CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System ajax.php cross site scripting5.3 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability7.5 High
- codesolz better find and replaceWordPress Better Find and Replace plugin <= 1.6.1 - PHP Object Injection vulnerability8.3 High
- pixelcurve edubinWordPress Edubin theme <= 9.2.0 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - Token Disclosed in URL5.7 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision server +1 moreexacqVison - TLS certificate validation6.4 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - HTTPS Session Establishment6.4 Medium
- netflix dispatchServer-Side Template Injection in Dispatch Message Templates9.4 Critical
- wpforms user registration, wpforms, llc. wpforms user registration +1 moreWordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability8.0 High
- makestories team (for google web stories), pratik ghela makestories (for google web stories) +1 moreWordPress MakeStories (for Google Web Stories) plugin <= 3.0.3 - Arbitrary File Download and SSRF vulnerability7.1 High
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System ajax.php cross-site request forgery6.9 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - CSRF issues with Web Service6.8 Medium
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.0.8.6 - Local File Inclusion vulnerability4.3 Medium
- revmakx backup and staging by wp time capsuleWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability9.8 Critical
- crocoblock jetwidgets for elementor and woocommerce, jetwidgets for elementor +1 moreWordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability6.5 Medium
- webappick ctx feed, woocommerce product feed +1 moreWordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability7.2 High
- jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 moreWordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability8.0 High
- cridio listingproWordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability8.5 High
- motopress timetable and event scheduleWordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability5.5 Medium
- ideabox powerpack for beaver builderWordPress PowerPack for Beaver Builder plugin <= 2.33.0 - Contributor+ Privilege Escalation vulnerability8.8 High
- ideabox powerpack pro for elementorWordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability8.8 High
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System Login ajax.php sql injection6.9 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System manage_establishment.php sql injection5.3 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System manage_records.php sql injection5.3 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System manage_person.php sql injection5.3 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System manage_user.php sql injection5.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreStored XSS in Generate Board Name Input Field4.6 Medium
intel-microcodeTuxCareUpdate of alt-phpNo score- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System ajax.php sql injection5.3 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery6.9 Medium
- ping identity pingidmPingIDM Query Filter Vulnerability2.7 Low
- 1e platformThe Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.4.7 Medium
- oretnom23 tracking monitoring management systemSourceCodester Tracking Monitoring Management System ajax.php cross site scripting5.3 Medium
- yonle bostrBostr Improper Authorization4.6 Medium
- clickhouseSpecially crafted request could caused undefined behaviour which may lead to Remote Code Execution.8.1 High
- parisneo lollms-webui, parisneo/lollms, lollms web ui +2 moreMissing client_id in parisneo/lollms-webui4.4 Medium
- rockwell automation 1756-en2f, 1756-en2t, 1756-en2tp +5 more +7 moreRockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices7.3 High
- sapcc elektraElektra vulnerable to remote code execution in universal search9.2 Critical
- ruby rexmlREXML DoS vulnerability5.3 Medium
- ruby rexmlREXML DoS vulnerability5.3 Medium
- mattermost, mattermost server +1 moreMalicious remote can claim that a user was synced from another remote2.7 Low
- mattermost, mattermost server +1 moreMalicious remote can make an arbitrary local channel read-only4.1 Medium
- mattermost, mattermost server +1 moreMalicious remote can create/update/delete arbitrary posts in arbitrary channels5.5 Medium
- mattermost, mattermost server +1 moreRemote username set to an arbitrary string by remote user4.3 Medium
- mattermost, mattermost server +1 moreMalicious remote can create arbitrary channels3.8 Low
- mattermostPermanently local data deletion by malicious remote6.8 Medium
- mattermostMalicious remote can invite itself to an arbitrary local channel8.7 High
- mattermostMalicious remote can add users to arbitrary teams and channels8.7 High
- Show moreLoading…