CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
cupsOSS-FuzzUse-of-uninitialized-value in cups_fillNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scorejqOSS-FuzzUNKNOWN READ in jvp_object_freeNo scorelibssh2OSS-FuzzNull-dereference READ in _libssh2_packet_addNo scorerdkitOSS-FuzzBad-cast to RDKit::AtomRDKit::ROMol::initFromOtherNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scorepistacheOSS-FuzzUNKNOWN READ in Pistache::Http::Header::Expect::parseRawNo scorejqOSS-FuzzHeap-buffer-overflow in jv_parseNo scoregpsdOSS-FuzzUse-of-uninitialized-value in packet_parseNo scorelibpcapOSS-FuzzUse-of-uninitialized-value in pcapint_filter_with_aux_dataNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toStringNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::PcapFileWriterDevice::writePacketNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::NflogLayer::parseNextLayerNo scorepcapplusplusOSS-FuzzUNKNOWN READ in PointerVector.hNo scorematioOSS-FuzzHeap-buffer-overflow in H5HL__fl_deserializeNo scorelibrawOSS-FuzzIndex-out-of-bounds in AAHD::make_ahd_rb_hvNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorehdf5OSS-FuzzUNKNOWN READ in H5SL_searchNo scorecupsOSS-FuzzUse-of-uninitialized-value in _cupsStrAllocNo score- oretnom23 yoga class registration systemSourceCodester Yoga Class Registration System Add User Users.php improper authorization5.3 Medium
- pluck-cms pluckPluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute...9.8 Critical
- zzcmsAn arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS...4.9 Medium
- zzcmsA reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS...4.7 Medium
- zzcms, zzcms zzmcms +1 moreA stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at...5.4 Medium
- zzcmsA reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS...4.7 Medium
- vtiger crmVTiger CRM <= 8.1.0 does not correctly check user privileges. A low-privileged user can interact...8.3 High
- vtiger crmVTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement,...7.2 High
- silverpeasSilverpeas vulnerable to password complexity rule bypass9.8 Critical
- silverpeasAn issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service...6.5 Medium
- andreas gohr dokuwikiA Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin...5.4 Medium
- h3c gr-1100-p, gr1100-p firmware +1 moreH3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows...9.8 Critical
- h3c magic b1st firmwareH3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- h3c r3010 firmwareH3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow...9.8 Critical
- tenda ac9, ac9 firmware +1 moreA Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15...9.8 Critical
- octobercms octoberA stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower...5.4 Medium
- nixos calamares-nixos-extensionscalamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems7.8 High
- vim, neovim, netapp bootstrap os +2 moreVim heap-use-after-free in src/arglist.c:2074.5 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +18 more +20 moreD-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow8.7 High
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System fetch_it.php sql injection5.3 Medium
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System add_acc.php cross site scripting5.3 Medium
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System exportcs.php information disclosure6.9 Medium
- google androidIn shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible...7.8 High
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System export_it.php information disclosure6.9 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System check_user_name.php sql injection5.3 Medium
- angeljudesuarez billing systemitsourcecode Billing System addbill.php sql injection6.9 Medium
- ciliumCilium agent's race condition may lead to policy bypass for Host Firewall policy6.8 Medium
- ciliumCilium's Gateway API route matching order contradicts specification4.0 Medium
- xpdfUninitialized variable in Xpdf 4.05 due to invalid JPEG header2.1 Low
- matter-labs zkvyper, era-compiler-vyper +1 morezkvyper ignored loop range bounds7.5 High
- aveva historian, historian web server +1 moreSQL Injection vulnerability in AVEVA Historian Server8.5 High
- Show moreLoading…