CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- ni veristandDirectory Path Traversal Vulnerability in NI VeriStand with vsmodel Files7.8 High
- ni veristandDeserialization of Untrusted Data Vulnerability in NI VeriStand Project File7.8 High
- ni labviewInteger Overflow Vulnerability Reading TDMS Files in LabVIEW5.5 Medium
- ni flexlogger, systemlink, systemlink server +2 moreNI SystemLink Server Ships Out of Date Redis Version7.8 High
- ni flexlogger, systemlink, systemlink server +2 moreIncorrect Default Directory Permissions for NI SystemLink Redis Service5.5 Medium
- ubiquiti unifi u6+ access pointA misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to...5.3 Medium
dnsjava:dnsjavaMaven,org.jitsi:dnssecjavaMaven +1 moreDNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks7.7 High- ggerganov llama.cppllama.cpp null pointer dereference in gguf_init_from_file5.4 Medium
- argoproj argo cd, argo-cd +1 moreArgo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint7.5 High
- fish.audio bert-vits2fishaudio/Bert-VITS2 Limited File Write in webui_preprocess.py generate_config function6.5 Medium
- fishaudio bert-vits2fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py bert_gen function9.8 Critical
- fish.audio bert-vits2fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space...3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time2.6 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or...7.4 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build...6.4 Medium
dnsjava:dnsjavaMaven,org.jitsi:dnssecjavaMaven +1 moreDNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources7.1 High- sixlabors imagesharpSixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder5.3 Medium
- sixlabors imagesharpOut-of-bounds Write in SixLabors ImageSharp7.5 High
- ankitects ankiAnki Latex Incomplete Blocklist Vulnerability5.3 Medium
- ankitects ankiAnkitects Anki LaTeX Blocklist Bypass vulnerability3.1 Low
- ankitects ankiAnkitects Anki arbitrary script execution vulnerability9.6 Critical
- ankitects ankiAn reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in...7.4 High
- canonical operatorThe ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command4.4 Medium
- superagiAll versions of `SuperAGI` are vulnerable to Arbitrary Code Execution due to unsafe use of the ...9.8 Critical
- enalean tuleapTuleap's recursive permissions to document manager folder are not properly applied4.8 Medium
- dnsjavaDNSJava DNSSEC Bypass8.9 High
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5...7.1 High
- siemens cpci85 central processing/communication, sicore base system, cpci85 firmware +2 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5...9.3 Critical
- unknown search & replace, wp-media search \& replace +1 moreWordPress Search & Replace plugin <= 3.2.2 - Deserialization of untrusted data vulnerability5.4 Medium
- berqier berqwpWordPress BerqWP plugin <= 1.7.5 - Unauthenticated Non-Blind Server Side Request Forgery (SSRF) vulnerability7.2 High
- bernhard kux json content importerWordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- s-sols seraphinite post .docx source, seraphinite solutions post .docx source +1 moreWordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability7.1 High
- noor alam magical addons for elementorWordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability4.3 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability7.6 High
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order manager, ukrsolution barcode scanner and inventory manager +1 moreWordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability8.5 High
- designinvento directorypressWordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability8.5 High
- adrian tobey formlift for infusionsoft web forms, formlift for infusionsoft web forms +1 moreWordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability9.3 Critical
- bởi admin 2020 uipress lite, uipress lite +1 moreWordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability7.6 High
- brainstorm force, nikhil chavan elementor – header, footer & blocks template, brainstormforce elementor - header\, footer \& blocks template +1 moreWordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS) vulnerability6.5 Medium
- elementor proWordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- united themes shortcodes by united themes, unitedthemes shortcodes +1 moreWordPress Shortcodes by United Themes plugin < 5.0.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mayur somani, threeroutes media elegant themes iconsWordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- af themes wp post authorWordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- checkmkLivestatus injection in mknotifyd6.5 Medium
- apache streamparkApache StreamPark IDOR Vulnerability6.5 Medium
- apache syncopeApache Syncope: HTML tags can be injected into Console or Enduser text fields5.4 Medium
- Show moreLoading…