CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- boaBoa has an uncaught exception when transitioning the state of `AsyncGenerator` objects7.5 High
- adobe commerce, magento +1 moreA user without ship permissions can ship the orders4.3 Medium
- adobe commerce, magento +1 moreStored XSS through Webhook module public key configuration7.6 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Authorization (CWE-285)5.4 Medium
- adobe commerce, magento +1 moreAn unauthorized user can export the Invoiced Sales Report4.3 Medium
- adobe commerce, magento +1 more[Paris] Path Traversal lead to local file read7.7 High
- adobe commerce, magento +1 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Medium
- adobe commerce, magento +1 moreAn unauthorized user can export the Shipping Report4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Authorization (CWE-285)4.3 Medium
- adobe commerce, magento +1 moreOTP 2FA can be bruteforced7.4 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.4 High
- adobe commerce, magento +1 moreAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)9.0 Critical
- adobe commerce, magento +1 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Authorization (CWE-285)4.3 Medium
- adobe commerce, magento +1 moreUnauthorized user can export Orders Sale Report4.3 Medium
- adobe commerce, magento +1 moreBeing able to import/export tax rates without proper privileges4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Authorization (CWE-285)4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.4 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.8 Medium
- adobe commerce, magento +1 moreA user without Shop Policy Parameters section privilege can alter the shop policy parameters section4.3 Medium
- adobe commerce, magento +1 moreDOM XSS through integrations can impact other admins8.1 High
- adobe commerce, magento +1 moreAn unauthorized user can export the Tax Sales Report4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Authorization (CWE-285)4.3 Medium
- codersaiful sheet to table live sync for google sheetSheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode6.4 Medium
- dell client platform bios, embedded box pc 5000 firmware, latitude 12 rugged extreme 7214 firmware +40 more +42 moreDell BIOS contains an Improper Input Validation vulnerability in an externally developed...5.8 Medium
- averta add image slider, carousel slider, coupon popup +5 more +7 moreSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- adobe substance3d - designer, substance 3d designer +1 moreAdobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability7.8 High
- adobe substance3d - sampler, substance 3d sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD file5.5 Medium
- adobe substance3d - sampler, substance 3d sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file5.5 Medium
- adobe substance3d - sampler, substance 3d sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file5.5 Medium
- adobe substance3d - sampler, substance 3d sampler +1 moreAdobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file5.5 Medium
- adobe incopyAdobe InCopy has an integer overflow vulnerability when parsing SVG file7.8 High
- secom dr.id attendance systemSECOM Dr.ID Attendance system - Unrestricted File Upload9.8 Critical
- secom dr.id access control system, dr.id access control +1 moreSECOM Dr.ID Access control system - SQL injection9.8 Critical
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()7.4 High
- pickplugins page builder comboblocks, post grid +1 moreGutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block6.4 Medium
- cayin technology cms-20, cms-60, cms-se +14 more +16 moreCAYIN Technology CMS - Sensitive File Download7.5 High
- cayin technology cms-se, cms-se(18.04), cms-se(22.04) +2 more +4 moreCAYIN Technology CMS - OS Command Injection7.2 High
- google android, mediatek mt6765, mt6768 +23 more +25 moreIn venc, there is a possible out of bounds write due to a missing bounds check. This could lead...9.8 Critical
- ivanti avalancheXXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to...8.2 High
- ivanti avalanchePath traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote...8.2 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote...7.5 High
- ivanti avalancheImproper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote...7.2 High
- ivanti avalancheAn off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote...7.5 High
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System check_medicine_name.php sql injection5.3 Medium
- clinics patient management system project patient management system, sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +2 moreSourceCodester Clinics Patient Management System user_images direct request6.9 Medium
- debian linux, flatpak +1 moreFlatpak may allow access to files outside sandbox for certain apps10.0 Critical
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreMirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may...6.7 Mediumintel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreProtection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may...6.9 Medium- Show moreLoading…