CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface7.2 High
- ibm security directory integrator, security verify directory integrator +1 moreIBM Security Directory Integrator information disclosure3.7 Low
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated Sensitive Information Disclosure in ClearPass Policy Manager5.8 Medium
- hostgatorCVE-2024-72086.5 Medium
- bird fastmail, netwin +1 moreCVE-2024-72096.5 Medium
- ibm aspera orchestratorIBM Aspera Orchestrator session fixation5.5 Medium
- ibm aspera orchestratorIBM Aspera Orchestrator cross-site request forgery6.5 Medium
- ibm aspera orchestratorIBM Aspera Orchestrator HTTP header injection5.4 Medium
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report6.5 Medium
- langflowLangflow Privilege Escalation8.8 High
- xibosignage xibo, xibo-cms +1 moreXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula6.5 Medium
- xibosignage xibo, xibo-cms +1 moreXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import8.1 High
- xibosignage xibo, xibo-cms +1 moreXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter4.9 Medium
github.com/prest/prestGopREST vulnerable to jwt bypass + sql injection9.3 Critical- pimcore admin classic bundle, admin-ui-classic-bundle +1 morePimcore vulnerable to disclosure of system and database information behind /admin firewall6.3 Medium
- opentext™ documentum™ server, opentext documentum content server +1 moreSecurity vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.7.1 High
- discourseDiscourse allows iframe injection though default site setting6.1 Medium
- discourseDiscourse vulnerable to DoS via Tag Group4.9 Medium
kubevirtopenSUSESecurity update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t…No scorecontainerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- discourseDiscourse has an XSS via Onebox system6.3 Medium
- mikafon electronic inc. ma7, mikafon ma7 firmware, mikafonelectronic mikafon ma7 firmware +2 moreSQLi in Mikafon Electronic's Mikafon MA79.3 Critical
alloy-json-abicrates.ioStack overflow when parsing specially crafted JSON ABI strings6.9 Medium- stackposts social marketing toolXSS in Stackposts - Social Marketing Tool7.2 High
- siberiancms, siberiancms v5.0.8 +1 moreSiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9.8 Critical
- accuposAccuPOS – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- priority pri web portal add-on for priority erp on prem, priority-software pri web portal add on +1 morePriority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- cybonet pineapp mail relay, pineapp mail secure +1 moreCybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory7.5 High
- cybonet pineapp mail relay, pineapp mail secure +1 moreCybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- oretnom23 medicine tracker systemSourceCodester Medicine Tracker System Password Change cross-site request forgery6.9 Medium
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File5.5 Medium
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix Tafnit v8 - CWE-204: Observable Response Discrepancy5.3 Medium
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreAcceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4...7.2 High
- ec-cube co.,ltd. web api plugin, web api plugin (4.2 series) +1 moreStored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are...6.1 Medium
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix - CWE-552: Files or Directories Accessible to External Parties7.5 High
- ffri amc, nec corporation ffri amc for actsecure χ, sky co., ltd. edr plus pack +1 more +3 moreFFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3...6.4 Medium
- itsourcecode insurance management systemSourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting5.3 Medium
- mashovMashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 Medium
- apache seatunnel, apache software foundation seatunnel web +1 moreApache SeaTunnel Web: Authentication bypass9.1 Critical
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System lot_details.php sql injection5.3 Medium
- linux, linux kernel +1 morebtrfs: zoned: fix calc_available_free_space() for zoned mode5.5 Medium
- linux, linux kernel +1 morepowerpc/pseries: Fix scv instruction crash with kexec4.4 Medium
- linux, linux kernel +1 morecrypto: aead,cipher - zeroize key buffer after use4.1 Medium
- linux, linux kernel +1 moredrm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc7.0 High
- linux, linux kernel +1 moredrm/amd/display: Fix overlapping copy within dml_core_mode_programming4.7 Medium
- linux, linux kernel +1 morewifi: mt76: replace skb_put with skb_put_zero8.3 High
- linux, linux kernel +1 morenet: dsa: mv88e6xxx: Correct check for empty list7.0 High
- linux, linux kernel +1 moremedia: dvb-frontends: tda10048: Fix integer overflow5.5 Medium
- linux, linux kernel +1 moregve: Account for stopped queues when reading NIC stats7.8 High
- Show moreLoading…