CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- arubanetworks instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI Protocol5.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10, hp instantos +1 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI Protocol5.3 Medium
- qwikCross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik6.3 Medium
- michaelrsweet pdfioLoop with Unreachable Exit Condition ('Infinite Loop') in pdfio6.2 Medium
- delta electronics diascreenDelta Electronics DIAScreen Stack-Based Buffer Overflow8.5 High
- mozilla firefox for ios, firefox mobile +1 moreLong pressing on a download link could potentially allow Javascript commands to be executed...6.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreThe contextual menu for links could provide an opportunity for cross-site scripting attacks This...6.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreLong pressing on a download link could potentially provide a means for cross-site scripting This...6.1 Medium
- logsign unified secops platformLogsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability4.3 Medium
- zscaler client connectorSignature validation error in DLL allows disabling anti-tampering protection5.7 Medium
- zscaler client connectorLocal Privilege Escalation via lack of input validation7.0 High
- zscaler client connectorIncorrect signature validation of package6.4 Medium
- dmytropopov light pollLight Poll <= 1.0.0 - Poll Answers Deletion via CSRF8.8 High
- zscaler client connectorZscaler bypass with administrative privileges on Windows7.2 High
- zscaler client connectorLocal Privilege Escalation on Zscaler Client Connector on Windows7.3 High
- zscaler client connectorSignature validation issue leads to Anti-Tampering bypass7.8 High
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.3 Medium
- datagearDataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection5.3 Medium
- matrix matrix-react-sdkURL preview setting for a room is controllable by the homeserver in matrix-react-sdk7.7 High
- hp poly clariti managerA vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager...5.4 Medium
- hp poly clariti managerA vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager...6.1 Medium
- hp poly clariti managerClariti Manager – Arbitrary File Upload8.8 High
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- opentext arcsight intelligenceInsecure Direct Object Reference vulnerability6.3 Medium
- opentext arcsight intelligencePrivilege escalation vulnerability6.4 Medium
- opentext arcsight intelligenceIncorrect Authorization vulnerability6.3 Medium
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- janobe school event management systemCross-Site Scripting (XSS) vulnerability in Janobe School Event Management System7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- janobe school attendance monitoring system, school event management system, school attendence monitoring system +2 moreCross-Site Scripting (XSS) vulnerability in Janobe products7.1 High
- djangoproject djangoDjango SQL injection vulnerability7.3 High
- djangoproject djangoDjango vulnerable to denial-of-service attack7.5 High
- djangoproject djangoDjango vulnerable to a denial-of-service attack7.5 High
- djangoproject djangoDjango memory consumption vulnerability7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory...7.5 High
- mozilla firefoxIncorrect garbage collection interaction could have led to a use-after-free. This vulnerability...8.8 High
- mozilla firefox, firefox esr +1 moreCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe date picker could partially obscure security prompts. This could be used by a malicious site...6.5 Medium
- mozilla firefox, firefox mobile +1 moreA select option could partially obscure security prompts. This could be used by a malicious site...8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUnexpected marking work at the start of sweeping could have led to a use-after-free. This...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could...6.5 Medium
- Show moreLoading…