CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- ninjateam file manager pro – filester, filester +1 moreFile Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update7.5 High
- crocoblock jetelements, jetmonsters jetformbuilder — dynamic blocks form builder +1 moreJetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation7.2 High
- ayecode userswpUsersWP < 1.2.12 - Users Information Disclosure7.5 High
- expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 moreQuiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS5.9 Medium
- podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 morePodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack7.7 High
- openstack heat, red hat openstack platform 13 (queens), openstack platform 16.1 +3 more +5 moreOpenstack-heat: incomplete fix for cve-2023-16255.0 Medium
- fogprojectFOG has a Log Information Disclosure5.3 Medium
- fogprojectFOG leaks sensitive information (AD domain, username and password)9.3 Critical
- western digital wd discoveryMisconfiguration in node.js causing a code execution in WD Discovery7.1 High
- anji-plus aj-report, report +1 moreanji-plus AJ-Report Authentication Bypass9.8 Critical
- avtech avm1203 (ip camera), avtec avm1203\/ipcamera\/, avtech avm1203 firmware +2 moreCommand Injection in AVTech AVM1203 (IP Camera)8.7 High
- monkeytypeMonkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.8.4 High
- gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 moreIn libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can...9.1 Critical
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz, gvectorsteam comments-wpdiscuz +2 moreComments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection5.3 Medium
- digiwin easyflow .netDigiwin EasyFlow .NET - Arbitrary File Download6.5 Medium
- siemens omnivise t3000 application server r9.2, omnivise t3000 r8.2 sp3, omnivise t3000 r8.2 sp4 +2 more +4 moreA vulnerability has been identified in Omnivise T3000 Application Server (All versions). The...8.7 High
- siemens omnivise t3000 application server r9.2, omnivise t3000 r8.2 sp3, omnivise t3000 r8.2 sp4 +1 more +3 moreA vulnerability has been identified in Omnivise T3000 Application Server (All versions). Affected...6.9 Medium
- siemens omnivise t3000 application server r9.2, omnivise t3000 domain controller r9.2, omnivise t3000 network intrusion detection system (nids) r9.2 +17 more +19 moreA vulnerability has been identified in Omnivise T3000 Application Server (All versions), Omnivise...8.3 High
- siemens omnivise t3000 application server r9.2, omnivise t3000 domain controller r9.2, omnivise t3000 product data management (pdm) r9.2 +13 more +15 moreA vulnerability has been identified in Omnivise T3000 Application Server (All versions >= R9.2),...8.5 High
- ai3 qbibotAi3 QbiBot - Stored XSS6.1 Medium
- changing information technology hwataiservisign windows version, changingtec hwatai servisign +1 moreCHANGING Information Technology HWATAIServiSign Windows Version - Stack-based Buffer Overflow4.3 Medium
- changing information technology tcbservisign windows version, changingtec tcb servisign +1 moreCHANGING Information Technology TCBServiSign Windows Version - Stack-based Buffer Overflow4.3 Medium
- changing information technology tcbservisign windows version, changingtec servisign, tcb servisign +2 moreCHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation8.8 High
- changing information technology tcbservisign windows version, changinginformationtechnology tcbservisign, changingtec tcb servisign +2 moreCHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation8.8 High
- changing information technology tcbservisign windows version, changingtec tcb servisign +1 moreCHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption Strength6.5 Medium
- apache inlong, apache software foundation inlong tubemq client +1 moreApache InLong TubeMQ Client: Remote Code Execution vulnerability9.8 Critical
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- apache linkis, apache software foundation linkis basic management services +1 moreApache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability4.9 Medium
- apache linkis, apache software foundation linkis basic management services +1 moreApache Linkis Basic management services: Privilege Escalation Attack vulnerability8.8 High
- martin gibson wp gotowebinarWordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability7.1 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 PCX File Parsing Out Of Bound Read5.5 Medium
- looks awesome superfly responsive menu, wordpress menu plugin — superfly responsive menu +1 moreWordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion8.8 High
- unknown essential blocksEssential Blocks < 4.7.0 - Contributor+ Stored XSS5.4 Medium
- brainstorm force spectra pro, wpspectra spectra +1 moreSpectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs6.4 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure7.5 High
- dell cloudlinkCloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional...6.6 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System manage_question.php sql injection5.3 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System view_result.php sql injection5.3 Medium
- motovnet ebook storeEbook Store <= 5.8001 - Unauthenticated Full Path Disclosure5.3 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System print_quiz_records.php sql injection5.3 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System my_quiz_result.php sql injection5.3 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System manage_user.php sql injection5.3 Medium
- oretnom23 simple realtime quiz systemSourceCodester Simple Realtime Quiz System ajax.php sql injection5.3 Medium
- elliptic project ellipticElliptic allows BER-encoded signatures9.1 Critical
- elliptic project ellipticElliptic's ECDSA missing check for whether leading bit of r and s is zero5.3 Medium
- elliptic project ellipticElliptic's EDDSA missing signature length check5.3 Medium
- any1 neatvncserver.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type.9.8 Critical
- mecodia feriproFeripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>...5.4 Medium
- feriproAn Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in...7.5 High
- Show moreLoading…