CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- yugabyte yugabytedb, yugabytedb anywhere +1 moreInsecure Account Profile Management6.1 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreDB User Password Leak in Application Log5.4 Medium
- wyze cam v4 firmware, cam v4 pro +1 moreA command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222,...6.8 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions5.4 Medium
- zowe cli, open mainframe project zowe cli - imperative +1 moreZowe CLI --show-inputs-only displays securely stored properties5.9 Medium
- apache cloudstackApache CloudStack: SAML Signature Exclusion8.1 High
- jkev record management system, record management system project management system +1 moreSourceCodester Record Management System sort.php cross site scripting5.3 Medium
- code-projects record management systemSourceCodester Record Management System add_leave_non_user.php sql injection5.3 Medium
- jkev record management system, record management system project management system +1 moreSourceCodester Record Management System view_info_user.php sql injection5.3 Medium
- apache cxfApache CXF: Unrestricted memory consumption in CXF HTTP clients7.5 High
- apache cxfApache CXF Denial of Service vulnerability in JOSE7.5 High
- apache cxfApache CXF: SSRF vulnerability via WADL stylesheet parameter9.1 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If...5.4 Medium
- jkev record management system, record management system project management system +1 moreSourceCodester Record Management System sort2_user.php sql injection5.3 Medium
- jkev record management systemSourceCodester Record Management System sort1_user.php sql injection5.3 Medium
- assimp, open asset import library asset import library +1 moreHeap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local...7.8 High
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreFV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter8.8 High
- yithemes yith essential kit for woocommerce #1, yith essential kit for woocommerce +1 moreYITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation4.3 Medium
- jkev record management system, record management system project management system +1 moreSourceCodester Record Management System sort_user.php sql injection5.3 Medium
- jkev record management systemSourceCodester Record Management System entry.php sql injection5.3 Medium
- jkev record management systemSourceCodester Record Management System edit_emp.php sql injection5.3 Medium
- payplus payment gateway, unknown payplus payment gateway +1 morePayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi9.8 Critical
- bug library library, unknown bug library +1 moreBug Library < 2.1.2 - Admin+ Stored XSS5.9 Medium
- artplacer widget, unknown artplacer widget +1 moreArtPlacer Widget < 2.21.2 - Stored XSS via CSRF7.5 High
- artplacer widget, unknown artplacer widget +1 moreArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion6.5 Medium
- jkev record management system, record management system project management system +1 moreSourceCodester Record Management System view_info.php sql injection5.3 Medium
- gotenbergCVE-2024-21527 in github.com/gotenberg/gotenberg8.8 High
github.com/gitpod-io/gitpodGo,github.com/gitpod-io/gitpod/components/server/goGo,github.com/gitpod-io/gitpod/components/ws-proxyGo +1 more +3 moregithub.com/gitpod-io/gitpod vulnerable to Cookie Tossing4.1 Medium- jkev record management systemSourceCodester Record Management System index.php sql injection6.9 Medium
- hcl software nomad server on dominoHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability3.7 Low
- denkgroot spinaSpina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via...9.6 Critical
- denkgroot spinaCross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote...8.8 High
- talelin lin-cms-java-coreInsecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to...7.5 High
- talelin lin-cms-spring-bootInsecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote...7.5 High
- ruoyiCross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to...6.1 Medium
- processwireProcessWire Cross Site Request Forgery vulnerability4.2 Medium
- tenda ax1806 firmwareA stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via...7.5 High
- linksys wrt54g, wrt54g firmware +1 moreLinksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function.8.8 High
- automadAutomad arbitrary file upload vulnerability8.8 High
- tenda ax12 firmware, ax9 firmware +1 moreAX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6...8.0 High
- dlink dir-823x firmware, dir 823x ax3000 dual band gigabit wirless router +1 moreD-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a...9.8 Critical
- janeczku calibre-webCalibre-Web Cross Site Scripting (XSS)5.4 Medium
- weimengcms wmcmsAn issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a...7.5 High
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.1 Medium
- netty netty-incubator-codec-ohttpAbsent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp8.1 High
- pytorch serve, torchserve +1 moreTorchServe gRPC Port Exposure8.2 High
- pytorch serve, torchserve +1 moreTorchServe bypass allowed_urls configuration9.8 Critical
- codexpert duplica – duplicate posts, pages, custom posts or usersDuplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation4.3 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function5.3 Medium
- bishopfox sliverBishopFox Sliver Authenticated Remote Code Execution7.2 High
- Show moreLoading…