CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- microsoft windows 10 version 1607, windows server 2016, windows server 2016 (server core installation) +1 more +3 moreWindows Network Virtualization Remote Code Execution Vulnerability9.1 Critical
- microsoft windows 10 version 1607, windows server 2016, windows server 2016 (server core installation) +1 more +3 moreWindows Network Virtualization Remote Code Execution Vulnerability9.1 Critical
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreWindows Bluetooth Driver Information Disclosure Vulnerability4.4 Medium
- microsoft azure stack hubAzure Stack Hub Spoofing Vulnerability9.3 Critical
- amd uprof, μprof tool +1 moreImproper input validation in AMD μProf could allow an attacker to perform a write to an invalid...3.3 Low
- amd uprof, μprof tool +1 moreIncorrect default permissions in the AMD μProf installation directory could allow an attacker to...7.3 High
- amd uprof, uprof tool, μprof tool +2 moreA DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege...7.3 High
- amd uprof, μprof tool +1 moreInsufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow...7.3 High
- amd trusted firmware-a, zynq™ ultrascale+™ mpsoc/rfsoc +1 moreImproper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC...4.8 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access...5.7 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc™ embedded 7003 +1 more +3 moreIncomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt...4.4 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in Power Management Firmware (PMFW) may allow an attacker with...5.0 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards, radeon software +2 moreImproper validation of array index in Power Management Firmware (PMFW) may allow a privileged...2.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in SMU may allow an attacker with privileges and a compromised physical...2.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreGeneration of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware)...1.9 Low
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 moreImproper re-initialization of IOMMU during the DRTM event may permit an untrusted platform...6.5 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 moreIOMMU improperly handles certain special address ranges with invalid device table entries (DTEs),...5.3 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and...7.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...1.9 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreAn insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize...3.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreA hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key,...1.9 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards, radeon software +2 moreAn insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an...4.7 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ pro w7000 series graphics cards, radeon™ rx 6000 series graphics cards +1 more +3 moreAn insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA...5.2 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...7.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzentm embedded r1000 +23 more +25 moreImproper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write...7.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged attacker with access to the BIOS...3.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...5.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a privileged attacker with access to AMD...3.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro w6000 series graphics cards +48 more +50 moreA malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow...5.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow...7.2 High
- aveva reports for operations 2023, ocean data systems dream report 2023 +1 moreIncorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report8.5 High
- aveva reports for operations, reports for operations 2023, ocean data systems dream report 2023 +2 morePath Traversal in Ocean Data Systems Dream Report8.5 High
- aveva suitelink server, application server, batch management +3 more +5 moreAllocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server8.7 High
- fortinet fortianalyzer, fortimanager +1 moreA unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2...5.5 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and...3.5 Low
- fortinet fortiddos, fortiddos-f +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...5.9 Medium
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through...4.7 Medium
- fortinet fortisoarAn improper neutralization of input during web page generation ('cross-site scripting') in...6.4 Medium
- traccar server, traccar +1 moreUse of default credentials at Traccar fleet management solution9.5 Critical
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreBackup files may be downloaded by underprivileged users in MongoDB Enterprise Server5.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +6 more +8 morePhoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password8.6 High
- pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 morePepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS7.1 High
- pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 morePepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection6.1 Medium
- pepperl+fuchs icdm-rx/en-2db9/rj45-din, icdm-rx/en-2st/rj45-din, icdm-rx/en-4db9/2rj45-din +49 more +51 morePepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS7.1 High
- phoenix contact charx sec-3000 (1139022), charx sec-3050 (1139018), charx sec-3100 (1139012) +9 more +11 morePhoenix Contact: Start sequence allows attack during the boot process5.9 Medium
- rashid87 wpsectionWordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability6.5 Medium
- berqier berqwpWordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- wofficeio wofficeWordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- roland barker, xnau webdesign participants databaseWordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability9.8 Critical
- g5plus ultimate bootstrap elements for elementorWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…