CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- xpdfInteger overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates2.1 Low
- itsourcecode online food ordering systemitsourcecode Online Food Ordering System addcategory.php sql injection6.9 Medium
- xpdfStack overflow in Xpdf 4.05 due to object loop in PDF pattern2.1 Low
- cordea oauthoauth CSRF vulnerability6.5 Medium
- cordea oauthOAuth library for nim allows insecure generation of state values by generateState - entropy too low and uses regular PRNG instead of CSPRNG6.5 Medium
- ecma international ecma262JavaScript specification issue may lead to type confusion and pointer dereference in implementations8.6 High
- elabftwIn eLabFTW, if administrators can create users, users can too5.4 Medium
- guillaumepotier gettext.jsgettext.js vulnerable to cross-site scripting (XSS)7.2 High
- ibm qradar network packet captureIBM QRadar Network Packet Capture information disclosure5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server denial of service6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.9 Medium
- nissan altima, nissan-global blind spot detection sensor ecu firmware +1 moreUnauthorized access to ECU functionality5.3 Medium
- kingsoft wps office, wps office +1 moreArbitrary Code Execution in WPS Office9.3 Critical
- kingsoft wps office, wps office +1 moreArbitrary Code Execution in WPS Office9.3 Critical
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 upgrade_filter.asp upgrade_filter_asp command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow8.7 High
sqlxcrates.ioSQLx Binary Protocol Misinterpretation caused by Truncating or Overflowing CastsNo score- contrid newslettersNewsletters <= 4.9.9 - Unauthenticated Full Path Disclosure5.3 Medium
- wpmet elementskit, elementskit pro +1 moreElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure4.3 Medium
- wpmet elementskit, elementskit pro +1 moreElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting5.1 Medium
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting5.1 Medium
- directusDirectus 10.13.0 - Insecure object reference via PATH presets4.3 Medium
- directusDirectus 10.13.0 - DOM-Based cross-site scripting (XSS) via layout_options5.4 Medium
- prison management system project management system, sourcecodester prison management system +1 moreSourceCodester Prison Management System Profile Image insufficiently protected credentials6.9 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting5.3 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure5.5 Medium
- rems daily expenses monitoring appSourceCodester Daily Expenses Monitoring App delete-expense.php sql injection5.3 Medium
- inspireui mstore api – create native android & ios apps on the cloud, mstore api, mstore api create native android and ios apps on the cloud +2 moreMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover8.1 High
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation8.1 High
- f1logic insert php code snippetInsert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion5.8 Medium
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System view_itprofile.php sql injection5.3 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing6.9 Medium
- code-projects job portalcode-projects Job Portal logindbc.php sql injection6.9 Medium
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the modino parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareAn issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers...9.8 Critical
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- Show moreLoading…