CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- denkgroot spina, spina cms +1 moreSpina CMS cross-site request forgery6.9 Medium
- connectivity standards alliance matterSession establishment lock-up during replay of CASE Sigma1 messages6.5 Medium
- connectivity standards alliance connectedhomeip, csa-iot matter +1 moreIn-Fabric Matter Cluster Attribute Disclosure3.5 Low
- apache drillApache Drill: XXE Vulnerability in XML Format Reader8.8 High
- apache pinotApache Pinot: Unauthorized endpoint exposed sensitive information7.5 High
- curl, curl libcurl +1 moremacidn punycode buffer overread4.3 Medium
- wpbookingcalendar booking calendarWP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode6.4 Medium
- dell edge gateway 3200, edge gateway 5200, edge gateway 3200 firmware +9 more +11 moreDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A...6.0 Medium
- dell edge gateway 3200, edge gateway 3200 firmware +1 moreDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A...5.7 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode6.4 Medium
- arnoldasarny image seo – ai-driven image seo optimizer, wpchill imageseo, optimize images alt text \(alt tag\) \& names for seo using ai +2 moreOptimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure5.3 Medium
- aguidrevitch wp meteor website speed optimization addon, wp-meteor wp meteor +1 moreWP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure5.3 Medium
- alimir wp ulike, wp ulike project ulike +1 moreWP ULike < 4.7.1 - Admin+ Stored XSS4.8 Medium
- funnelkit funnel builder, amans2k funnelkit – funnel builder for woocommerce checkout +1 moreFunnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+)…4.3 Medium
- litespeedtech litespeed cacheLiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- wpeasypay wp easypay, saadiqbal wp easy pay – payment and donation form builder for square +1 moreWP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection5.3 Medium
- wpweb woocommerce - pdf vouchers, woocommerce pdf vouchers +1 moreWooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor7.3 High
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion6.5 Medium
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions6.3 Medium
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template5.4 Medium
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting7.2 High
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions7.3 High
- wpweb social auto posterSocial Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- curl, haxx libcurl +1 morefreeing stack buffer in utf8asn1str7.5 High
- campcodes supplier management systemCampCodes Supplier Management System v1.0 is vulnerable to SQL injection via...9.8 Critical
- campcodes supplier management systemCampCodes Supplier Management System v1.0 is vulnerable to SQL injection via...7.2 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...7.5 High
- tenda fh1201, tendacn fh1201 firmware +1 moreTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...7.5 High
- tenda fh1201, tendacn fh1201 firmware +1 moreTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...9.8 Critical
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...9.8 Critical
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via...9.8 Critical
- gstreamer orcStack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39....6.7 Medium
- huawei opengaussAn issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker...5.5 Medium
- linksys e2500 firmwareA vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated...8.0 High
- stitionai devikaThe snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is...9.1 Critical
- dolibarr erp\/crmDolibarr ERP CRM vulnerable to remote code execution (RCE)5.5 Medium
- adtran 834-5 firmware, sdg smartos +1 moreAdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have...7.2 High
- kube-logging logging-operator, logging operator +1 moreInsecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and...8.8 High
- external-secrets, external-secrets external secrets operator +1 moreInsecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and...9.8 Critical
- projectcontour contourInsecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate...9.8 Critical
- chaos-mesh, chaos-mesh chaos mesh +1 moreInsecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate...8.8 High
- cert-managerInsecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and...7.2 High
- fabedgefabedge has insecure permissions9.8 Critical
- layer5 mesheryInsecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate...9.8 Critical
- Show moreLoading…