CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 moremailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown7.0 High
- linux, linux kernel +1 moreALSA: hda: cs35l56: Fix lifetime of cs_dsp instance5.5 Medium
- linux, linux kernel +1 moreipv6: sr: fix missing sk_buff release in seg6_input_core6.2 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreipv6: sr: fix memleak in seg6_hmac_init_algo5.5 Medium
- linux, linux kernel +1 morearm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY5.5 Medium
- usermin, webmin +1 moreCross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970...6.1 Medium
- webminCross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2...3.1 Low
- gentoo webminImproper handling of insufficient permissions or privileges vulnerability exists in ajaxterm...8.8 High
- webminCross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If...5.4 Medium
- ricoh 370, 370f, im 460f +17 more +19 moreOut-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a...8.2 High
- dream train internet inc. tone store appTONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel....3.7 Low
- magiclen node-stringbuilder, stringbuilder +1 morenode-stringbuilder vulnerable to Out-of-bounds Read8.2 High
- discordjs opus opus@discordjs/opus vulnerable to Denial of Service7.5 High
- tootallnate node-speakerspeaker vulnerable to Denial of Service7.5 High
- luomusha node-twainnode-twain vulnerable to Improper Check or Handling of Exceptional Conditions8.3 High
- almoghamdani audifyaudify vulnerable to Improper Validation of Array Index7.5 High
- npmjs imagesimages vulnerable to Denial of Service7.5 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation8.8 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3 Medium
- tyxla gravity forms: multiple form instances, nikunj gravity forms multiple form instances +1 moreGravity Forms: Multiple Form Instances <= 1.1.1 - Unauthenticated Full Path Disclosure5.3 Medium
- dell chengming 3977 firmware, edge gateway 3200 firmware, edge gateway 5000 firmware +4 more +6 moreDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A...5.7 Medium
- dell edge gateway 3200 firmware, edge gateway 5200 firmware, powerswitch z9664f-on bios +1 more +3 moreDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A...5.7 Medium
- dell alienware command center, alienware command center (awcc) +1 moreDell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control...6.7 Medium
- favethemes houzez crm, houzez crm +1 moreHouzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection8.8 High
- advanced file manager shortcodesAdvanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal8.8 High
- aum watcharapon featured image generatorFeatured Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload4.3 Medium
- codeastrology ultraaddons, codersaiful ultraaddons for elementor +1 moreUltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripti…6.4 Medium
- advanced file manager shortcodes, advancedfilemanager file manager advanced shortcode +1 moreAdvanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- node.js, nodejs node +1 moreA vulnerability has been identified in Node.js, affecting users of the experimental permission...2.9 Low
- samsung galaxy smarttag2Exposure of Sensitive Information to an Unauthorized Actor in Samsung Galaxy SmartTag2 prior to 0...7.0 High
- stitionai devika, stitionai/devika +1 moreLocal File Inclusion in stitionai/devika7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreType Confusion in Async Generators in Javascript Engine7.5 High
- tenda ax1806 firmwareA vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function...6.5 Medium
- tenda ax12, ax12 firmware +1 moreTenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the...6.8 Medium
- idccmsidccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'6.1 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.3 Medium
- b1ackc4t 14finger14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the...9.1 Critical
- renesas smartbond da14695An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The...9.8 Critical
- renesas smartbond da14695An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The...6.8 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Text Services Framework Elevation of Privilege Vulnerability8.8 High
- ping identity pingfederatePingFederate REST API Data Store Injection3.5 Low
- ping identity pingfederatePingFederate Runtime Node Path Traversal5.3 Medium
- ping identity pingfederatePingFederate OIDC Policy Management Editor Cross-Site Scripting1.8 Low
- ibm websphere application serverIBM WebSphere Application Server code execution7.2 High
- Show moreLoading…