CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 moreice: Don't process extts if PTP is disabled4.7 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreinet_diag: Initialize pad field in struct inet_diag_req_v25.5 Medium
- linux, linux kernel +1 morenilfs2: fix inode number range checks7.8 High
- linux, linux kernel +1 morenilfs2: add missing check for inode numbers on directory entries7.8 High
- linux, linux kernel +1 morebtrfs: fix adding block group to a reclaim list and the unused list during reclaim7.8 High
- linux, linux kernel +1 moreRevert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"4.7 Medium
- linux, linux kernel +1 moredrm/nouveau: fix null pointer dereference in nouveau_connector_get_modes5.5 Medium
- linux, linux kernel +1 moreclk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common5.5 Medium
- linux, linux kernel +1 mores390/dasd: Fix invalid dereferencing of indirect CCW data pointer7.8 High
- linux, linux kernel +1 moremedia: mediatek: vcodec: Only free buffer VA that is not NULL5.5 Medium
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System view_model.php sql injection5.3 Medium
kubevirtopenSUSESecurity update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t…No scorecontainerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System home.php sql injection5.3 Medium
- bold-themes bold page builderBold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode6.4 Medium
- campcodes school log management systemSourceCodester/Campcodes School Log Management System manage_user.php sql injection5.3 Medium
- dylanjames zephyr project managerZephyr Project Manager < 3.3.99 - Editor+ XSS5.4 Medium
- unknown پلاگین پرداخت دلخواه, wp-master pardakht-delkhah +1 morePardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRF6.5 Medium
- a17lab wpstickybarWpStickyBar <= 2.1.0 - Reflected XSS6.1 Medium
- unknown send email only on reply to my comment, elance360 send-email-only-on-reply-to-my-comment +1 moreSend email only on Reply to My Comment <= 1.0.6 - Stored XSS via CSRF5.9 Medium
- unknown send email only on reply to my commentSend email only on Reply to My Comment <= 1.0.6 - Reflected XSS6.1 Medium
- bharatkambariya donation block for paypal, donation block for paypal project block for paypal +1 moreDonation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS6.8 Medium
- contrive cz loan managementCZ Loan Management <= 1.1 - Unauthenticated SQLi9.1 Critical
- masdiblogs wp ajax contact form, wp ajax contact form wordpress +1 moreWP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting6.1 Medium
- campcodes school log management systemSourceCodester/Campcodes School Log Management System print_barcode.php sql injection5.3 Medium
- masdiblogs wp ajax contact form, olaf lederer ajax contact form +1 moreWP Ajax Contact Form <= 2.2.2 - Arbitrary Email Deletion via CSRF4.3 Medium
- esterox business cardBusiness Card <= 1.0.0 - Admin+ File Upload7.2 High
- a17lab wpstickybarWpStickyBar <= 2.1.0 - Unauthenticated SQLi9.8 Critical
- unknown responsive tabsResponsive Tabs <= 4.0.8 - Contributor+ Stored XSS5.9 Medium
- themeboy sportspressSportsPress < 2.7.22 - Admin+ Stored XSS4.8 Medium
- salephpscripts web directory freeWeb Directory Free < 1.7.2 - Reflected XSS6.8 Medium
- unknown formflow: whatsapp social and advanced form builder with easy lead collection, wpxperties formflow, devsabbirahmed simple form +2 moreFormFlow < 2.12.2 - Admin+ Stored XSS5.9 Medium
- paidmembershipspro paid memberships pro, unknown pmpro-member-directory +1 morePaid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi6.5 Medium
- paidmembershipspro maps, strangerstudios paid memberships pro, unknown pmpro-membership-maps +2 morePaid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure4.9 Medium
- campcodes school log management systemSourceCodester/Campcodes School Log Management System ajax.php sql injection6.9 Medium
- campcodes school log management systemSourceCodester/Campcodes School Log Management System ajax.php cross site scripting5.1 Medium
- totolink ca300-poe, ca300-poe firmware +1 moreTOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow5.3 Medium
- totolink lr1200, lr1200 firmware +1 moreTOTOLINK LR1200 shadow.sample hard-coded password2.1 Low
- totolink lr1200, lr1200 firmware +1 moreTOTOLINK LR1200 cstecgi.cgi NTPSyncWithHost command injection5.3 Medium
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 cstecgi.cgi setWanCfg command injection5.3 Medium
- totolink a7000r, a7000r firmware +1 moreTOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow8.7 High
- totolink a7000r, a7000r firmware +1 moreTOTOLINK A7000R cstecgi.cgi loginauth buffer overflow8.7 High
- dlink dir-860l firmwareIn D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded...9.8 Critical
- dlink dir-820lw firmwareD-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet...9.8 Critical
- dbohdan hicolorA stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows...5.5 Medium
- dbohdan hicolorA heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause...6.2 Medium
- dbohdan hicolorA heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows...5.5 Medium
- dbohdan hicolorA heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows...6.2 Medium
- dbohdan hicolorA heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0...5.5 Medium
- wondercmsA Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to...4.7 Medium
- Show moreLoading…