CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...6.5 Medium
- octopus serverIn affected versions of Octopus Server under certain conditions, a user with specific role...2.2 Low
- gitlabImproper Access Control in GitLab4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab7.7 High
kimageformatsOSS-FuzzHeap-buffer-overflow in readImage4v2No scoreflacOSS-FuzzUse-of-uninitialized-value in FLAC__replaygain_synthesis__apply_gainNo scoreghostscriptOSS-FuzzSegv on unknown address in gs_gc_reclaimNo score- archerirm archerAn issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML...4.8 Medium
- archerirm archerA stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote...7.3 High
- archerirm archerA stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated...7.1 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac...9.8 Critical
- tenda fh1201, tendacn fh1201 firmware +1 moreTenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the...9.8 Critical
- datex-soft e-staffA CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR)...5.4 Medium
- webkul qloappsAn arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute...7.2 High
- r-hub turbomeetingA boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the databa…9.8 Critical
- r-hub turbomeetingA command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary com…7.2 High
- r-hub turbomeetingThe password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's…9.8 Critical
- kumahq kumaInsecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate...8.8 High
- gitlabImproper Control of Resource Identifiers ('Resource Injection') in GitLab2.7 Low
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab4.4 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab2.6 Low
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab4.1 Medium
- itsourcecode tailoring management system, tailoring management system project management system +1 moreitsourcecode Tailoring Management System expcatadd.php sql injection5.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface6.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface7.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface7.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface7.2 High
- insurance management system project management system, itsourcecode insurance management system +1 moreSourceCodester Insurance Management System direct request6.9 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Server-Side prototype pollution Leading to Information Disclosure7.2 High
- atlassian bitbucket data centerThere is a low severity open redirect vulnerability within affected versions of Bitbucket Data...3.1 Low
- duckdbDuckDB: sniff_csv provides filesystem access even when enable_external_access is disabled7.5 High
- openidentityplatform openamOpenAM FreeMarker template injection8.8 High
- argoproj argo cd, argo-cd +1 moreThe Argo CD web terminal session does not handle the revocation of user permissions properly.4.7 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure2.4 Low
- vnote project vnoteVNote vulnerable to Markdown XSS, which leads to RCE8.6 High
- docker mobyMoby authz zero length regression10.0 Critical
- red hat openshift container platform 3.11, openshift container platform 4, redhat openshift container platform +2 moreOpenshift-console: unauthenticated installation of helm charts6.5 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System sql injection5.3 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator...6.1 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could...7.2 High
- insurance management system project management system, itsourcecode insurance management system +1 moreSourceCodester Insurance Management System update_sub_category cross site scripting5.3 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could...8.1 High
- acronis cyber infrastructure, cyber infrastructure (aci) +1 moreRemote command execution due to use of default passwords. The following products are affected:...9.8 Critical
- progress telerik reportingUnsafe Deserialization Vulnerability8.8 High
- kirilkirkov ecommerce-laravel-bootstrap, ecommerce-codeigniter-bootstrap +1 morekirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserialization5.3 Medium
- progress telerik report server, telerik reporting +1 moreProgress Telerik Report Server Deserialization9.9 Critical
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget6.4 Medium
- robogallery robo gallery, robosoft robo gallery – photo & image slider +1 morePhoto Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title6.4 Medium
gix-attributescrates.ioThe kstring integration in gix-attributes is unsoundNo score- f-logic datacube3, datacube3 firmware +1 moreF-logic DataCube3 HTTP POST Request config_time_sync.php os command injection6.9 Medium
- Show moreLoading…