CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible for a web extension with minimal permissions to create a `StreamFilter` which...8.1 High
- mozilla firefox, firefox esr +1 moreFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreEditor code failed to check an attribute value. This could have led to an out-of-bounds read....8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInsufficient checks when processing graphics shared memory could have led to memory corruption....9.6 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreSelect options could obscure the fullscreen notification dialog. This could be used by a...6.5 Medium
- juzaweb cmsjuzaweb CMS Theme Editor default path traversal5.1 Medium
- janobe chool event management system, school attendance monitoring system, school attendence monitoring system +1 more +3 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +4 more +6 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 more +4 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +3 more +5 moreSQL injection in Janobe products9.8 Critical
- janobe credit card, debit card payment, paypal +2 moreCross-site Scripting in Janobe products7.1 High
- janobe credit card, debit card payment, paypal +2 moreCross-site Scripting in Janobe products7.1 High
- janobe credit card, debit card payment, paypal +2 moreCross-site Scripting in Janobe products7.1 High
- janobe e-negosyo system, enegosyo system, young entrepreneur e-negosyo system +2 moreSQL injection in Janobe E-Negosyo System9.8 Critical
- janobe e-negosyo system, enegosyo system, young entrepreneur e-negosyo system +2 moreSQL injection in Janobe E-Negosyo System9.8 Critical
- janobe e-negosyo system, young entrepreneur e-negosyo system +1 moreCross-site Scripting in Janobe E-Negosyo System7.1 High
- galdub folders – unlimited folders to organize media library folder, pages, posts, file manager, premio folders +1 moreFolders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- janobe e-negosyo system, young entrepreneur e-negosyo system +1 moreCross-site Scripting in Janobe E-Negosyo System7.1 High
- janobe e-negosyo system, young entrepreneur e-negosyo system +1 moreCross-site Scripting in Janobe E-Negosyo System7.1 High
- janobe e-negosyo system, young entrepreneur e-negosyo system +1 moreCross-site Scripting in Janobe E-Negosyo System7.1 High
- google grpcHPACK table poisoning in gRPC C++, Python & Ruby6.3 Medium
ca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- ricoh company, ltd. javatm platformInitialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver...7.5 High
- halo service solutions haloitsmHaloITSM - Password Reset Poisoning8.3 High
- halo service solutions haloitsmHaloITSM - SAML XML Signature Wrapping (XSW)9.8 Critical
- ffmpegFFmpeg pnmdec.c pnm_decode_frame heap-based overflow6.9 Medium
- ajax search project search, unknown ajax search lite, wp-dreams ajax search +2 moreAjax Search Lite < 4.12.1 - Admin+ Stored XSS4.8 Medium
- magazine3 easy table of contentseasy-table-of-contents < 2.0.68 - Editor+ Stored XSS6.1 Medium
- getshortcodes shortcodes ultimate, shortcodes ultimate pro ultimate pro, unknown shortcodes-ultimate-pro +2 moreShortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS5.4 Medium
- iptanus wordpress file upload, wordpress file upload project file upload +1 moreWordPress File Upload < 4.24.8 - Reflected XSS6.1 Medium
- halo service solutions haloitsmHaloITSM - Emailing Template Injection5.3 Medium
- libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibtiff: null pointer dereference in tif_dirinfo.c7.5 High
- halo service solutions haloitsmHaloITSM - Stored Cross-Site Scripting in Tickets8.0 High
- wpbakery visual composer, page builder +1 moreWPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion8.8 High
- wpbakery page builderWPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreInsertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6,...6.5 Medium
- Show moreLoading…