CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- itsourcecode tailoring management system, tailoring management system project management system +1 moreitsourcecode Tailoring Management System staffcatadd.php sql injection5.3 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System get_patient_history.php sql injection5.3 Medium
- clinic\'s patient management system project patient management system, sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +2 moreSourceCodester Clinics Patient Management System print_patients_visits.php sql injection5.3 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System sql injection5.3 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System Login login.php sql injection6.9 Medium
- tenda o3, o3 firmware1.0.0.10\(2478\), o3v2 +1 more +3 moreTenda O3 fromVirtualSet stack-based overflow8.7 High
- tenda o3, 03v2.0 firmware, o3 firmware1.0.0.10\(2478\) +2 moreTenda O3 fromDhcpSetSer stack-based overflow8.7 High
- tenda o3, o3 firmware1.0.0.10\(2478\), o3v2 firmware +2 moreTenda O3 formexeCommand stack-based overflow8.7 High
- canonical ubuntu desktop provisionAn issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local...8.8 High
- veilidIn veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that...5.3 Medium
- backdropcms backdropBackdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places4.8 Medium
- librechat, danny-avila libre chat +1 moreLibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images. (Work on a...9.8 Critical
- librechatLibreChat through 0.7.4-rc1 has incorrect access control for message updates. (Work on a fixed...9.8 Critical
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...8.8 High
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...8.0 High
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...6.8 Medium
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...6.8 Medium
- angeljudesuarez hospital management system, hospital management system project management system +1 moreSQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote...9.8 Critical
- No product listedLaravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability.4.3 Medium
- ip-guardIP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file...7.5 High
- efrotech timetraxEfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability...9.8 Critical
- intelight x 1l traffic controller maxtimeAn issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute...9.8 Critical
- proton protonvpnProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"...7.8 High
- entrust datacard xps card printer driverInsecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows...8.4 High
- marimer csla.netCLSA Directory Traversal vulnerability9.8 Critical
- act-onCross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary...6.1 Medium
- evenbalance punkbusterDirectory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to...7.6 High
- tenda o3, o3 firmware1.0.0.10\(2478\), o3v2 +2 moreTenda O3 formQosSet stack-based overflow8.7 High
- kiboko labs chained quizWordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pixelyoursite, pixelyoursite – your smart pixel (tag) manager +1 moreWordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- revolution slider slider revolutionWordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- dotcamp ultimate blocks, ultimate blocks – gutenberg blocks plugin +1 moreWordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- payplus payment gateway, unknown payplus payment gateway +1 moreWordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- supersaas, supersaas – online appointment scheduling +1 moreWordPress SuperSaaS – online appointment scheduling plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- martin gibson ideapushWordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability7.1 High
- senol sahin gpt3 ai content writer, aipower +1 moreWordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kraftplugins mega elementsWordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability6.5 Medium
- apollo13themes apollo13 framework extensionsWordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- usestrict bbpress notifyWordPress bbPress Notify (No-Spam) plugin <= 2.18.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- artistscope copysafe web protectionWordPress CopySafe Web Protection plugin <= 3.15 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mapsmarker leaflet maps markerWordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- livemesh addons for beaver builder, beaver builder addons +1 moreWordPress Livemesh Addons for Beaver Builder plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- jegstudio gutenverseWordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- burgersoftwares cozipressWordPress CoziPress theme <= 1.0.30 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- angeljudesuarez university management systemitsourcecode University Management System Avatar File st_update.php unrestricted upload5.3 Medium
- angeljudesuarez university management systemitsourcecode University Management System Login functions.php sql injection6.9 Medium
- angeljudesuarez university management systemitsourcecode University Management System view_cgpa.php sql injection5.3 Medium
- jkev record management systemSourceCodester Record Management System sort2.php cross site scripting5.3 Medium
- Show moreLoading…