CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- blubrry powerpress podcasting plugin by blubrryPowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter6.4 Medium
- adamsolymosi contentlockContentLock <= 1.0.3 - Groups/Emails Deletion via CSRF8.8 High
- adam solymosi contentlockContentLock <= 1.0.3 - Email Adding via CSRF8.8 High
- adam solymosi contentlockContentLock <= 1.0.3 - Settings Update via CSRF8.8 High
- quantumcloud simple video directorySimple Video Directory < 1.4.4 - Contributor+ Stored XSS5.4 Medium
- data443 inline related postsInline Related Posts < 3.7.0 - Reflected XSS6.1 Medium
- unknown wp secure maintenanceWP Secure Maintenance < 1.7 - Admin+ Stored XSS4.8 Medium
- bestwebsoft quotes and tips, unknown quotes and tips by bestwebsoft +1 moreQuotes and Tips < 1.45 - Admin+ Arbitrary File Upload4.8 Medium
- swiftideas swift framework, unknown socialdriver-framework, swift ideas socialdriver framework +2 moreSwift Framework < 2024.04.30 - Admin+ Stored XSS via Settings4.8 Medium
- bob watu quizWatu Quiz < 3.4.1.2 - Author+ Stored XSS5.4 Medium
- bmwebproperties social media widgetSocial Media Widget < 4.0.9 - Admin+ Stored XSS4.8 Medium
- nodejs nodeA vulnerability has been identified in Node.js, affecting users of the experimental permission...3.3 Low
- timersys wp popups – wordpress popup builder, wp popups +1 moreWP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure5.3 Medium
- citrix uberagentPrivilege escalation in uberAgent7.3 High
- bastho event postEvent post <= 5.9.10 - Cross-Site Request Forgery4.3 Medium
gpacOSS-FuzzHeap-buffer-overflow in gf_hevc_parse_nalu_bsNo score- aimhubio aim, aimhubio/aim +1 moreArbitrary File Overwrite and Data Exfiltration in aimhubio/aim9.8 Critical
- publiccmsPublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability...8.8 High
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS...8.8 High
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of...8.8 High
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS...8.8 High
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0...8.8 High
- publiccmsPublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement...6.5 Medium
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0...8.8 High
- publiccmsAn arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS...8.8 High
- publiccmsPublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the...8.8 High
- publiccmsPublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the...8.8 High
- codermy my-springsecurity-plusmy-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability...9.8 Critical
- codermy my-springsecurity-plusmy-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability...9.8 Critical
- codermy my-springsecurity-plusmy-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability...9.8 Critical
- codermy my-springsecurity-plusmy-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability...9.8 Critical
- seacmsThere is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by...8.8 High
- seacmsSeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is due to the fact that...8.8 High
- seacmsSeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by...8.8 High
- seacmsSeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_smtp...8.8 High
- seacmsSeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by...8.8 High
- nikhil-bhalerao poultry farm management system, poultry farm management system project farm management system +1 moreSourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code...9.8 Critical
- securepoint unified threat managementSecurepoint UTM before 12.6.5 mishandles OTP codes.8.8 High
- stonefly storage concentratorStoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by...6.5 Medium
- stonefly scvmStoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to...8.8 High
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +2 more +4 moreobs-service-download_url is vulnerable to argument injection5.1 Medium
- sirv image optimizer, resizer and cdn – sirv, sirv +1 moreImage Optimizer, Resizer and CDN – Sirv <= 7.2.7 - Authenticated(Subscriber+) Missing Authorization to Plugin Settings Update5.4 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior7.5 High
MimeKitNuGetMimekit has vulnerable dependency that can lead to denial of service8.7 Highapache2Ubuntuapache2 regressionNo score- bootstrap, bootstrap-sass +1 moreXSS in Bootstrap button component6.4 Medium
- juniper junos os evolvedJunos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).6.9 Medium
- witmy my-springsecurity-pluswitmy my-springsecurity-plus dept sql injection5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash8.7 High
- juniper junos, junos os +1 moreJunos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop8.7 High
- Show moreLoading…