CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- linux, linux kernel +1 morex86/bhi: Avoid warning in #DB handler due to BHI mitigation5.5 Medium
- linux, linux kernel +1 morebpf: Fail bpf_timer_cancel when callback is being cancelled5.5 Medium
- linux, linux kernel +1 morefirmware: cs_dsp: Return error if block header overflows file5.5 Medium
- linux, linux kernel +1 morefirmware: cs_dsp: Validate payload length before processing block5.5 Medium
- linux, linux kernel +1 moreusb: gadget: configfs: Prevent OOB read/write in usb_string_copy()7.8 High
- linux, linux kernel +1 mores390/mm: Add NULL pointer check to crst_table_free() base_crst_free()7.8 High
- linux, linux kernel +1 moremm: fix crashes from deferred split racing folio migration7.8 High
- linux, linux kernel +1 morefilemap: replace pte_offset_map() with pte_offset_map_nolock()7.8 High
- linux, linux kernel +1 morelibceph: fix race between delayed_work() and ceph_monc_stop()9.8 Critical
- tenda a301, a301 firmware +1 moreTenda A301 WifiBasicSet formWifiBasicSet stack-based overflow8.7 High
- alien technology alr-f800, alientechnology alr-f800 firmware +1 moreAlien Technology ALR-F800 system.html os command injection5.3 Medium
- alien technology alr-f800, alientechnology alr-f800 firmware +1 moreAlien Technology ALR-F800 File Name upgrade.cgi popen os command injection5.3 Medium
- jenkinsJenkins does not perform a permission check in an HTTP endpoint6.3 Medium
- jenkinsJenkins Remoting library arbitrary file read vulnerability8.8 High
- alien technology alr-f800, alientechnology alr-f800 firmware +1 moreAlien Technology ALR-F800 cmd.php improper authorization6.9 Medium
- wpdevart organization chartOrganization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters4.9 Medium
- mra13 accept stripe payments, tipsandtricks-hq accept stripe +1 moreAccept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode5.4 Medium
- webnus modern events calendar, modern events calendar lite +1 moreModern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery8.5 High
- nask ezd rpInternal infrastructure data leak in EZD RP7.1 High
- nask ezd rpUsers listing in EZD RP7.1 High
- nask ezd rpPrivilege Escalation in EZD RP8.7 High
- mongodb c driver, mongodb, mongodb php driver +2 more +4 moreAccessing Untrusted Directory May Allow Local Privilege Escalation7.3 High
- apache cloudstackApache CloudStack: User Key Exposure to Domain Admins7.2 High
- apache cloudstackApache CloudStack: Unauthorised Network List Access4.3 Medium
- iptanus wordpress file upload, wordpress file upload project file upload +1 moreWordPress File Upload < 4.24.8 - Unauthenticated Stored XSS6.1 Medium
- shawon786 house managerHouse Manager <= 1.0.8.4 - Reflected XSS4.8 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...9.8 Critical
- ivanti docs@work, docs\@work +1 moreIvanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The...5.0 Medium
- ivanti epmm, endpoint manager mobile +1 moreInsufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote...8.2 High
- ivanti epmm, endpoint manager mobile +1 moreAn insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...8.8 High
- ivanti epmm, endpoint manager mobile +1 moreAn improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a...5.3 Medium
- samsung emailUse of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2...4.0 Medium
- samsung notesOut-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows...4.0 Medium
- samsung notesOut-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62...4.0 Medium
- samsung notesOut-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows...4.0 Medium
- samsung notesOut-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local...4.0 Medium
- samsung notesOut-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21...5.5 Medium
- samsung notesOut-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4...5.5 Medium
- samsung notesOut-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62...5.5 Medium
- samsung notesOut-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62...5.5 Medium
- samsung notesOut-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows...5.5 Medium
- samsung notesOut-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62...7.8 High
- samsung notesOut-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows...7.8 High
- samsung notesOut-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local...8.4 High
- samsung android, samsung mobile devices +1 moreImproper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to...7.5 High
- samsung android, samsung mobile devices +1 moreImproper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers...4.0 Medium
- Show moreLoading…