CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- apache streampipesApache StreamPipes: Potential creation of multiple identical accounts3.7 Low
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +43 more +45 moreFutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow a...9.8 Critical
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +43 more +45 moreFutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an...8.8 High
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +43 more +45 moreInitialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR...9.1 Critical
- fujitsu limited network edgiot gw1500 (m2m-gw for fenics), fujitsu network edgiot gw1500 firmware +1 morePath traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a...6.5 Medium
kernelTuxCare,bpftoolTuxCare,kernel-debugTuxCare +8 more +10 moreUpdate of kernelNo score- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): maven build params could trigger remote command execution4.7 Medium
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): Unchecked maven build params could trigger remote command execution4.7 Medium
- apache airflowApache Airflow: DAG Author Code Execution possibility in airflow-scheduler8.8 High
- apache airflowApache Airflow: Potential XSS Vulnerability5.4 Medium
- nodejs nodeThe Permission Model assumes that any path starting with two backslashes \ has a four-character...3.6 Low
- keydatas, zhengdon 简数采集器 +1 more简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- magazine3 schema & structured data for wp & amp, schema \& structured data for wp \& amp +1 moreSchema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute6.4 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpress, email subscribers \& newsletters +1 moreIcegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization4.3 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- reputeinfosystems bookingpress, appointment booking calendar plugin and scheduling plugin – bookingpress +1 moreBookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation8.8 High
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- reputeinfosystems bookingpress, appointment booking calendar plugin and scheduling plugin – bookingpress +1 moreBookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload8.8 High
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import4.3 Medium
- linux, linux kernel +1 morebpf: Fix too early release of tcx_entry7.8 High
- linux, linux kernel +1 morebpf: Fix overrunning reservations in ringbuf7.8 High
- code-projects simple task listitsourcecode Simple Task List signUp.php insertUserRecord sql injection6.9 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting4.8 Medium
- document management system project management system, itsourcecode document management system +1 moreitsourcecode Document Management System insert.php sql injection5.3 Medium
- red hat service interconnect 1, service interconnect 1 for rhel 9, service interconnect 1.4 for rhel 9 +1 more +3 moreSkupper: potential authentication bypass to skupper console via forged cookies5.3 Medium
- computer laboratory management system project laboratory management system, sourcecodester computer laboratory management system +1 moreSourceCodester Computer Laboratory Management System Master.php sql injection5.3 Medium
- code-projects online student management system, online student management system project student management system +1 moreSourceCodester Online Student Management System add-students.php unrestricted upload5.3 Medium
- gitlabUncontrolled Search Path Element in GitLab3.0 Low
lcmsOSS-FuzzStack-buffer-overflow in UnrollChunkyBytesNo score- apache http serverApache HTTP Server: source code disclosure with handlers configured via AddType5.3 Medium
- heartbeat, heartbeat chat +1 moreCross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute...7.1 High
- nikhil-bhalerao simple library management systemA SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management...6.3 Medium
- nepstech ntpl-xpon1gfevn firmwareNepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross...8.8 High
- roundup-tracker roundupRoundup Cross-site Scripting Vulnerability5.4 Medium
- roundup-tracker roundupRoundup Cross-site Scripting Vulnerability5.4 Medium
- roundup-tracker roundupRoundup Cross-site Scripting Vulnerability5.4 Medium
- nato nci anet nci anet, ncia advisor network +1 moreNATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request...8.1 High
- ncia advisor networkNATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the...6.5 Medium
- lizhipay acg-fakaCross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute...6.1 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager information disclosure4.0 Medium
- dbt-labs dbt-coreImplicit override for built-in materializations from installed packages in dbt-core4.2 Medium
- oracle financial services revenue management and billingVulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle...6.1 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. ...7.2 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- Show moreLoading…