CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- sap transportation management, sap se transportation management (collaboration portal), sap saptmui +2 more[CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal)5.0 Medium
- sap gui for windows[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows5.0 Medium
- sap business workflow, sap se business workflow (webflow services), sap basis +1 more +3 more[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)5.0 Medium
- sap se s/4hana finance (advanced payment management), sap s4core +1 more[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)5.4 Medium
- sap business warehouse, sap se business warehouse - business planning and simulation, sap business warehouse virtual comp +2 more[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation5.4 Medium
- sap business warehouse, sap se business warehouse - business planning and simulation, sap business warehouse virtual comp +2 more[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation6.1 Medium
- sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)4.3 Medium
- sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)5.0 Medium
- sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)6.1 Medium
- sap se crm webclient ui, sap customer relationship management s4fnd, customer relationship management webclient ui +2 more[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)6.1 Medium
- sap se netweaver knowledge management xmleditor, sap netweaver knowledge management and collaboration \(kmc-cm\) +1 more[CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor6.1 Medium
- sap landscape management[CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management6.9 Medium
- sap se commerce, sap commerce cloud, commerce hycom +2 more[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce7.2 High
- sap se pdce, sap s4core, s4coreop +2 more[CVE-2024-39592] Missing Authorization check in SAP PDCE7.7 High
- woobewoo product table by wbw, product table for woocommerce by wbw +1 moreProduct Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution9.8 Critical
- watchguard fireware, fireware os +1 moreFirebox Authenticated Buffer Overflow Vulnerability8.6 High
- watchguard mobile vpn with ssl client, mobile vpn with ssl +1 moreMobile VPN with SSL Local Privilege Escalation Vulnerability8.6 High
- favethemes houzez, houzez theme - functionality +1 moreHouzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection8.8 High
- media hygiene hygiene, slui media hygiene: remove or delete unused images and more! +1 moreMedia Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion4.3 Medium
- ubiquiti unifi ios appUniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points...4.8 Medium
- node.js, nodejs node, nodejs +2 moreA security flaw in Node.js allows a bypass of network import restrictions. By embedding non...6.5 Medium
- jaraco jaraco/zippDenial of Service via crafted zip file in jaraco/zipp6.2 Medium
- stitionai devika, stitionai/devika +1 moreData leak through CORS misconfiguration in stitionai/devika8.1 High
- linksys mbe7000 firmware, mx6200 firmware +1 moreLinksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi...5.3 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netbox, minhquan202 vuln-netbox +1 moreA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- netboxA cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary...6.1 Medium
- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...5.3 Medium
- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...5.9 Medium
- idccms project idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- szlbt lbt-t300-t400 firmwareShenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a buffer...6.5 Medium
- phpvibeDirectory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks,...9.8 Critical
- mommyheather advanced backupsMommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via...5.5 Medium
- Show moreLoading…