CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- citrix virtual apps and desktops, windows virtual delivery agent +1 moreLocal Privilege escalation allows a low-privileged user to gain SYSTEM privileges8.5 High
- citrix netscaler agent, netscaler console, netscaler sdx +3 more +5 moreDenial of Service7.1 High
- hackmd codimdCodiMD - Missing Image Access Controls and Unauthorized Image Access5.3 Medium
- hackmd codimdCross-site Scripting in Hackmd.io Notes lead by HTML Injection8.1 High
- everest everest-coreEVerest has an integer overflow in the "v2g_incoming_v2gtp" function9.1 Critical
- glpi-project glpiGLPI allows remote code execution through the plugin loader7.2 High
- glpi-project glpiGLPI allows account takeover via SQL Injection in AJAX scripts8.1 High
- citrix netscaler console, netscaler console +1 moreSensitive information disclosure9.4 Critical
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreOpen redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites5.1 Medium
- citrix netscaler adc, netscaler gateway, netscaler adc +2 more +4 moreDenial of Service7.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Input Validation Vulnerability in PAN-OS6.1 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Improper File Signature Verification Checks6.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: File Upload Vulnerability in the Panorama Web Interface7.0 High
- palo alto networks expeditionExpedition: Missing Authentication Leads to Admin Account Takeover9.3 Critical
- glpi-project glpiGLPI allows Authenticated File Upload to Restricted Tickets4.3 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery6.9 Medium
- croogoCroogo Setting Theme unrestricted upload5.1 Medium
- membership software wishlist member xWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability7.5 High
- membership software wishlist member x, wishlist member x +1 moreWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability9.8 Critical
- automattic newspack blocks, newspack newsletters +1 moreWordPress Newspack Blocks plugin <= 3.0.8 - Sensitive Data Exposure vulnerability7.5 High
- servit affiliate-toolkitWordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- trustedlogin, trustedlogin vendor +1 moreWordPress TrustedLogin Vendor plugin < 1.1.1 - Sensitive Data Exposure vulnerability5.3 Medium
- pauple table & contact form 7 database – tablesome, tablesome +1 moreWordPress Tablesome plugin <= 1.0.33 - Sensitive Data Exposure via API vulnerability5.3 Medium
- ninja team filebird document libraryWordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability5.3 Medium
- johnson controls software house c•cure 9000, johnsoncontrols software house c-cure 9000 +1 moreJohnson Controls Software House C●CURE 9000 installer password strength7.7 High
- netgear wn604Netgear WN604 Web Interface downloadFile.php information disclosure6.9 Medium
- cloud jasperreports server, jaspersoft jasperreport servers +1 moreJasperReports Server Driver upload vulnerability8.6 High
- wukongopensource wukong nocodeWuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization5.3 Medium
- zmops argusdbmzmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization5.3 Medium
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 moreIncomplete Input Validation in GlideExpression Script9.2 Critical
- servicenow now platformIncomplete Input Validation in SecurelyAccess API6.9 Medium
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 moreJelly Template Injection Vulnerability in ServiceNow UI Macros9.3 Critical
- cisco ios xr software, ios xr +1 moreA vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local...6.7 Medium
- vercel next.jsNext.js Denial of Service (DoS) condition7.5 High
- decidimDecidim cross-site scripting (XSS) in the admin panel5.4 Medium
- decidimDecidim has cross-site scripting (XSS) in the pagination7.1 High
- ibm security qradar edrIBM Security ReaQta information disclosure5.3 Medium
- ibm security qradar edrIBM Security ReaQta information disclosure5.3 Medium
- ibm security qradar edrIBM Security ReaQta HTML injection5.4 Medium
- decidimDecidim vulnerable to data disclosure through the embed feature5.3 Medium
- checkmk1-Click compromize via CSRF8.8 High
- checkmkPrivilege escalation in Windows agent8.8 High
- phonieboxShell command injection in Phoniebox8.7 High
- phonieboxInsecure handling of GET argument in Phoniebox8.7 High
- wpmudev smartcrawl, smartcrawl seo checker, analyzer & optimizer +1 moreSmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.8 - Unauthenticated Full Path Disclosure5.3 Medium
- pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 morePepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access9.8 Critical
- pepperl+fuchs oit1500-f113-b12-cb, oit200-f113-b12-cb, oit500-f113-b12-cb +5 more +7 morePepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products7.5 High
- sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode6.4 Medium
- auth0 login by auth0Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle6.1 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morecrypto: qat - Fix ADF_DEV_RESET_SYNC memory leak5.5 Medium
- Show moreLoading…