CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- plug&track sensor net connect v2, proges sensor net connect firmware v2 +1 moreA “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative...4.2 Medium
- plug&track sensor net connect v2, proges sensor net connect firmware v2 +1 moreA “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')”...8.8 High
- plug&track sensor net connect v2, proges sensor net connect firmware v2 +1 moreA “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform...8.3 High
- plug&track sensor net connect v2, proges sensor net connect, sensor net connect firmware v2 +2 moreA “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an...4.2 Medium
- adobe acrobat, acrobat for edge +1 moreAcrobat for Edge | Out-of-bounds Read (CWE-125)5.5 Medium
- codename065 download managerDownload Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting6.9 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System Admin Login index.php sql injection6.9 Medium
- tainacanTainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read6.5 Medium
- strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting4.9 Medium
- code-projects online bus reservation sitecode-projects Online Bus Reservation Site register.php sql injection6.9 Medium
- jkev record management systemSourceCodester Record Management System sort_user.php cross site scripting5.3 Medium
- jkev record management systemSourceCodester Record Management System entry.php cross site scripting5.3 Medium
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System view_bill.php sql injection5.3 Medium
- dell inventory collectorDell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A...6.7 Medium
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.3 High
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System manage_billing.php sql injection5.3 Medium
- freshlight wp mobile menu, takanakui wp mobile menu – the mobile-friendly responsive menu +1 moreWP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification5.3 Medium
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.8 High
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.3 High
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System manage_block.php sql injection5.3 Medium
- dell bsafe crypto-c micro edition, bsafe micro edition suite, bsafe crypto-c-micro-edition +1 more +3 moreDell BSAFE Crypto-C Micro Edition 4.1.5 and Dell BSAFE Micro Edition Suite, versions 4.0 through...6.2 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scripting5.3 Medium
- bolt cms, boltcms bolt +1 moreBolt CMS Showcase Creation showcases cross site scripting5.3 Medium
- bitdefender gravityzone, gravityzone update server +1 moreVerbose error handling issue in GravityZone Update Server proxy service9.2 Critical
- bolt cms, boltcms bolt +1 moreBolt CMS Entry Preview page cross site scripting5.3 Medium
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System manage_tenant.php sql injection5.3 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreprofile-builder <= 3.11.8 - Unauthenticated Privilege Escalation9.8 Critical
- htmlforms html formsHTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF6.5 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.57 - Editor+ Stored XSS5.4 Medium
- 10web spidercontacts, spidercontacts wordpress +1 moreSpiderContacts <= 1.1.7 - Reflected XSS6.1 Medium
- unknown wanotifierWANotifier < 2.6.1 - Admin+ Stored XSS4.8 Medium
- coolkit ewelink, ewelink cloud service +1 moresharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user9.4 Critical
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System manage_payment.php sql injection5.3 Medium
- vikasratudi lifetime free drag \& drop contact form builder for wordpress vform, vpsuform – drag & drop contact form builder with email automation +1 moreLifetime free Drag & Drop Contact Form Builder for WordPress VForm <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting7.2 High
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System sql injection5.3 Medium
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System manage_user.php sql injection5.3 Medium
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System Login sql injection6.9 Medium
- dahua nvr4xxx and ipc-hx8xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 moreA vulnerability has been found in Dahua products. Attackers can send carefully crafted data...8.6 High
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 moreA vulnerability has been found in Dahua products. Attackers can send carefully crafted data...7.5 High
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 moreA vulnerability has been found in Dahua products. Attackers can send carefully crafted data...7.5 High
- oretnom23 establishment billing management systemSourceCodester Establishment Billing Management System cross site scripting5.3 Medium
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 moreA vulnerability has been found in Dahua products.After obtaining the ordinary user's username and...6.5 Medium
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 moreA vulnerability has been found in Dahua products.After obtaining the administrator's username and...6.0 Medium
- dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 moreA vulnerability has been found in Dahua products. After obtaining the administrator's username...4.9 Medium
- dahua ipc-hx8xxx and nvr4xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 moreA vulnerability has been found in Dahua products.Attackers can send carefully crafted data...7.5 High
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System cross site scripting5.3 Medium
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System manage_user.php sql injection5.3 Medium
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System manage_model.php sql injection5.3 Medium
- oretnom23 lot reservation management systemSourceCodester Lot Reservation Management System sql injection5.3 Medium
- Show moreLoading…