 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- vaethinkvaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.5.4 Medium
- vaethinkvaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management...4.9 Medium
- nopcommerceNopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview...6.1 Medium
- creativeitem academy lmsCross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1...6.1 Medium
- microsoft .net, .net 6.0, .net 8.0 +7 more +9 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net framework, .net 6.0 +15 more +17 more.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability7.3 High
- itsourcecode payroll management system project in php with source code, payroll management system project management system +1 moreSQL injection vulnerability in view_payslip.php in Itsourcecode Payroll Management System Project...9.8 Critical
- angeljudesuarez billing systemSQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows...8.1 High
- emiloi online discussion forumSQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP...8.2 High
- itsourcecode learning management system, learning management system project in php +1 moreSQL injection vulnerability in processscore.php in Learning Management System Project In PHP With...9.8 Critical
- s3browser s3 browserAn issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to...5.9 Medium
- getoutline outlineAn issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via...6.1 Medium
- getoutline outlineAn issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user...8.8 High
- bookstackapp bookstackBookStack Incorrect Access Control vulnerability7.5 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.9.8 Critical
- microsoft .net, .net 6.0, .net 8.0 +5 more +7 more.NET and Visual Studio Remote Code Execution Vulnerability8.1 High
- samsung exynos 2200 firmware, exynos 2400 firmware +1 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where...6.2 Medium
- microsoft .net, .net 8.0, visual studio 2022 version 17.10 +5 more +7 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- samsung exynos modem, exynos 1080 firmware, exynos 1280 firmware +15 more +17 moreA vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with...8.1 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +14 more +16 moreA vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems...5.3 Medium
- samsung exynos modem 5300 firmwareA vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to...5.3 Medium
- samsung exynos 1380, exynos 1480, exynos 1380 firmware +1 more +3 moreA vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile...6.7 Medium
- samsung exynos 1380 firmware, exynos 1480 firmware +1 moreA vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile...6.7 Medium
- No product listedA vulnerability was discovered in Samsung Mobile Processor Exynos 850, Exynos 9610, Exynos 980,...6.0 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +2 more +4 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330...4.4 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +5 more +7 moreA vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080,...5.1 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +5 more +7 moreA vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100,...6.0 Medium
- tenda ac8 firmwareVulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being...9.8 Critical
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +21 more +23 moreUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.1 for spring boot 3.2 +17 more +19 moreUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 High
- nodejs undiciUndici vulnerable to data leak when using response.arrayBuffer()2.0 Low
- aimhubio aim, aimhubio/aim +1 moreInfinite Loop in aimhubio/aim7.5 High
- nsoftware ipworks ssh, /n software ipworks ssh sftpserver +1 more/n software IPWorks SSH insufficient file access verification2.3 Low
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 97.0 High
- progress software corporation sitefinityURL Redirection to Arbitrary Site Exists in Sitefinity5.3 Medium
- directusDirectus allows SSO User Enumeration7.5 High
- openvpn tap-windows6, openvpn-gui, gui +1 more +3 moretap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming...9.8 Critical
- directusDirectus GraphQL Field Duplication Denial of Service (DoS)6.5 Medium
- directusDirectus Incorrectly handles _in` filter6.3 Medium
- botan project botanBotan has an Authorization Error due to Name Constraint Decoding Bug5.3 Medium
- randombit botanBotan has a Denial of Service Due to Excessive Name Constraints5.3 Medium
- hcltech domino, hcl software domino server +1 moreHCL Domino is susceptible to an information disclosure vulnerability5.3 Medium
- directusDirectus has a Blind SSRF On File Import5.0 Medium
- realtek rtl819x jungle sdk, level1 wbr-6013 firmware, level one wbr6013 +3 more +5 moreA cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality...8.8 High
- Show moreLoading…