CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreWordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 3dflipbook 3d flipbook, iberezansky 3d flipbook – pdf flipbook viewer, flipbook image gallery +1 moreWordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pickplugins comboblocksWordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- addonmaster post grid masterWordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- averta depicter sliderWordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- parcel panel parcelpanel, parcelpanel wordpress +1 moreWordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- blockspareWordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brainstorm force spectraWordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- siemens jt2go, teamcenter visualization +1 moreSiemens Teamcenter Visualization and JT2Go Out-of-bounds Read7.3 High
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- multivendorx wc marketplaceWordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp chill filrWordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pierre lebedel kodex posts likesWordPress Kodex Posts likes plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mediavine control panelWordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- yuri baranov yamaps for wordpressWordPress YaMaps for WordPress Plugin plugin <= 0.6.27 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themelooks enter addonsWordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jeroen sormani wp dashboard notesWordPress WP Dashboard Notes plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdeveloper betterdocsWordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bannersky bsk forms blacklistWordPress BSK Forms Blacklist plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- zoneminderZoneMinder Time-based SQL Injection9.8 Critical
- zoneminderXSS vulnerabilities in montagereview0.0 None
- zoneminderXSS vulnerability in filter view6.1 Medium
- weaver e-cologyWeaver e-cology Source Code ecology_dev.zip information disclosure6.9 Medium
- zoneminderZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php7.1 High
- firewalla box softwareFirewalla BTLE Authenticated Command Injection6.8 Medium
- firewalla box softwareFirewalla BTLE Weak Credentials7.1 High
- microsoft windows 10, windows 11, windows server 2016 +2 more +4 moreDenial of Service in CLFS.sys6.8 Medium
- snowflake streamlitStreamlit Path Traversal Security Vulnerability on Windows5.9 Medium
- theforeman foreman, red hat satellite 6 +1 moreForeman: command injection in "host init config" template via "install packages" field on foreman6.5 Medium
- apache mina sshdApache MINA SSHD: integrity check bypass5.9 Medium
- opentext directory servicesImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...6.3 Medium
- xwiki pro macros, xwikisas xwiki-pro-macros +1 morePro Macros Remote Code Execution via Viewpdf and similar macros10.0 Critical
- filament excel export, pxlrbt filament-excel, filament excel +2 moreFilament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint7.5 High
- fish-shop syntax-checkfish-shop/syntax-check Improper Neutralization of Delimiters4.8 Medium
- skyport skyportdComplete crash of host system due to calculateDirectorySize in skyportd7.5 High
- clastix kamajiKamaji's RBAC Roles for `etcd` are not disjunct8.1 High
- ggerganov llama.cppllama.cpp allows write-what-where in rpc_server::set_tensor10.0 Critical
- ggerganov llama.cppllama.cpp allows Arbitrary Address Read in rpc_server::get_tensor5.3 Medium
- ggerganov llama.cppllama.cpp global-buffer-overflow in ggml_type_size5.3 Medium
- steve-community steveSteVe is an open platform that implements different version of the OCPP protocol for Electric...6.1 Medium
- veribase order management, veribilim software veribase order management +1 moreRCE in Veribilim Software's Veribase Order Management10.0 Critical
- gunet open eclass platform, openeclass +1 moreOpen eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"9.8 Critical
- linux, linux kernel +1 moremm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines7.1 High
- axtonyao mdxMDx <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdx_list_item Shortcode6.4 Medium
- gst electronics inohom nova panel n7Authentication Bypass in GST Electronics' inohom Nova Panel N79.9 Critical
- fiware keyrockCommand Injection in Organisationname9.1 Critical
- fiware keyrockCommand Injection in Applicationname9.1 Critical
- fiware keyrockArbitrary User Activation6.3 Medium
- Show moreLoading…