CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows iSCSI Service Denial of Service Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Cryptographic Services Security Feature Bypass Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows NTLM Spoofing Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability7.3 High
- redhat 389 directory server, directory server, red hat directory server 11 +7 more +9 more389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request6.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20240701] - Core - XSS in accessible media selection field6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20240702] - Core - Self-XSS in fancyselect list field layout5.4 Medium
- joomla joomla\!, joomla! project cms +1 more[20240704] - Core - XSS in Wrapper extensions6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20240705] - Core - XSS in com_fields default field value6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20240703] - Core - XSS in StringHelper::truncate method6.1 Medium
- ping identity pingone mfa integration kit for pingfederate, pingone mfa intergration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypass8.7 High
- pingidentity pingone mfa integration kit, ping identity pingone mfa integration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypass7.7 High
- fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3...7.2 High
- fortinet fortiextender, fortiextender firmware +1 moreAn improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 -...8.1 High
- fortinet fortiportalAn authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and...3.9 Low
- fortinet fortiadcAn improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7...4.8 Medium
- fortinet fortiaiopsMultiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0...7.7 High
- fortinet fortios, fortiproxy +1 moreAn incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy...3.1 Low
- fortinet fortiaiopsAn improper neutralization of formula elements in a CSV File vulnerability [CWE-1236] in...5.1 Medium
- fortinet fortiaiopsMultiple Exposure of sensitive information to an unauthorized actor vulnerabilities [CWE-200] in...8.3 High
- fortinet fortiaiopsMultiple cross-site request forgery (CSRF) vulnerabilities [CWE-352] in FortiAIOps version 2.0.0...7.2 High
- fortinet fortiadcAn improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7...4.7 Medium
- fortinet fortiwebAn improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0...4.4 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 128 and Thunderbird 1288.8 High
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack frames4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack frames5.5 Medium
- mozilla firefox, thunderbird +1 moreCSP violation leakage when using devtools5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect handling of SameSite cookies9.8 Critical
- mozilla firefox, thunderbird +1 moreForm validation popups could block exiting full-screen mode4.3 Medium
- mozilla firefox, thunderbird +1 moreMemory corruption in NSS8.8 High
- mozilla firefox, thunderbird +1 moreCursor could be moved out of the viewport using pointerlock.4.3 Medium
- mozilla firefox, thunderbird +1 moreLeaving pointerlock by pressing the escape key could be prevented8.8 High
- mozilla firefox, thunderbird +1 moreOut-of-bounds read in clipboard component8.2 High
- mozilla firefoxFirefox Android missed activation delay to prevent tapjacking8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.137.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in thread creation7.4 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in NSS9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreRace condition in permission assignment4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in WebGL API6.3 Medium
- airbytehq airbyte, airbyte airbytehq +1 moreRemote Code Execution (RCE) via Server Side Template Injection (SSTI) in Airbyte8.6 High
kernel-obs-buildSUSE,kernel-azureSUSE,kernel-defaultSUSE +10 more +12 moreSecurity update for the Linux KernelNo score- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- djangoproject djangoDjango Path Traversal vulnerability4.3 Medium
- djangoproject djangoDjango vulnerable to user enumeration attack5.3 Medium
- djangoproject djangoDjango vulnerable to Denial of Service7.5 High
- knime business hubDenial-of-service on KNIME Business Hub when certain jobs are executed7.1 High
- Show moreLoading…