CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System new_prescription.php sql injection5.3 Medium
- boxy studio cookedWordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode5.4 Medium
- mailcow mailcow-dockerized, mailcow\ +1 moreCross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized3.8 Low
- mailcow mailcow-dockerized, mailcow\ +1 moreCross-site Scripting (XSS) via API Logs in mailcow: dockerized7.6 High
- mailcow mailcow-dockerized, mailcow\ +1 moreTwo-Factor Authentication (2FA) Bypass in mailcow: dockerized6.6 Medium
- nuxt icon, nuxt +1 moreServer-Side Request Forgery (SSRF) in nuxt-icon8.6 High
- @clerk nuxtRemote code execution via the browser when running the test locally in nuxt8.8 High
- @clerk nuxtCross-site Scripting (XSS) in navigateTo if used after SSR in nuxt6.3 Medium
- @clerk nuxtPath Traversal: '../filedir' in Nuxt Devtools8.8 High
- jfrog artifactoryJFrog Artifactory Cache Poisoning9.3 Critical
- opentext alm octane., alm octane +1 moreImproper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product.7.3 High
- kubean-io kubeanCluster-level privilege escalation in kubean6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...6.0 Medium
- regclientregclient may ignore pinned manifest digests5.2 Medium
- icinga ipl-webipl/web susceptible to Cross-Site Request Forgery (CSRF)3.9 Low
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +103 more +105 moreUse After Free in Graphics Linux8.4 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +122 more +124 moreInteger Overflow or Wraparound in Automotive GPU8.4 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +136 more +138 moreUse of Uninitialized Variable in Automotive GPU8.4 High
- qualcomm 215 mobile platform firmware, apq8017 firmware, apq8037 firmware +240 more +242 moreNULL Pointer Dereference in HLOS6.2 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +208 more +210 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOS7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +140 more +142 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Automotive7.8 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, 315 5g iot modem firmware +247 more +249 moreBuffer Over-read in Multi Mode Call Processor7.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +103 more +105 moreLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor7.5 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +23 more +25 moreReachable Assertion in Multi Mode Call Processor6.5 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +164 more +166 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor8.4 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6800 firmware +93 more +95 moreBuffer Over-read in Audio7.5 High
- korenix jetport 5601v3, jetport5601v3 +1 moreUnauthenticated Command Injection9.3 Critical
- korenix jetport 5601v3Plaintext Communication7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closure7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8 advanced virtualization +1 more +3 moreLibnbd: nbd server improper certificate validation7.4 High
- korenix jetport 5601v3, jetport 5601 +1 moreInsufficient Authentication9.3 Critical
- apache iotdb workbenchApache IoTDB Workbench: SSRF Vulnerability (EOL)7.3 High
- apache ofbizApache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code9.8 Critical
- apache software foundation airflow providers fab, apache apache-airflow-providers-fab +1 moreApache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow9.8 Critical
- metaphorcreations dittyDitty < 3.1.45 - Author+ Stored XSS5.4 Medium
- collect.chat chatbot, collectchat chatbot for wordpress by collect.chat ⚡️, micro.company collect.chat +2 moreCollectChat < 2.4.4 - Admin+ XSS4.8 Medium
- community events project events, jackdewey community events +1 moreCommunity Events < 1.5.1 - Admin+ Stored XSS4.8 Medium
- tipsandtricks-hq wp emember, unknown wp-emember, wp emember emember +2 moreWP eMember <= v10.7.0 - Stored XSS via CSRF6.1 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 morePinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS5.4 Medium
- 2code himerHimer - Social Questions and Answers < 2.1.3 - CSRF While Sending the Invites8.1 High
- pimax play, pitool +1 moreMultiple Pimax products accept WebSocket connections from unintended endpoints. If this...9.8 Critical
- zexelon zwx-2000csw2-hn firmware, zexelon co., ltd. zwx-2000csw2-hn +1 moreIncorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware...8.0 High
- zexelon zwx-2000csw2-hn firmware, zexelon co., ltd. zwx-2000csw2-hn +1 moreZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may...8.8 High
- rocket.chatRocket.Chat Server-Side Request Forgery (SSRF) vulnerability8.6 High
- hamastar meetinghub paperless meetingsHamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password9.3 Critical
- hamastar meetinghub paperless meetingsHamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type9.3 Critical
- raisecom msg1200, msg2100e, msg2200 +5 more +7 moreRaisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injection5.3 Medium
- raisecom msg1200, msg2100e, msg2200 +5 more +7 moreRaisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injection5.3 Medium
- Show moreLoading…