CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote...9.6 Critical
- google chromeRace in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a...7.5 High
- google chromeUse after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who...6.5 Medium
- google chromeUse after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker...8.8 High
- google chromeUse after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote...8.8 High
- github enterprise serverGitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys6.3 Medium
- github enterprise serverSecurity misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure6.9 Medium
- github enterprise serverImproper authorization allows read access to issue content in GitHub Enterprise Server5.9 Medium
- github enterprise serverImproper authorization allows persistent access in GitHub Enterprise Server6.9 Medium
- github enterprise serverCross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository6.8 Medium
- github enterprise serverDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion7.7 High
- github enterprise serverImproper Privilege Management allows for access to unauthorized repository content during migration5.8 Medium
- opentext netiq directory and resource administratorPotential information leakage resulting in unauthorized access6.3 Medium
- atlassian bamboo, bamboo data center, bamboo server +2 moreThis High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9...8.1 High
- atlassian confluence data center, confluence server +1 moreThis High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data...7.3 High
fionaPyPIFiona affected by CVE-2023-45853 related to MiniZip madler-zlib9.3 CriticalfionaPyPIFiona affected by CVE-2020-14152 related to madler-zlib8.7 High- devolutions remote desktop managerExposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote...7.4 High
- jupyter jupyterlab, extension-template +1 moreRemote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action10.0 Critical
- ruby rexml, netapp bootstrap os +1 moreDenial of service in REXML4.3 Medium
- rockwell automation 5015 - aenftxt, rockwellautomation 5015-aenftxt firmware, 5015 aenftxt +2 moreRockwell Automation Major nonrecoverable fault in 5015 – AENFTXT8.7 High
- getoutline outlineStored Cross-site Scripting (XSS) vulnerability in Outline editor7.3 High
- tenable identity exposureFormula Injection Vulnerability7.6 High
- rockwell automation factorytalk® policy manager (ftpm), factorytalk® system services (installed via ftpm), rockwellautomation factorytalk policy manager +1 more +3 moreRockwell Automation Unsecured Private Keys in FactoryTalk® System Services1.8 Low
- rockwell automation factorytalk® policy manager (ftpm), factorytalk® system services (installed via ftpm), rockwellautomation factorytalk policy manager +2 moreRockwell Automation Unsecured Private Keys in FactoryTalk® System Services6.0 Medium
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreThe vulnerability could be remotely exploited to bypass authentication.9.8 Critical
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to excessive privileges assigned to Acronis Agent. The...7.7 High
- johnson controls software house c•cure 9000 installer, johnsoncontrols software house c-cure 9000 +1 moreSoftware House C•CURE - CouchDB executable protection7.8 High
- rockwell automation pavilion8®, rockwellautomation pavilion8 +1 moreRockwell Automation Privilege Escalation Vulnerability in Pavilion8®8.7 High
- linux, linux kernel +1 moreHID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts7.1 High
- linux, linux kernel +1 moretipc: fix kernel panic when enabling bearer5.5 Medium
- linux, linux kernel +1 morevdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command8.8 High
- linux, linux kernel +1 moremISDN: Fix memory leak in dsp_pipeline_build()5.5 Medium
- linux, linux kernel +1 morevhost: fix hung thread due to erroneous iotlb entries5.5 Medium
- linux, linux kernel +1 morevdpa: fix use-after-free on vp_vdpa_remove5.5 Medium
- linux, linux kernel +1 moreethernet: Fix error handling in xemaclite_of_probe5.5 Medium
- linux, linux kernel +1 morenet: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix a race on command flush flow7.0 High
- linux, linux kernel +1 moreNFC: port100: fix use-after-free in port100_send_complete5.5 Medium
- linux, linux kernel +1 moregianfar: ethtool: Fix refcount leak in gfar_get_ts_info5.5 Medium
- linux, linux kernel +1 moresctp: fix kernel-infoleak for SCTP sockets7.1 High
- linux, linux kernel +1 morenet: arc_emac: Fix use after free in arc_mdio_probe()7.8 High
- linux, linux kernel +1 moreReinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""5.5 Medium
- linux, linux kernel +1 moredrm/vc4: hdmi: Unregister codec device on unbind3.3 Low
- linux, linux kernel +1 morestaging: gdm724x: fix use after free in gdm_lte_rx()9.8 Critical
- linux, linux kernel +1 morenet-sysfs: add check for netdevice being present to speed_show5.5 Medium
- Show moreLoading…