CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- limesurveyLimeSurvey File Upload index.php denial of service5.1 Medium
- linux, linux kernel +1 moredrm/client: Fix error code in drm_client_buffer_vmap_local()7.8 High
- linux, linux kernel +1 moreRevert "ALSA: firewire-lib: operate for period elapse event in process context"5.5 Medium
- linux, linux kernel +1 moref2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresched: act_ct: take care of padding in struct zones_ht_key7.8 High
- linux, linux kernel +1 morenet/iucv: fix use after free in iucv_sock_close()7.8 High
- linux, linux kernel +1 morenetfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().5.5 Medium
- linux, linux kernel +1 morenetfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix missing lock on sync reset reload5.5 Medium
- linux, linux kernel +1 moreriscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()5.5 Medium
- linux, linux kernel +1 morebtrfs: make cow_file_range_inline() honor locked_page on error7.8 High
- linux, linux kernel +1 moredrm/v3d: Prevent out of bounds access in performance query extensions7.8 High
- linux, linux kernel +1 moredrm/v3d: Fix potential memory leak in the timestamp extension5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Fix potential memory leak in the performance extension5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Validate passed in drm syncobj handles in the timestamp extension5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Validate passed in drm syncobj handles in the performance extension5.5 Medium
- inpsyde backwpup, wp media backwpup – wordpress backup & restore plugin +1 moreBackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal6.8 Medium
- bricks builder bricksBricks <= 1.8.1 - Cross-Site Request Forgery via save_settings4.3 Medium
- bricks builder bricksBricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings5.4 Medium
- 2j-slideshow slideshow, image slider by 2jSlideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'6.1 Medium
- softlab radio player, princeahmed radio player – live shoutcast, icecast and any audio stream player +1 moreRadio Player <= 2.0.73 - Missing Authorization to Player Update5.3 Medium
- kaizencoders short urlShort URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page4.7 Medium
- binhnguyenplus ladiapp, ladiapp: landing page, popupx, marketing automation, affiliate marketing… +1 moreLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpoint5.3 Medium
- zvijerka admission appmanagerAdmission AppManager <= 1.0.0 - Reflected Cross-Site Scripting6.1 Medium
- softlab radio player, princeahmed radio player – live shoutcast, icecast and any audio stream player +1 moreRadio Player <= 2.0.73 - Missing Authorization to Player Deletion5.3 Medium
- krut1 login and registration attempts limitLOGIN AND REGISTRATION ATTEMPTS LIMIT<= 2.1 - IP Address Spoofing to Protection Mechanism Bypass6.5 Medium
- softlab radio player, princeahmed radio player – live shoutcast, icecast and any audio stream player +1 moreRadio Player <= 2.0.73 - Missing Authorization to Settings Update5.3 Medium
- thiago s.f. skitter slideshowSkitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery7.2 High
- news element elementor blog magazine wordpress plugin, unknown news element elementor blog magazine, webangon news element +2 moreNews Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI9.8 Critical
- inspirelabs inpost for woocommerce, inpost pl +1 moreInPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete10.0 Critical
gpacOSS-FuzzStack-buffer-overflow in gf_hevc_parse_nalu_bsNo score- scooter software beyond compareScooter Software Beyond Compare 7zxa.dll uncontrolled search path8.5 High
- jackmacwindows craftos-pc 2, mcjack123 craftos2 +1 moreCraftOS-PC 2's improperly sanitizied paths cause filesystem escape (Windows)8.2 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.8 Medium
- ibm security directory integrator, security verify directory integrator +1 moreIBM Directory Server buffer overflow7.3 High
- kubernetes ingress-nginxA security issue was discovered in ingress-nginx where an actor with permission to create Ingress...8.8 High
- ptc kepware thingworx kepware server, ge igs, ptc kepware kepserverex +1 more +3 morePTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling5.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin3.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page4.6 Medium
- renginereNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record Poisoning5.0 Medium
- ciliumCilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API5.4 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo accessories and display manager, display control center +1 moreAn insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo...7.8 High
- Show moreLoading…