CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
javaparserOSS-FuzzSecurity exception in com.github.javaparser.GeneratedJavaParser.ExpressionNo score- noisebynorthwest php-spxSPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.5.8 Medium
- severalnines clustercontrolDirectory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0...7.5 High
- icecoderICEcoder vulnerable to Cross Site Scripting6.1 Medium
- icecoderICEcoder vulnerable to Cross Site Scripting6.1 Medium
- icecoderICEcoder Path Traversal vulnerability6.3 Medium
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.7.1 High
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit...4.7 Medium
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.6.5 Medium
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php7.1 High
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php7.1 High
- tencent wechatInsecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate...8.8 High
- solar-log 1000 firmwareIncorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows...9.8 Critical
- solar-log 1000 firmwareAn issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store...8.1 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not...5.9 Medium
- No product listedAn issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure...3.3 Low
- withsecure client security, elements endpoint protection +1 moreAn issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements...5.8 Medium
- xiongwei technology restaurant digital comprehensive managementAn issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive...9.8 Critical
- zkteco zktime webAn issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an...7.5 High
- deepin dde file managerInsecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows...7.8 High
- softaculous webuzoSoftaculous Webuzo Password Reset Command Injection8.8 High
- softaculous webuzoSoftaculous Webuzo FTP Management Command Injection8.8 High
- softaculous webuzoSoftaculous Webuzo Authentication Bypass9.8 Critical
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability5.9 Medium
- dotcms core, dotcms +1 moreThe "reset password" login page accepted an HTML injection via URL parameters. This has already...5.4 Medium
- denkgroot spina, spina cms +1 moreSpina CMS media_folders cross-site request forgery6.9 Medium
- forip pabx, forip tecnologia administração pabx, forip administracao pabx +2 moreForIP Tecnologia Administração PABX Lista Ura Page detalheIdUra sql injection5.3 Medium
- openobserveOpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`7.2 High
- openobserveOpenObserve stored XSS vulnerability may lead to complete account takeover8.8 High
- hms industrial networks anybus-compactcom 30, hms-networks anybus compactcom 30 module ethernet\/ip firmware, anybus compactcom 30 module usb without housing firmware +2 moreHMS Industrial Networks Anybus-CompactCom 30 Cross-site Scripting6.3 Medium
- absolute secure accessXSS in Secure Access administrative console4.5 Medium
- ibm security directory integrator, security verify directory integrator, security directory server +1 more +3 moreIBM Security Directory Integrator cross-site scripting6.8 Medium
- ibm security directory integrator, security verify directory integrator, security directory server +1 more +3 moreIBM Security Directory Server information disclosure5.3 Medium
- absolute secure accessElevation of privilege in Absolute Secure Access clients and servers8.4 High
- openprojectOpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configuration4.7 Medium
- positron s.r.l broadcast signal processor tra7005, positron tra7005 firmware +1 moreAuthentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA70058.7 High
- craftcms cms, craft cms +1 moreCraft CMS Allows TOTP Token To Stay Valid After Use4.8 Medium
- forip pabx, forip tecnologia administração pabx +1 moreForIP Tecnologia Administração PABX Authentication Form login sql injection6.9 Medium
- openedx edx-platformOpen edX Platform's instructor upload CSV for cohort creation not Private by Default5.3 Medium
- 1panel-dev kubepiKubePi's JWT token validation has a defect6.3 Medium
- huawei emui, harmonyos +1 moreMemory request logic vulnerability in the memory module. Impact: Successful exploitation of this...8.4 High
- huawei emui, harmonyos +1 moreAccess control vulnerability in the security verification module. Impact: Successful exploitation...9.3 Critical
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the NMS module Impact: Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the account synchronisation module. Impact: Successful...6.2 Medium
- huawei emui, harmonyos +1 morePlaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this...6.2 Medium
- huawei emui, harmonyos +1 moreVulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful...6.8 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion8.8 High
- spring cloud data flow, vmware spring cloud data flow +1 moreCVE-2024-37084: Remote code execution in Spring Cloud Data Flow9.8 Critical
- linux, linux kernel +1 moretun: add missing verification for short frame8.8 High
- linux, linux kernel +1 moretap: add missing verification for short frame8.8 High
- Show moreLoading…