CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System setlogo.php unrestricted upload5.3 Medium
- itsourcecode bike delivery systemitsourcecode Bike Delivery System contact_us_action.php sql injection6.9 Medium
- dell alienware update, update, command update +1 more +3 moreDell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an...6.5 Medium
- calibreCalibre SQL Injection4.2 Medium
- calibreCalibre Reflected Cross-Site Scripting (XSS)5.4 Medium
- calibreCalibre Remote Code Execution9.8 Critical
- calibreCalibre Arbitrary File Read7.5 High
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload5.3 Medium
- gitea, gitea open source git server +1 moreInproper Sanitation of field leading to stored XSS10.0 Critical
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System flights.php sql injection5.3 Medium
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System Admin Login Page login.php login2 sql injection6.9 Medium
- hitachi tuning managerEL Injection Vulnerability in Hitachi Tuning Manager8.6 High
- hitachi device managerAn unquoted executable path exists in Hitachi Device Manager6.7 Medium
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System index.php file inclusion5.3 Medium
- kaizencoders traffic managerTraffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting7.2 High
- gopiplus horizontal scrolling announcements, horizontal scrolling announcement +1 moreHorizontal scrolling announcements <= 2.4 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- unitecms blox page builderBlox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- crmperks crm perks forms, crm perks forms – wordpress form builder, crmperks crm perks forms – wordpress form builder +2 moreCRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- angeljudesuarez airline reservation systemitsourcecode Airline Reservation System index.php file inclusion5.3 Medium
- itsourcecode laravel accounting systemitsourcecode Laravel Accounting System HomeController.php unrestricted upload5.3 Medium
- canonical ltd. wpa supplicantAn issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...8.8 High
- 1password1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC...7.8 High
- 1password1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by...4.7 Medium
- dlink dir-300 firmwareD-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.9.8 Critical
- phpgurukul tourism management systemA reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0...6.1 Medium
- appleboy gorushGorush uses deprecated TLS versions9.1 Critical
- automationanywhere automation 360A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows...7.8 High
- microweberMicroweber Reflected Cross-site scripting (XSS) vulnerability6.1 Medium
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 moreAn issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4...5.3 Medium
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +26 more +28 moreGL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000...9.8 Critical
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +46 more +48 moreGL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000...9.8 Critical
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 moreGL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000...9.8 Critical
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 moreGL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000...9.8 Critical
- k7computing k7 ultimate securityK7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of...5.5 Medium
- hms-networks ewon cosy\+ firmware, ewon cosy firmware +1 moreA compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request...9.1 Critical
- privxPrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed...9.1 Critical
- kohaCross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to...9.6 Critical
- kohaAn issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a...7.2 High
- devlop.systems id4portaisID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response,...6.1 Medium
- ofonooFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability7.0 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability7.8 High
- ofonooFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- ofonooFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- ofonooFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- ofonooFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability7.8 High
- ofonooFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability7.8 High
- ofonooFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- Show moreLoading…