CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- rems daily calories monitoring toolSourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete...9.8 Critical
- axiosServer-Side Request Forgery in axios7.5 High
- izatop buntPrototype pollution in izatop bunt9.8 Critical
- vercot servaA NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service ...7.5 High
- sonos firmwareIn certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability...6.0 Medium
- sonos s2In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless...7.8 High
- elastic agentElastic Agent Insertion of Sensitive Information into Log File6.5 Medium
- edimax ic-5150w, ic-6220dc, ic-5150w firmware +1 more +3 moreEdimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection5.1 Medium
- tenda fh1206, fh1206 firmware +1 moreTenda FH1206 fromSafeUrlFilter stack-based overflow8.7 High
- tenda fh1206, fh1206 firmware +1 moreTenda FH1206 qossetting fromqossetting stack-based overflow8.7 High
- n-able ecosystem agentEcosystem Agent Insufficient Transport Layer Security3.8 Low
- tenda fh1206, fh1206 firmware +1 moreTenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow8.7 High
- redhat openshift ai, red hat openshift data science (rhods), rhoai-2.14-rhel-8 +1 more +3 moreOdh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Spoofing Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge (HTML-based) Memory Corruption Vulnerability8.4 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unbound4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unbound2.8 Low
- ffmpegFFmpeg swresample.c fill_audiodata heap-based overflow6.9 Medium
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Forced Browsing6.1 Medium
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Stack-based Buffer Overflow10.0 Critical
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Improper Check or Handling of Exceptional Conditions9.4 Critical
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Command Injection9.4 Critical
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Path Traversal8.7 High
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Improper Access Control8.8 High
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Use of Hard-coded Credentials8.7 High
- dorsett controls infoscanDorsett Controls InfoScan Path Traversal6.9 Medium
- dorsett controls infoscanDorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor6.9 Medium
- dorsett controls infoscanDorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor6.9 Medium
- nvidia mellanox os, metrox-2, metrox-3 xc +5 more +7 moreNVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP...4.2 Medium
- nvidia mellanox os, metrox-2, metrox-3 xc +10 more +12 moreNVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter,...7.5 High
- nvidia gpu display driver, cloud gaming, gpu display driver, vgpu software, cloud gaming +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...7.8 High
- vrcx-team vrcxVR Overlay RCE9.1 Critical
github.com/CosmWasm/wasmdGoCosmWasm wasmd has large address count in ValidateBasic6.3 Medium- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9.0.0 through 9.3.2 and below 8.5.18 - Stored XSS in getAttributeSetName()4.6 Medium
- asterisk, asterisk certified asterisk +1 moreAsterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan7.4 High
- nvidia jetson linux, jetson agx xavier, jetson nano +5 more +7 moreNVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU...8.7 High
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can...3.3 Low
- avaya aura system managerImproper access control in Avaya Aura System Manager4.2 Medium
- avaya aura system managerAvaya Aura System Manager SQL injection vulnerability6.5 Medium
- microchip advanced software frameworkRemote Code Execution in Advanced Software Framework DHCP server9.5 Critical
- shopwareShopware vulnerable to blind SQL-injection in DAL aggregations7.3 High
- shopwareShopware vulnerable to Server Side Template Injection in Twig using Context functions8.3 High
- shopwareShopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag8.3 High
- shopwareShopware vulnerable to Improper Access Control with ManyToMany associations in store-api5.3 Medium
- jupyter jupyterhubJupyterHub has a privilege escalation vulnerability with the `admin:users` scope7.2 High
- postgresqlPostgreSQL relation replacement during pg_dump executes arbitrary SQL8.8 High
- kaon group ar2140, kaongroup ar2140 firmware +1 moreCommand injection in KAON AR2140 routers10.0 Critical
cosmwasm-vmcrates.io,github.com/CosmWasm/wasmvmGo,github.com/CosmWasm/wasmvm/v2Go +2 moreGas mispricing in cosmwasm-vm5.3 Medium- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- Show moreLoading…