CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- mattermostExisting local user overwritten by malicious remote7.4 High
- mattermostMalicious remote can create arbitrary reactions on arbitrary posts2.7 Low
- python cpythonEmail header injection due to unquoted newlines5.5 Medium
- getscreen, getscreen agent, point b ltd getscreen agent +2 morePoint B Ltd Getscreen Agent MSI Installer getscreen.msi temp file8.5 High
- d-link dir-600, dlink dir-600 firmware +1 moreD-Link DIR-600 soap.cgi soapcgi_main os command injection5.3 Medium
- bdthemes element pack, element pack pro - addon for elementor page builder wordpress plugin +1 moreElement Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL6.4 Medium
- pickplugins comboblocks, post grid +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date…6.4 Medium
- dell insightiqDell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm...5.9 Medium
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A...4.8 Medium
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability....5.8 Medium
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A...3.1 Low
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability....4.8 Medium
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability....4.8 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreSQL Injection4.7 Medium
- breakdanceBreakdance <= 1.7.2 - Missing Authorization4.3 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload6.4 Medium
- breakdanceBreakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- unknown ultimate classified listingsUltimate Classified Listings < 1.4 - Reflected XSS7.1 High
- dmytropopov light pollLight Poll <= 1.0.0 - Polls Deletion via CSRF6.5 Medium
- premio my sticky bar, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 moreMy Sticky Bar < 2.7.2 - Admin+ Stored XSS4.8 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.1 - Bulk Action via CSRF8.1 High
- swift framework socialdriver-framework, swiftideas swift framework +1 moreSwift Framework < 2024.04.30 - Contributor+ Stored XSS4.8 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.1 - User Deletion via CSRF6.5 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSS6.5 Medium
- baidu ueditorBaidu UEditor cross site scripting5.3 Medium
- baidu ueditorBaidu UEditor unrestricted upload5.3 Medium
- doublesharp remote content shortcodeRemote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery6.4 Medium
- tvt avision dvr av108t, dvr td-2104ts-cl, dvr td-2108ts-hp +8 more +10 moreTVT DVR TD-2104TS-CL queryDevInfo information disclosure6.9 Medium
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L cstecgi.cgi setParentalRules buffer overflow8.7 High
- roxnor fundengine – donation and crowdfunding platform, wpmet fundengine, wp fundraising donation and crowdfunding platform +2 moreFundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L cstecgi.cgi loginauth buffer overflow8.7 High
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 cstecgi.cgi loginauth buffer overflow8.7 High
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 getSaveConfig buffer overflow8.7 High
- limpinho ctt expresso para woocommerceCTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory5.3 Medium
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- elecom wrc-2533gs2-b firmware, wrc-2533gs2-w firmware, wrc-2533gs2v-b firmware +18 more +20 moreCross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a...6.5 Medium
- elecom wrc-x1500gs-b firmware, wrc-x1500gsa-b firmware, wrc-x6000xs-g firmware +15 more +17 moreOS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted...6.8 Medium
- elecom wrc-2533gs2-b firmware, wrc-2533gs2-w firmware, wrc-2533gs2v-b firmware +12 more +14 moreUnrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN...6.8 Medium
- totolink n350rt, n350rt firmware +1 moreTOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow8.7 High
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 Telnet Service product.ini hard-coded password9.3 Critical
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- linuxfoundation cortexcortex establishes TLS connections with `InsecureSkipVerify` set to `true`7.5 High
- casbin casdoorcasdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification7.5 High
- netbirdio netbirdNetBird uses a static initialization vector (IV)7.5 High
- navidromeNavidrome uses MD5 hashing algorithm9.1 Critical
- google androidIn setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due...7.8 High
- google androidIn shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from...5.5 Medium
- google androidIn setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for...7.8 High
- google androidIn attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible...7.8 High
- Show moreLoading…