CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- floraison fugitfugit parse and parse_nat stall on lengthy input5.3 Medium
- truffle security co. trufflehogTruffleHog has a Blind SSRF in some Detectors3.4 Low
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 moreCrafted projects can overwrite special files in the .osc config directory5.5 Medium
- open-xchange gmbh ox app suiteModule savepoints could be abused to inject references to malicious code delivered through the...5.4 Medium
- unknown chatbot with chatgpt wordpress, webdigit chatbot with chatgpt +1 moreSmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS6.1 Medium
- ai engine project engine, jordy meow ai engine +1 moreAI Engine < 2.5.1 - Admin+ RCE7.2 High
- geo my wp my wp, geomywp geo my wordpress, unknown geo my wp +2 moreGEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI9.8 Critical
- anhui deshun intelligent technology jieshun jielink+ jsotc2016, jielink\+ jsotc2016 project jsotc2016, jieshun-tech jielink\+ +2 moreAnhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control5.3 Medium
ghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo score- anhui deshun intelligent technology jieshun jielink+ jsotc2016, jielink\+ jsotc2016 project jsotc2016, anhui deshun intelligent technology jieshun jielink plus jsotc2016 +2 moreAnhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces access control5.3 Medium
- anhui deshun intelligent technology jieshun jielink+ jsotc2016, jielink\+ jsotc2016 project jsotc2016, anhui deshun intelligent technology jieshun jielink\+ +2 moreAnhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control6.9 Medium
- hex-rays ida proida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps...7.5 High
- microcksMicrocks's POST /api/import and POST /api/export endpoints allow non-administrator access9.8 Critical
- rust-bitcoin miniscriptMiniscript allows stack consumption7.5 High
- frrouting, redhat enterprise linux +1 moreAn issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does...7.5 High
- pi-holePi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the...7.5 High
- alibaba t-head xuantie c910, t-head xuantie c920 +1 moreThe T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON...8.4 High
- tp-link re365, re365 firmware +1 moreIn the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of...9.8 Critical
- trendnet tew-752dru firmwareIn TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of...9.8 Critical
- dlink dir-860l firmwareIn D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length...9.8 Critical
- nepstech ntpl-xpon1gfevn firmwareAn issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain...9.8 Critical
- nepstech ntpl-xpon1gfevn firmwareAn issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain...7.5 High
- linksys e1500 firmwareA Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in...8.8 High
- typecho, typecho cms +1 moreTypecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting...6.5 Medium
- typechoTypecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows...5.3 Medium
- heytap internet browserThe ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a...6.1 Medium
- douco douphpDouPHP Favicon system.php unrestricted upload5.1 Medium
- itsourcecode insurance management system, nafisulbari life insurance management system +1 morenafisulbari/itsourcecode Insurance Management System Add Nominee Page addNominee.php cross site scripting5.3 Medium
- oretnom23 yoga class registration systemSourceCodester Yoga Class Registration System SystemSettings.php cross site scripting5.3 Medium
- angeljudesuarez billing systemitsourcecode Billing System addclient1.php sql injection6.9 Medium
- automattic sensei lms, sensei pro (wc paid courses), sensei pro +2 moreWordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability5.3 Medium
- ayecode geodirectoryWordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability8.5 High
- valiano unite gallery liteWordPress Unite Gallery Lite plugin <= 1.7.62 - SQL Injection vulnerability8.5 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability7.6 High
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreWordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability8.5 High
- masteriyo, masteriyo - lms +1 moreWordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability4.3 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- checkout plugins stripe payments for woocommerce by checkout, checkoutplugins stripe payments for woocommerce +1 moreWordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System assets exposure of information through directory listing6.9 Medium
- propovoice crmWordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- azzaroco ultimate membership proWordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- favethemes houzezWordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- creativeon whmpressWordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- priyanshumittal busiprofWordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- visual composer starterWordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- qamar sheeraz, nasir ahmad, genialsouls mega addons for elementorWordPress Mega Addons For Elementor plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- phi phan meta field blockWordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tribulant newslettersWordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…