CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection5.3 Medium
- pypa pypa/setuptools, python setuptools +1 moreRemote Code Execution in pypa/setuptools8.8 High
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System setgeneral.php sql injection5.3 Medium
- mini tmall project tmall demoTmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.7.3 High
- project team tmall demoTmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.5.3 Medium
- mini tmall project tmall demoAn access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.7.5 High
- mini mini-tmall, project team tmall demo +1 moreTmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component...4.9 Medium
- yuque xmind2testcaseDirectory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute...9.8 Critical
- tenda ax1806 firmwareA vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1...9.8 Critical
- tenda ax1806, ax1806 firmware +1 moreA vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1...9.8 Critical
- tenda ax1806 firmwareA vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1...9.8 Critical
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through...4.2 Medium
- mengshen m70Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay...6.8 Medium
- elinksmart smart cabinet lockeLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform...7.3 High
- supermicro x11dph-i, x11dph-t, x11dph-tq +2 moreAn SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i...7.5 High
- supermicro x11dph-i, x11dph-t, x11dph-tq +2 moreAn arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and...7.5 High
- supermicro x11dpg-hgx2 firmware, x11pdg-ot firmware, x11pdg-qt firmware +1 more +3 moreAn arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT,...7.5 High
- No product listedAn issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0...4.2 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System templateadd.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System templateedit.php sql injection5.3 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System Users.php sql injection5.3 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System Master.php sql injection5.3 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.5 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure4.1 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure4.3 Medium
- linux, linux kernel +1 moreSUNRPC: Fix UAF in svc_tcp_listen_data_ready()8.1 High
- nanjing xingyuantu technology sparkshopNanjing Xingyuantu Technology SparkShop uploadFile unrestricted upload5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System typeedit.php sql injection5.3 Medium
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- rico-macchi wp links pageWP Links Page <= 4.9.5 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update4.3 Medium
- if-so dynamic content personalization, if-so, unknown if-so dynamic content personalization +2 moreif-so < 1.8.0.4 - Admin+ Stored XSS4.8 Medium
- tips and tricks hq wp emember, unknown wp-emember +1 moreWP eMember < 10.6.7 - Reflected XSS6.8 Medium
- tipsandtricks-hq wp emember, unknown wp-emember +1 moreWP eMember < 10.6.7 - Reflected XSS via Member Edit7.1 High
- if-so dynamic content personalization, if-so, unknown if-so dynamic content personalization +2 moreif-so < 1.8.0.4 - Reflected XSS5.4 Medium
- tournamatchWordPress Plugin Tournamatch < 4.6.1 - Admin+ Stored XSS via Ladders5.4 Medium
- tournamatchWordPress Plugin Tournamatch < 4.6.1 - Subscriber+ Stored XSS5.4 Medium
- metaphorcreations dittyDitty < 3.1.43 - Author+ Stored XSS4.7 Medium
- holoborodko wp quicklatexWP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field7.1 High
- bug library library, unknown bug library +1 moreBug Library < 2.1.1 - Unauthenticated RCE9.1 Critical
- imagely nextgen gallery, unknown photo gallery, sliders, proofing and themes +1 moreNextGEN Gallery < 3.59.3 - Admin+ Stored XSS5.9 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - Profile Update via CSRF7.1 High
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, affiliatewp +2 moreWP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing4.8 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - Stored XSS via CSRF6.8 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing6.1 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - Reflected XSS via Registration Form6.1 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing6.1 Medium
- tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 moreWP Affiliate Platform < 6.5.1 - POST Reflected XSS4.7 Medium
- creativemindssolutions cm email registration blacklist and whitelist, cminds cm e-mail blacklist +1 moreCM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist8.1 High
- toolstack sullySULly < 4.3.1 - Admin+ Stored XSS7.1 High
- Show moreLoading…