CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- hwameistorInsecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate...8.4 High
- volcanoVolcano has insecure permissions9.8 Critical
- adtran 834-5 firmware, sdg smartos +1 moreAdtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.5.5.1, devices allow OS...8.8 High
- adtran netvanta 3120 firmwareMultiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E...4.8 Medium
- adtran 834-5 firmware, sdg smartos +1 moreAdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have...8.8 High
- microsoft groupmeGroupMe Elevation of Privilege Vulnerability9.6 Critical
- microsoft groupmeGroupMe Elevation of Privilege Vulnerability8.1 High
- okta browser pluginOkta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to...7.1 High
- getsentry sentrySentry vulnerable to stored Cross-Site Scripting (XSS)7.1 High
- cbioportalcBioPortal Proxy Endpoint Vulnerabliity8.3 High
- abb advabuild, advant mod 300 advabuild +1 moreElevation of Privilege8.8 High
- abb advabuild, advant mod 300 advabuild +1 moreInsufficient access control on Inter process communication,7.8 High
- ampacheAmpache Stored Cross-site Scripting Vulnerability5.5 Medium
- thinkst canarytokensBlind SSRF via Canarytoken Webhook5.4 Medium
- thinkst canarytokensCanarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting3.5 Low
- @clerk vueVue client-side XSS via prototype pollution4.8 Medium
- openstack novaOpenStack Nova vulnerable to unauthorized access to potentially sensitive data6.5 Medium
- danocmx node-tf2-item-formatTF2 Item Format Regular Expression Denial of Service vulnerability7.5 High
- ni labviewMemory Corruption Due to Improper Length Check in NI LabVIEW8.4 High
- ni labviewMemory Corruption Due to Improper Length Checks in LabVIEW tdcore.dll8.4 High
- ni labviewOut of Bounds Read Due to Missing Bounds Check in LabVIEW7.8 High
- ni system configuration, io trace tool +1 moreStack-based Buffer Overflow Vulnerability in NI I/O Trace Tool7.8 High
- apache arrow, apache software foundation arrow rust object store +1 moreApache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files7.5 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe experience managerAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- android telegram for android, telegram +1 moreImproper multimedia file attachment validation in Telegram for Android app7.1 High
- apache streamparkApache StreamPark: session not invalidated after logout9.1 Critical
- linux, linux kernel +1 morefilelock: Remove locks reliably when fcntl/close race is detected7.8 High
- john darrel hide my wp ghostHide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure8.6 High
- emarket-design request a quoteRequest a Quote < 2.4.1 - Admin+ Stored XSS5.9 Medium
- godaddy coblocks, page builder gutenberg blocks builder gutenberg blocks, unknown page builder gutenberg blocks +2 moreCoBlocks < 3.1.12 - Contributor+ SSRF6.5 Medium
- ckp267 maxiblocks builder | 17,000+ design assets, patterns, icons & starter sitesMaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- davidanderson redux framework, redux gutenberg template library \& redux framework +1 moreRedux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting7.2 High
- zyxel wbe660s firmware, nwa110ax firmware, nwa1123acv3 firmware +17 more +19 moreThe improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3...6.5 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking7.7 High
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...9.8 Critical
- isc bind, bind 9 +1 moreAssertion failure when serving both stale cache data and authoritative zone content7.5 High
- wcharczuk go-chartgo-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function.7.5 High
- openrestyIn lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during...5.9 Medium
- isc bind, bind 9 +1 moreSIG(0) can be used to exhaust CPU resources7.5 High
- isc bind, bind 9 +1 moreBIND's database will be slow if a very large number of RRs exist at the same name7.5 High
- isc bind, bind 9 +1 moreA flood of DNS messages over TCP may make the server unstable7.5 High
- ni veristandMissing Authorization Checks In NI VeriStand Gateway For Project Resources9.8 Critical
- ni veristandMissing Authorization Checks in NI VeriStand Gateway for File Transfer Resources7.5 High
- perkinelmer processplus, perkin elmer process plus +1 moreExecution with Unnecessary Privileges9.3 Critical
- perkinelmer processplus, perkin elmer process plus +1 moreHardcoded MSSQL Credentials9.3 Critical
- ni veristandDeserialization of Untrusted Data in NI VeriStand Waveform Streaming Server9.8 Critical
- ni veristandDeserialization of Untrusted Data in NI VeriStand DataLogging Server9.8 Critical
- perkinelmer processplus, perkin elmer process plus +1 moreUnauthenticated Local File Inclusion8.7 High
- Show moreLoading…