CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- raisecom msg1200, msg2100e, msg2200 +5 more +7 moreRaisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injection5.3 Medium
- raisecom msg1200, msg2100e, msg2200 +5 more +7 moreRaisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injection5.3 Medium
- pmwebPMWeb Web Application Firewall cross site scripting5.1 Medium
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 cstecgi.cgi loginauth buffer overflow8.7 High
- totolink cp900, cp900 firmware +1 moreTOTOLINK CP900 Telnet Service setTelnetCfg command injection5.3 Medium
- totolink cp900, cp900 firmware +1 moreTOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- totolink n350rt, n350rt firmware +1 moreTOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow8.7 High
- libreofficeAbility to trust not validated macro signatures removed in high security mode7.8 High
- roundcubemod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters...7.5 High
- roundcube webmailA Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a...9.3 Critical
- roundcube webmailA Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7...9.3 Critical
- microweberMicroweber Cross Site Scripting (XSS) vulnerability6.1 Medium
- microweberMicroweber Cross Site Scripting (XSS) vulnerability6.1 Medium
- dzzofficedzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.8.8 High
- pandora kmplayerA segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- uab lexita panteracrm cms, patera crm cms +1 moreAn issue in UAB Lexita PanteraCRM CMS v.401.152 and Patera CRM CMS v.402.072 allows a remote...8.8 High
- uab lexita panteracrm cmsInsecure Permissions vulnerability in UAB Lexita PanteraCRM CMS v.401.152 and Patera CRM CMS v...7.5 High
- puneethreddyhc online shopping system advancedSQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an...9.8 Critical
- rd labs llc whoThe com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places...3.3 Low
- forip tecnologia administração pabx, forip administracao pabx +1 moreForIP Tecnologia Administração PABX monitcallcenter authMonitCallcenter sql injection6.9 Medium
- oswapp warehouse inventory systemOSWAPP Warehouse Inventory System change_password.php cross-site request forgery6.9 Medium
- oswapp warehouse inventory systemOSWAPP Warehouse Inventory System edit_account.php cross-site request forgery6.9 Medium
- eladminelunez eladmin Database Management/Deployment Management upload path traversal5.1 Medium
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Local missing authentication6.7 Medium
- itsourcecode tailoring management system, angeljudesuarez tailoring management system project in php +1 moreitsourcecode Tailoring Management System partedit.php sql injection5.3 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System patients.php patient_name sql injection5.3 Medium
- fastadminFastAdmin Attachment Management Section 4 cross site scripting5.1 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System view_company.php sql injection5.3 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System apply_now.php sql injection5.3 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System Image resume_upload.php unrestricted upload5.3 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System login.php sql injection6.9 Medium
lwanOSS-FuzzSegv on unknown address in lwan_request_get_cookieNo score- stitionai devika, stitionai/devika +1 moreInjection by Prompt Injection in stitionai/devika7.5 High
- emiloimagtolis ticket reservation systemitsourcecode Ticket Reservation System list_tickets.php sql injection5.1 Medium
- emiloimagtolis ticket reservation system, itsourcecode alton management system +1 moreitsourcecode Ticket Reservation System checkout_ticket_save.php sql injection5.1 Medium
- emiloimagtolis ticket reservation systemitsourcecode Ticket Reservation System Login Page login.php sql injection6.9 Medium
- vivotek ib8367a, ib8367a firmware +1 moreVivotek IB8367A upload_file.cgi getenv command injection5.3 Medium
- vivotek sd9364, sd9364 firmware +1 moreVivotek SD9364 upload_file.cgi getenv command injection5.3 Medium
- vivotek sd9364, sd9364 firmware +1 moreVivotek SD9364 httpd read stack-based overflow8.7 High
- vivotek cc8160, cc8160 firmware +1 moreVivotek CC8160 upload_file.cgi getenv command injection5.3 Medium
- vivotek cc8160, cc8160 firmware +1 moreVivotek CC8160 httpd read stack-based overflow8.7 High
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF User Alert Read Status index.php resource injection5.3 Medium
- elastic apm serverAPM Server Insertion of Sensitive Information into Log File5.7 Medium
- free5gc smf, simplemachines simple machine forum, simple machines forum +2 moreSimpleMachines SMF Delete User index.php resource injection5.3 Medium
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 msp_info.htm msp_info_htm command injection5.3 Medium
- ibm business automation workflowIBM Business Automation Workflow information disclosure5.3 Medium
- templatespare, templatespare – 1000+ wordpress starter templates & full site migration tool | 1-click import/export & no-code builder +1 moreBuild Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare <= 2.4.2 - Missing Authorization to Au…4.3 Medium
- kp4coder sync post with other siteSync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update4.3 Medium
- dylanjames zephyr project managerZephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter6.4 Medium
- yaycommerce yayextra, yayextra – woocommerce extra product options +1 moreYayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function9.8 Critical
- Show moreLoading…