CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/10_🌍_Earth_Engine_Datasets.py9.8 Critical
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option vis_params9.8 Critical
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option palette9.8 Critical
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Gap filled Land Surface Temperature Daily option9.8 Critical
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option vis_params9.8 Critical
- opengeos streamlit-geospatialRemote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option palette9.8 Critical
- lenovo tab k10An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a...2.8 Low
- lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC...7.2 High
- lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in an upload processing functionality of XCC...7.2 High
- lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in the SSH captive command shell interface...7.2 High
- lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC...7.2 High
- lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in the web interface or SSH captive command...7.2 High
- churchcrm, churchcrm crm +1 moreChurchCRM SQL Injection Vulnerability8.8 High
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreSQL Injection8.3 High
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreSQL Injection8.3 High
- txtdottxtdot SSRF vulnerability in /proxy7.5 High
- txtdottxtdot SSRF vulnerability in /get7.5 High
- opentext directory servicesImproper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi...8.3 High
- tracksapp tracksTracks vulnerable to reflected cross-site scripting6.1 Medium
- 202ecommerce paypalPayPal Official Module for PrestaShop has Improperly Implemented Security Check for Standard7.5 High
- oveleon cookiebar, contao-cookiebar +1 moreOveleon Cookiebar reflected Cross-site Scripting vulnerability6.1 Medium
- automationanywhere automation 360Server-Side Request Forgery in Automation 3606.9 Medium
- red hat openshift container platform 3.11, openshift container platform 4.16, openshift container platform 4.17 +1 more +3 moreOpenshift-console: unauthenticated data exposure5.3 Medium
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server SQL injection6.0 Medium
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreIncorrect Access Control Vulnerability8.6 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreInsecure Storage of Sensitive Information Vulnerability7.0 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreDefault Credential Storage in Plaintext Vulnerability7.0 High
xmp_toolkitcrates.ioXMP Toolkit's `XmpFile::close` can trigger undefined behaviorNo score- starshipStarship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands7.4 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreHard-coded Credentials Vulnerability5.2 Medium
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCleartext Storage of Sensitive Information Vulnerability7.0 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCleartext Transmission of Sensitive Information Vulnerability8.6 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 morePassword Policy Bypass Vulnerability7.3 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCookie Without HTTPOnly Flag Set Vulnerability6.9 Medium
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCookie Without Secure Flag Set Vulnerability6.9 Medium
- michaelkazakov nimble commander, nimble commander commander +1 moreLocal Privilege Escalation in Nimble Commander <= v1.6.0, Build 40878.8 High
- apache traffic serverApache Traffic Server: Incomplete field name check allows request smuggling7.5 High
- apache traffic serverApache Traffic Server: Invalid Accept-Encoding can force forwarding requests8.2 High
- apache traffic serverApache Traffic Server: Incomplete check for chunked trailer section allows request smuggling7.5 High
- apache rollerApache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode5.4 Medium
- averta master sliderMaster Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion6.5 Medium
- elastic elasticsearchElasticsearch Insertion of Sensitive Information into Log File5.2 Medium
- raisecom msg1200, msg2100e, msg2200 +5 more +7 moreRaisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection5.3 Medium
- md-mafujul-hasan online-payroll-management-system, md mafujul hasan online payroll management system +1 moreMD-MAFUJUL-HASAN Online-Payroll-Management-System employee_viewmore.php sql injection5.3 Medium
- md-mafujul-hasan online-payroll-management-systemMD-MAFUJUL-HASAN Online-Payroll-Management-System department_viewmore.php sql injection5.3 Medium
- md-mafujul-hasan online-payroll-management-system, mafujulhasan online payroll managment system +1 moreMD-MAFUJUL-HASAN Online-Payroll-Management-System shift_viewmore.php sql injection5.3 Medium
- md-mafujul-hasan online-payroll-management-systemMD-MAFUJUL-HASAN Online-Payroll-Management-System branch_viewmore.php sql injection5.3 Medium
- dotcms coreIn the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via...9.9 Critical
- md-mafujul-hasan online-payroll-management-systemMD-MAFUJUL-HASAN Online-Payroll-Management-System designation_viewmore.php sql injection5.3 Medium
- m1k1o blogTianchoy Blog so.php sql injection5.3 Medium
- Show moreLoading…