CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 morexfs: don't walk off the end of a directory data block7.1 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow8.7 High
- data443 inline related postsInline Related Posts < 3.8.0 - Admin+ Stored XSS5.9 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreUser Profile Builder < 3.11.8 - Unauthenticated Media Upload9.1 Critical
- dotcamp ultimate blocks, ultimate blocks blocks +1 moreUltimate Blocks < 3.2.0 - Contributor+ Stored XSS4.6 Medium
- ultimate-classified-listings ultimate classified listingsUltimate Classified Listings < 1.3 - Reflected XSS4.7 Medium
- unknown ultimate classified listingsUltimate Classified Listings < 1.3 - Unauthenticated LFI7.5 High
- slicewp wp-affiliate-platform, tipsandtricks-hq wp affiliate platform +1 moreWP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF5.5 Medium
- jannisthuemmig email encoderEmail Encoder < 2.2.2 - Admin+ Stored XSS5.4 Medium
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an...8.4 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection5.3 Medium
- simopro technology winmatrix3Simopro Technology WinMatrix3 Web package - SQL Injection9.8 Critical
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflow8.7 High
- simopro technology winmatrix3Simopro Technology WinMatrix3 Web package - SQL Injection9.8 Critical
- samsung escargotHeap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows...6.9 Medium
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflow8.7 High
- softnext mail archiving expert, mail sqr expert, sn os 10.3 +3 more +5 moreSoftnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection9.8 Critical
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection5.3 Medium
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow8.7 High
- amlpartners surety ecoCross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run...6.1 Medium
- raspapRaspAP allows an attacker to escalate privileges8.3 High
- host-host neuq board neuq boardBuffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a...7.5 High
- No product listedIncorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote...6.3 Medium
- mayurik best house rental management systemCross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at t…4.7 Medium
- oretnom23 lost and found information systemCross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote...6.1 Medium
- lost and found information system project and found information system, oretnom23 lost and found information system +1 moreSQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to...9.8 Critical
- oretnom23 lost and found information systemSQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to...8.8 High
- oretnom23 lost and found information systemCross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote...5.4 Medium
- tenda ac10 firmwareBuffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote...7.5 High
- italtel i-mcs nfvAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers...7.5 High
- italtel i-mcs nfvAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control.9.1 Critical
- italtel i-mcs nfvAn issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS)...7.1 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi loginauth buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R getSaveConfig buffer overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection5.3 Medium
- totolink a3000ru, a3000ru firmware +1 moreTOTOLINK A3000RU product.ini hard-coded password5.1 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System ajax.php cross-site request forgery6.9 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System manage_user.php sql injection5.3 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System manage_course.php sql injection5.3 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System receipt.php sql injection5.3 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System view_payment.php sql injection5.3 Medium
- code-projects school fees payment systemSourceCodester School Fees Payment System sql injection6.9 Medium
- Show moreLoading…