CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform3.1 Low
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform3.7 Low
- sap se businessobjects business intelligence platform, sap business objects business intelligence platform +1 moreMultiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform4.3 Medium
- sap netweaver application server abapImproper Access Control in SAP Netweaver Application Server ABAP4.7 Medium
- sap se crm abap (insights management), sap crm abap insights management +1 moreServer-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)5.0 Medium
- sap commerce, commerce cloud, commerce hycom +2 moreInformation Disclosure Vulnerability in SAP Commerce5.3 Medium
- sap commerce backofficeCross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice5.4 Medium
- sap content server, web dispatcher, sap se netweaver application server (abap and java),sap web dispatcher and sap content server +2 more +4 moreMissing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server6.3 Medium
- sap shared service frameworkMultiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework4.3 Medium
- sap shared service frameworkMultiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework6.5 Medium
- sap commerce cloudInformation Disclosure Vulnerability in SAP Commerce Cloud7.4 High
- sap bex web java runtime export web serviceXML injection in SAP BEx Web Java Runtime Export Web Service8.2 High
- sap business intelligence platform, sap se businessobjects business intelligence platform, sap business objects business intelligence platform +2 moreMissing Authentication check in SAP BusinessObjects Business Intelligence Platform9.8 Critical
- wiselyhub js help desk, rabilal js help desk – ai-powered support & ticketing system +1 moreJS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution9.8 Critical
- gfazioli wp bannerize proWP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting4.0 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM Cloud Pak for Security session fixation4.7 Medium
- ocomon project ocomonOcoMon URL require_access_recovery.php cross site scripting6.9 Medium
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- tenda fh1206, fh1206 firmware +1 moreTenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow8.7 High
- totolink x5000r firmwareIn TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command...6.8 Medium
- totolink x5000r, x5000r firmware +1 moreIn TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command...8.8 High
- totolink x5000r firmwareIn TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command...8.8 High
- totolink x5000r firmwareIn TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command...8.8 High
- totolink x5000r firmwareIn TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command...7.8 High
- mitel 6900w series sip phone, 6970 conference unit, 6800 series sip phones +1 more +3 moreA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the...6.8 Medium
- d3dsecurity d8801 firmware, ezviz internet pt camera +1 moreAn issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to...9.8 Critical
- symphony-cms symphony cmssymphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for...4.8 Medium
- symphony-cms symphony cmsA Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to...5.4 Medium
- microsoft .net, .net 8.0, visual studio 2022 version 17.10 +3 more +5 more.NET and Visual Studio Information Disclosure Vulnerability6.5 Medium
- adacore ada web servicesAn issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the...7.4 High
- mitel mivoice mx-oneThe provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an...8.8 High
- theme-sphere smartmagWordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- wp2speed, wp2speed faster +1 moreWordPress WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin <= 1.0.1 - Sensitive Data Exposure vulnerability5.3 Medium
- soliloquy team slider by soliloquyWordPress Slider by Soliloquy plugin <= 2.7.6 - Broken Access Control to XSS vulnerability5.9 Medium
- techeshta card elements for elementorWordPress Card Elements for Elementor plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- iqonic design graphinaWordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dotcamp wp table builder, wp table builder – wordpress table plugin, wptb wp table builder – wordpress table plugin +2 moreWordPress WP Table Builder plugin <= 1.4.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sender – newsletter, sms and email marketing automation for woocommerceWordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability7.1 High
- omardabbas products, order & customers export for woocommerceWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fujian mwcmsFujian mwcms uploadfile.html uploadimage unrestricted upload5.1 Medium
- fujian mwcmsFujian mwcms Image Upload uploadeditor.html uploadeditor unrestricted upload5.1 Medium
- antoine hurkmans football poolWordPress Football Pool plugin <= 2.11.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themify shortcodes, themifyme themify shortcodes +1 moreWordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wapppress team wapppressWordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- antoine hurkmans football pool, football pool wordpress +1 moreWordPress Football Pool plugin <= 2.11.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- merkulove selection liteWordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins streamcastWordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- creativemindssolutions cm tooltip glossaryWordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xpro elementor addons, wpxpro xpro addons for elementor +1 moreWordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…