CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- boxy studio cookedWordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt6.4 Medium
- boxy studio cookedWordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes5.4 Medium
- boxy studio cookedWordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save5.4 Medium
- boxy studio cookedWordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset4.3 Medium
- boxy studio cookedWordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs4.3 Medium
- opencartopenCart Server-Side Template Injection (SSTI) vulnerability7.2 High
- ibm clearquest, rational clearquest +1 moreIBM ClearQuest (CQ) 9.1 through 9.1.0.6 is vulnerable to stored cross-site scripting. This...6.4 Medium
- projectdiscovery nucleiUnsigned code template execution through workflows in projectdiscovery/nuclei7.4 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition information disclosure3.1 Low
- manageengine opmanager, opmanager plus, opmanager msp, opmanager enterprise editionStored XSS3.5 Low
- cisco webex teamsA vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated,...5.3 Medium
- cisco webex teamsA vulnerability in the media retrieval functionality of Cisco Webex App could allow an...6.4 Medium
- cisco telepresence video communication server (vcs) expressway, telepresence video communication server +1 moreA vulnerability in the web-based management interface of Cisco Expressway Series could allow an...4.7 Medium
- cisco asyncos, secure email +1 moreA vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway...6.5 Medium
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 moreA vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could...6.5 Medium
- cisco inode, inode manager, intelligent node manager +1 more +3 moreA vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote...7.5 High
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...4.7 Medium
- cisco asyncos, secure web appliance +1 moreA vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated...8.8 High
- cisco smart software manager on-premA vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem...10.0 Critical
- cisco secure email, secure email gateway +1 moreA vulnerability in the content scanning and message filtering features of Cisco Secure Email...9.8 Critical
edumfaPyPIBlastRADIUS also affects eduMFA5.3 Mediumsilverstripe/frameworkPackagistSilverstripe uses TinyMCE which allows svg files linked in object tags5.3 Medium- steeltoeoss discovery, kiteworks security-advisories +1 moreBasic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness5.3 Medium
- oretnom23 simple inventory management system, sourcecodester simple inventory system +1 moreSourceCodester Simple Inventory Management System Order action.php sql injection5.3 Medium
- purestorage flashbladeFlashBlade Authentication Mechanism Vulnerability9.3 Critical
- eclipse parssonEclipse Parsson stack overflow with deeply nested objects8.6 High
- apache streamparkApache StreamPark: Information leakage vulnerability5.9 Medium
- open mainframe project zowe, linuxfoundation zowe api mediation layer +1 moreImperative Local Command Injection allows Activity Masking9.0 Critical
- open mainframe project zoweZowe CLI Auto-Init Leaks Credentials Locally5.9 Medium
- syliusCustomer data leak via adjustments API endpoint in Sylius5.3 Medium
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability9.6 Critical
- silverstripe framework, silverstripe-framework +1 moreCross-site Scripting vulnerability with encoded payload in silverstripe/framework5.4 Medium
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability8.3 High
- solarwinds access rights managerSolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability9.6 Critical
- silverstripe reports, silverstripe-reports +1 moreReports are still accessible even when `canView()` returns false in silverstripe/reports4.3 Medium
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability7.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability7.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability7.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability7.6 High
- matrix-org vodozemacUsage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac2.9 Low
- manageengine ddi central, zohocorp manageengine ddi central +1 moreAgent takeover8.8 High
- manageengine ddi central, zohocorp manageengine ddi central +1 moreArbitrary file writing5.5 Medium
- apache streampipesApache StreamPipes: Potential remote code execution (RCE) via file upload8.8 High
- apache streampipesApache StreamPipes: Possibility of SSRF in pipeline element installation process4.3 Medium
- Show moreLoading…