CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System view_reserved.php sql injection5.3 Medium
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System sql injection6.9 Medium
libxml2OSS-FuzzHeap-use-after-free in xmlCharEncCloseFuncNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo scoregpacOSS-FuzzStack-buffer-overflow in gf_vvc_parse_nalu_bsNo score- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 morePath Traversal in gaizhenbiao/chuanhuchatgpt8.2 High
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System team_save.php sql injection5.1 Medium
- curl, haxx libcurl, siemens ruggedcom rst2428p +19 more +21 moreASN.1 date parser overread6.5 Medium
- google chromeInsufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a...8.8 High
- google chromeOut of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote...8.8 High
- google chromeInsufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533...4.3 Medium
- google chromeInsufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533...4.3 Medium
- google chromeInappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote...4.3 Medium
- google chromeUse after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who...8.8 High
- google chromeInappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote...4.3 Medium
- google chromeUse after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote...8.8 High
- google chromeUse after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who...8.8 High
- google chromeRace in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a...3.1 Low
- google chromeInappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72...4.7 Medium
- google chromeHeap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to...8.8 High
- google chromeUninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote...8.8 High
- google chromeUse after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to...8.8 High
- google chromeUse after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote...8.8 High
- homebrew brewos/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted...8.3 High
- tenda ac18, ac18 firmware +1 moreStack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker...7.6 High
- codenotary immudbmmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText...7.4 High
- filestashAn issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables...5.3 Medium
- filestashFilestash skips TLS certificate verification process when sending out email verification codes5.9 Medium
- filestashFilestash configured to skip TLS certificate verification when using the FTPS protocol7.5 High
- litestreamAn issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey()...5.3 Medium
- goframegoframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to...7.1 High
- beegoBeego privilege escalation vulnerability8.8 High
- beegoBeego privilege escalation vulnerability8.8 High
- No product listedAn issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before...6.1 Medium
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System Add a Menu menu.php unrestricted upload5.1 Medium
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System member_save.php sql injection5.1 Medium
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System category_save.php sql injection5.1 Medium
- elastic kibanaKibana Denial of Service issue6.5 Medium
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System reservation_status.php sql injection5.1 Medium
- itsourcecode alton management system, adonesevangelista restaurant management system +1 moreitsourcecode Alton Management System search.php sql injection5.3 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget6.4 Medium
- fuellabs fuels-tsThe fuels-ts typescript SDK has no awareness of to-be-spent transactions3.1 Low
- google tensorflowTensorFlow segfault in array_ops.upper_bound7.5 High
- akana api platform, perforce akana api +1 moreXML External Entity in Akana6.3 Medium
- akana api platform, perforce akana api +1 moreOverly Verbose Errors in SAML Integration3.5 Low
- akana api platform, perforce akana api +1 moreSAML Replay in Akana5.4 Medium
- mkucej i-librarian-freeI, Librarian Stored XSS vulnerability in Item Summary4.6 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated Sensitive Information Disclosure in ClearPass Policy Manager6.8 Medium
- Show moreLoading…