CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System User Page users.php cross-site request forgery6.9 Medium
- rems leads manager toolSourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting5.3 Medium
- rems leads manager toolSourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System activate_act.php sql injection5.3 Medium
- apache answerApache Answer: The link for resetting user password is not Single-Use5.3 Medium
- apache answerApache Answer: The link to reset the user's password will remain valid after sending a new link5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System deactivate_act.php sql injection5.3 Medium
- apache dolphinschedulerApache DolphinScheduler: Resource File Read And Write Vulnerability8.1 High
- apache dolphinschedulerApache DolphinScheduler: RCE by arbitrary js execution8.8 High
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System delete_register.php sql injection5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System delete_act.php sql injection5.3 Medium
ca-certificates-mozillaopenSUSE,ca-certificates-mozilla-prebuiltopenSUSE +1 moreSecurity update for ca-certificates-mozillaNo score- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injection5.3 Medium
- code-projects online pollingcode-projects Online Polling Registration registeracc.php sql injection6.9 Medium
- code-projects simple ticket bookingcode-projects Simple Ticket Booking Login authenticate.php sql injection6.9 Medium
- code-projects simple ticket bookingcode-projects Simple Ticket Booking Registration register_insert.php sql injection6.9 Medium
- zabbixZabbix Arbitrary File Read2.7 Low
- airveda air quality monitor pm2.5 pm10, pm2.5 pm10 monitor firmware +1 moreInformation Disclosure Vulnerability in Airveda Air Quality Monitor8.6 High
- zabbixRemote code execution within ping script9.9 Critical
- zabbixSystem Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission4.3 Medium
- zabbixAllocation of resources without limits or throttling (uncontrolled resource consumption)7.5 High
- zabbixDirect access to memory pointers within the JS engine for modification9.1 Critical
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure5.3 Medium
- esthertyler my custom css php & ads, my custom css php \& ads +1 moreMy Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code reveal template, reveal template wordpress +1 moreReveal Template <= 3.7 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code no update nagNo Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure5.3 Medium
- edgarrojas pdf builder for wpformsPDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code obfuscate emailObfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure5.3 Medium
- coffee2code linkify text, linkify-text +1 moreLinkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure5.3 Medium
- zabbixFront-end audit log shows passwords in plaintext8.1 High
- zabbixAT(GSM) Command Injection3.0 Low
- zabbixZabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe6.1 Medium
- tiptoppress category posts, term-and-category-based-posts, unknown category posts widget +2 more +4 moreCategory Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS4.8 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 moreWP eStore < 8.5.6 - Settings Reset via CSRF5.4 Medium
- tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 moreWP eStore < 8.5.6 - Reflected XSS in Customer Search6.5 Medium
- samsung magicinfo 9 serverImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9...8.8 High
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag6.4 Medium
- nvidia cv-cudaNVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python...6.1 Medium
- nvidia mellanox os, metrox-3 xc, onyx +9 more +11 moreNVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support,...7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.3.3 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS Stored XSS in Board instances4.6 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Access Control in mintplex-labs/anything-llm9.1 Critical
- productinfoquickAn arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows...9.8 Critical
- c5pider havocAn Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7...9.8 Critical
- amttgroup hibos, hotel broadband operation system +1 moreAMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL...9.8 Critical
- oretnom23 computer laboratory management systemIncorrect access control in the delete_category function of Sourcecodester Computer Laboratory...6.5 Medium
- jayesh online exam systemA Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in...9.8 Critical
- jayesh online exam systemA SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0...8.1 High
- jayesh online exam systemA Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in...5.4 Medium
- Show moreLoading…