CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- seacmsSeaCMS index.php cross site scripting5.3 Medium
- seacmsSeaCMS cross site scripting5.3 Medium
- seacmsSeaCMS Password Change cross-site request forgery6.9 Medium
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R cstecgi.cgi setWanCfg command injection5.3 Medium
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R Telnet Service product.ini hard-coded password5.1 Medium
- totolink a3100r, a3100r firmware +1 moreTOTOLINK A3100R HTTP POST Request cstecgi.cgi setTelnetCfg command injection5.3 Medium
- totolink a3100r, a3100r firmware +1 moreTOTOLINK A3100R getSaveConfig buffer overflow8.7 High
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R apmib Configuration ExportSettings.sh information disclosure6.9 Medium
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R shadow.sample hard-coded password2.0 Low
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R Password Reset wizard.html access control5.3 Medium
- cervantessec cervantesCervantes through 0.5-alpha allows stored XSS.5.4 Medium
- cervantessec cervantesCervantes through 0.5-alpha accepts insecure file uploads.5.4 Medium
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with...7.8 High
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with...7.8 High
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with...7.8 High
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with...7.0 High
- tightvncTightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a...9.1 Critical
- netgear wn604, wn604 firmware +1 moreNetgear WN604 siteSurvey.php direct request6.9 Medium
- tenda o3, o3 firmware, o3v2 firmware +2 moreTenda O3 setMacFilterList fromSafeSetMacFilter stack-based overflow8.7 High
- tenda o3, o3 firmware, o3v2 firmware +2 moreTenda O3 setMacFilter fromMacFilterSet stack-based overflow8.7 High
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields4.9 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- fluentforms contact form, web-dorado wp form builder, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +2 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- athemes starter sites, smub athemes starter sites +1 moreaThemes Starter Sites <= 1.0.53 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget6.4 Medium
- piotnet addons for elementor, piotnetdotcom piotnet addons for elementor +1 morePiotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure5.3 Medium
- wcproducttable woocommerce product table, product table and list builder for woocommerce lite +1 moreWooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- campaign monitor for wordpress, campaignmonitor campaign monitor, vibhorchhabra campaign monitor for wordpress +2 moreCampaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure5.3 Medium
- coderevolution aiomatic, aiomatic - automatic ai content writer & editor, gpt-3 & gpt-4, chatgpt chatbot & ai toolkit, aiomatic-automatic ai content writer \& editor +2 moreAIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending5.8 Medium
- coffee2code one click close commentsOne Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure5.3 Medium
- paritydiscounts paritypress – parity pricing with discount rulesParityPress <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- wibergsweb master currency wpMaster Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode6.4 Medium
- aramex shipping woocommerceAramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code admin post navigationAdmin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure5.3 Medium
- getlevelten intelligenceIntelligence <= 1.4.0 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code admin trim interfaceAdmin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure5.3 Medium
- nitesh singh ultimate wordpress auction pluginUltimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation5.8 Medium
- medianet ads manager, mnetadmanager media.net ads manager +1 moreMedia.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- coffee2code add admin javascriptAdd Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure5.3 Medium
- wptexture flipbox builderFlipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection8.8 High
- themeum tutor lms – migration tool, tutor lms - migration tool +1 moreTutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml4.3 Medium
- themeum tutor lms – migration tool, tutor lms - migration tool, tutorlms-migrationtool +2 moreTutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml5.3 Medium
- coffee2code add admin cssAdd Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure5.3 Medium
- ignitionwp ignitiondeck crowdfunding platformIgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorization5.4 Medium
bind9Debianbind9 - regression updateNo score- xdg desktop portal hyperlandxdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows...6.3 Medium
- opengeos streamlit-geospatialstreamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.py9.8 Critical
- opengeos streamlit-geospatialstreamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.py9.8 Critical
- opengeos streamlit-geospatialstreamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py7.5 High
- Show moreLoading…