CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab6.8 Medium
- gitlabUncontrolled Resource Consumption in GitLab4.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLab5.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab4.4 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab4.9 Medium
- gitlabUncontrolled Resource Consumption in GitLab4.3 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabAuthentication Bypass by Primary Weakness in GitLab4.2 Medium
- gitlabImproper Encoding or Escaping of Output in GitLab5.7 Medium
- huawei emui, harmonyos +1 moreVulnerability of PIN enhancement failures in the screen lock module Impact: Successful...8.8 High
- huawei emui, harmonyos +1 moreVulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of...9.3 Critical
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the Notepad module Impact: Successful...2.5 Low
- huawei emui, harmonyos +1 morePermission control vulnerability in the App Multiplier module Impact:Successful exploitation of...8.4 High
- huawei emui, harmonyos +1 moreLaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this...6.6 Medium
- huawei emui, harmonyos +1 moreAccess control vulnerability in the security verification module mpact: Successful exploitation...6.9 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the Contacts module Impact: Successful...4.4 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the Settings module. Impact: Successful...7.5 High
- linux, linux kernel +1 moreext4: use memtostr_pad() for s_volume_name7.8 High
- linux, linux kernel +1 morecifs: Fix server re-repick on subrequest retry7.5 High
- linux, linux kernel +1 moretpm: Use auth only after NULL check in tpm_buf_check_hmac_response()5.5 Medium
- linux, linux kernel +1 moreio_uring: fix error pbuf checking5.5 Medium
- linux, linux kernel +1 moregpio: pca953x: fix pca953x_irq_bus_sync_unlock race7.8 High
- linux, linux kernel +1 moreclosures: Change BUG_ON() to WARN_ON()5.5 Medium
- linux, linux kernel +1 moremm: page_ref: remove folio_try_get_rcu()5.5 Medium
- huawei emui, harmonyos +1 moreAccess permission verification vulnerability in the content sharing pop-up module Impact:...6.2 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in the lock screen module Impact: Successful exploitation...4.0 Medium
- zte zxv10 xt802, zxv10 et301, zxv10 et301 firmware +1 more +3 morePermission and Access Control Vulnerability in ZXV10 XT802/ET3017.1 High
- kadencewp gutenberg blocks with ai, unknown gutenberg blocks with ai by kadence wp +1 moreGutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS5.4 Medium
- search & filter pro, unknown search & filter pro, codeamp search \& filter +1 more +3 moreSearch Filter Pro < 2.5.18 - Admin+ Stored XSS4.8 Medium
- 10web slider, slider by 10web – responsive image slider +1 moreSlider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter8.8 High
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update4.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter8.8 High
- daniyalahmedk fuse social floating sidebarFuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload6.4 Medium
- fooplugins lightbox & modal popup wordpress plugin – foobox, themergency foobox +1 moreLightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes6.4 Medium
- faboba falang, falang multilanguage for wordpress +1 moreFalang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure5.4 Medium
- themebeez orchid storeOrchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation4.3 Medium
- ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 moreBooking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure5.3 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery4.3 Medium
- mainwp child reports, child +1 moreMainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update8.8 High
- reputeinfosystems appointment booking calendar plugin and scheduling plugin – bookingpress, appointment booking calendar plugin and scheduling plugin bookingpress +1 moreAppointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Update Stack Elevation of Privilege Vulnerability7.3 High
- microsoft windows server 2016, windows 10 1507, windows 10 version 1507 +23 more +25 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability6.7 Medium
- buywptemplates multipurposeMultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection8.8 High
- codename065 news flash, newsflash +1 moreNews Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection7.2 High
- shahriar0822 the nextThe Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection8.8 High
ghostscriptOSS-FuzzNegative-size-param in pdf_resize_resource_arraysNo score- typoraTypora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- typoraTypora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- kashipara responsive school management systemA SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School...5.3 Medium
- Show moreLoading…