CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- zoom, zoom communications, inc apps for windows, zoom rooms +3 more +5 moreZoom Apps for Windows - Improper Input Validation7.1 High
- spomky-labs webauthn framwork, web-auth webauthn-framework +1 moreEnumeration of valid usernames in web-auth/webauthn-lib5.3 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Insecure Direct Object Reference vulnerability5.1 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager User Enumeration vulnerability5.3 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerability8.6 High
- broadcom symantec privileged access managementSymantec Privileged Access Manager Reflected Cross Site Scripting vulnerability6.8 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerability9.4 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager SQL Injection vulnerability8.4 High
- broadcom symantec privileged access managementSymantec Privileged Access Manager Privilege Escalation vulnerability5.1 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Authentication Bypass vulnerability5.3 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerability9.4 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerability9.4 Critical
- baramundi management agentLocal privilege escalation vulnerability in baramundi Management Agent via MSI Installer7.8 High
- easyspiderNaiboWang EasySpider HTTP GET Request server.js path traversal5.3 Medium
- abb mint workbench i, mint workbench +1 moreMint Workbench I Unquoted Service Path Enumeration6.2 Medium
- code-projects simple ticket bookingcode-projects Simple Ticket Booking Login adminauthenticate.php sql injection6.9 Medium
- mcafee,llc secure web gatewayAn information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior...4.3 Medium
- linux, linux kernel +1 moretcp: avoid too many retransmit packets7.5 High
- mattermost, mattermost mobile +1 moreSpoofed push notifications from malicious server4.2 Medium
- mattermost, mattermost mobile +1 moreLaTeX post content manipulation via renderer state leak across contexts2.6 Low
- openfind mail2000, mail2000 v7.0, mail2000 v8.0 +2 moreOpenfind Mail2000 - HttpOnly flag bypass5.8 Medium
- openfind mail2000, mail2000 v7.0, mail2000 v8.0 +2 moreOpenfind Mail2000 - Stored XSS6.1 Medium
- apache linkis, apache software foundation linkis datasource +1 moreApache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability8.8 High
- apache linkis, apache software foundation linkis datasource +1 moreApache Linkis DataSource: DataSource Remote code execution vulnerability8.8 High
- apache linkis, apache software foundation linkis datasource +1 moreApache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading6.5 Medium
- otrsAgents are able to lock the ticket without the "Owner" permission5.2 Medium
- otrsInformation exlosure in external interface5.7 Medium
- cellopoint secure email gatewayThe SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input,...9.8 Critical
- aguardnet space management system, space management system project management system +1 moreAguardNet Space Management System - SQL injection9.8 Critical
- unknown wps hide loginWPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure6.1 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 moreWP eStore < 8.5.5 - Reflected XSS in Category Editing6.1 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products, wp easycart shopping cart and ecommerce store +2 moreWP eStore < 8.5.5 - Coupon Deletion via CSRF8.8 High
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products, wp easycart shopping cart and ecommerce store +2 moreWP eStore < 8.5.5 - Reflected XSS in Customer Editing6.1 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 moreWP eStore < 8.5.5 - Reflected XSS in Discount Editing6.1 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 moreWP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI']6.1 Medium
- brian batt - elearningfreak.com insert or embed articulate content into wordpress, elearningfreak insert or embed articulate content +1 moreInsert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload8.8 High
- aguardnet space management system, space management system project management system +1 moreAguardNet Space Management System - Reflected Cross-Site Scripting5.4 Medium
- langchain langchain-experimental, experimental +1 morelangchain-experimental vulnerable to Arbitrary Code Execution8.5 High
- openfind mailaudit, mailgates +1 moreOpenfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag5.3 Medium
- wisdomgarden tronclass, tronclass ilearn +1 moreWisdomGarden Tronclass - Broken Access Control5.3 Medium
- 2100 technology electronic official document management system, electronic official document management system project official document management system +1 more2100 TECHNOLOGY Electronic Official Document Management System - Broken Access Control8.8 High
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure4.3 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator directory traversal4.3 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure4.3 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator cross-site scripting5.4 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.9 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator cross-site scripting6.4 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator HTTP HOST header injection6.5 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.4 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator server-side request forgery5.4 Medium
- Show moreLoading…