CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service7.1 High
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak8.7 High
- juniper junos os evolvedJunos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak7.1 High
- juniper junos os evolvedJunos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation7.0 High
- juniper junos, junos os +1 moreJunos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash7.1 High
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash6.0 Medium
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes7.1 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network6.9 Medium
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak6.0 Medium
- juniper junos os evolvedJunos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes7.1 High
- juniper junos, junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used6.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user6.3 Medium
- juniper junos os evolvedJunos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols8.7 High
- juniper junos, junos os +1 moreJunos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash8.7 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash6.0 Medium
- juniper junos os evolvedJunos OS Evolved: CLI parameter processing issue allows privilege escalation8.5 High
- juniper junos os evolvedJunos OS Evolved: CLI parameter processing issue allows privilege escalation8.5 High
- witmy my-springsecurity-pluswitmy my-springsecurity-plus build sql injection5.3 Medium
- juniper junos os evolvedJunos OS Evolved: CLI parameter processing issue allows privilege escalation8.5 High
- juniper junos os evolvedJunos OS Evolved: CLI parameter processing issue allows privilege escalation8.5 High
- juniper junos os evolvedJunos OS Evolved: CLI parameter processing issue allows privilege escalation8.5 High
- juniper junos os evolvedJunos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario7.1 High
- cog-creators red-discordbot, cogboard red discord bot +1 moreRed-DiscordBot vulnerable to Incorrect Authorization in commands API5.3 Medium
- vnotex vnoteCode Execution Vulnerability via Local File Path Traversal in Vnote8.8 High
- johnson controls tyco illustra flex4 dualsensor cameras, tyco illustra flex4 fixed & ptz cameras, tyco illustra pro4 fixed cameras +8 more +10 moreTYCO Illustra Pro Gen 4 - JQuery version7.0 High
- witmy my-springsecurity-plus, my springsecurity plus +1 morewitmy my-springsecurity-plus role sql injection5.3 Medium
- oisf suricataSuricata http/range: NULL-ptr deref when http.memcap is reached7.5 High
- oisf suricataSuricata http2: oom from duplicate headers7.5 High
- isc storkIncorrect TLS certificate validation can lead to escalated privileges8.9 High
- oisf suricataSuricata modbus: txs without responses are never freed7.5 High
- oisf suricataSuricata defrag: IP ID reuse can lead to policy bypass5.3 Medium
- torchbox wagtailWagtail regular expression denial-of-service via search query parsing6.5 Medium
- surrealdb, surrealdb surrealdb-core +1 moreSurrealDB before 1.5.4 Authentication Bypass via Database Switch5.3 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreStored XSS in gaizhenbiao/chuanhuchatgpt7.4 High
- schneider electric wiser home controller whc-5918a, schneider-electric whc-5918a firmware +1 moreCWE-200: Information Exposure vulnerability exists that could cause disclosure of credentials...9.8 Critical
- schneider electric modicon controllers m241 / m251, modicon controllers m258 / lmc058, modicon controllers m262 +5 more +7 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.4 Medium
- schneider electric foxrtu stationCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.3 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service,...7.8 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of...7.1 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or...7.1 High
- nuvoton npcm705r firmware, npcm710r firmware, npcm730r firmware +3 more +5 moreNuvoton - CWE-305: Authentication Bypass by Primary Weakness6.7 Medium
- gitlabImproper Access Control in GitLab2.7 Low
- gitlabImproper Access Control in GitLab4.9 Medium
- gitlabImproper Access Control in GitLab3.8 Low
- gitlabImproper Access Control in GitLab9.6 Critical
- Show moreLoading…