CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- bdtask pharmacy management system code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting 6.9 Medium
- linux, linux kernel +1 more kcm: Serialise kcm_sendmsg() for the same socket. 7.8 High
- byron gitoxide gix-path uses local config across repos when it is the highest scope 2.5 Low
- miniorange web application firewall, cyberlord92 web application firewall – website security +1 more Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass 5.3 Medium
- thimpress wp events manager WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection 8.8 High
- youtag two-factor authentication (formerly ip vault), two-factor authentication +1 more IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass 5.3 Medium
- mihail-barinov share this image, share this image project this image +1 more Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter 6.4 Medium
- gioni wp cerber security, wp cerber security, anti-spam & malware scan, wpcerber cerber security antispam \& malware scan +2 more WP Cerber Security <= 9.4 - IP Protection Bypass 5.3 Medium
- nvidia cuda toolkit NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a... 4.4 Medium
- nvidia cuda toolkit NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out... 4.4 Medium
- nvidia cuda toolkit NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a... 3.3 Low
- dell powerscale onefs Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment... 6.7 Medium
- wpzoom portfolio lite – filterable portfolio plugin, portfolio +1 more WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute 6.4 Medium
- dell powerscale onefs Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink)... 6.3 Medium
- linux, linux kernel +1 more netfilter: nfnetlink: Initialise extack before use in ACKs 7.1 High
- tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 6.1 Medium
- tagdiv composer tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] 6.1 Medium
- shafayat-alam attire, wpattire attire blocks +1 more Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection 8.8 High
- ibm sterling connect:direct web services, sterling connect direct web services +1 more IBM Sterling Connect:Direct Web Services information disclosure 8.1 High
- tcpdump libpcap NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support 4.4 Medium
- openzeppelin cairo-contracts, contracts +1 more OwnableTwoStep allows a pending owner to accept ownership after the original owner has renounced ownership in cairo-contracts 5.3 Medium
- tcpdump libpcap Double-free in libpcap before 1.10.5 with remote packet capture support. 4.4 Medium
-
spamPyPI `spam` project on PyPI compromised, malicious releases made No score -
opencv-pythonPyPI opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 8.6 High -
opencv-contrib-pythonPyPI opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 8.6 High -
opencv-python-headlessPyPI opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 8.6 High -
opencv-contrib-python-headlessPyPI opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 8.6 High -
gratientPyPI gratient 0.5 contains credential harvesting code 8.7 High -
exotelPyPI `exotel` project on PyPI compromised, malicious release made No score - lightdash Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat… 7.3 High
- lightdash Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to in… 5.4 Medium
- oretnom23 computer laboratory management system SourceCodester Computer Laboratory Management System Master.php delete_category sql injection 5.3 Medium
- oretnom23 computer laboratory management system SourceCodester Computer Laboratory Management System Master.php delete_record sql injection 5.3 Medium
- redhat kroxylicious, red hat streams for apache kafka, streams for apache kafka 2.8.0 +2 more Kroxylicious: missing upstream kafka tls hostname verification 5.9 Medium
- oretnom23 computer laboratory management system SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection 5.3 Medium
-
adyenPyPI Adyen APIs Library for Python timing attack vulnerability 6.9 Medium - manageengine endpoint central, zohocorp manageengine endpoint central +1 more Incorrect Authorization 7.6 High
- discourse discourse-calendar, calendar +1 more Insufficient control of region value length in discourse-calendar 4.3 Medium
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 more SQL injection 8.3 High
- music gallery site project gallery site, oretnom23 music gallery site +1 more SourceCodester Music Gallery Site Users.php sql injection 5.3 Medium
- svelte Potential mXSS vulnerability due to improper HTML escaping in svelte 5.4 Medium
- campcodes supplier management system Campcodes Supplier Management System edit_area.php sql injection 5.3 Medium
- redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 6.2 Medium
- oretnom23 sentiment based movie rating system SourceCodester Sentiment Based Movie Rating System User Registration Users.php sql injection 6.9 Medium
- sourcecodester petshop management system, nelzkie15 pet shop management system +1 more SourceCodester Petshop Management System add_client.php unrestricted upload 5.3 Medium
- sourcecodester petshop management system, nelzkie15 pet shop management system +1 more SourceCodester Petshop Management System add_user.php unrestricted upload 5.3 Medium
- oretnom23 electric billing management system SourceCodester Electric Billing Management System Actions.php sql injection 6.9 Medium
- oretnom23 electric billing management system SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection 5.3 Medium
- hfo4 shudong-share HFO4 shudong-share File Extension fileReceive.php unrestricted upload 5.3 Medium
- remyandrade contact manager with export to vcf, sourcecodester contact manager +1 more SourceCodester Contact Manager with Export to VCF index.html cross site scripting 5.3 Medium
- Show olderLoading…