CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of...8.8 High
- xenPCI device pass-through with shared resources7.5 High
- xenerror handling in x86 IOMMU identity mapping7.5 High
- newlib project newlibAn issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling...9.8 Critical
- itsourcecode project expense monitoring system, project expense monitoring system project expense monitoring system +1 moreitsourcecode Project Expense Monitoring System transferred_report.php sql injection5.3 Medium
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreDWF Vulnerability in Autodesk Desktop Software7.8 High
- itsourcecode project expense monitoring system, project expense monitoring system project expense monitoring system +1 moreitsourcecode Project Expense Monitoring System print.php sql injection5.3 Medium
- itsourcecode project expense monitoring system, project expense monitoring system project expense monitoring system +1 moreitsourcecode Project Expense Monitoring System execute.php sql injection5.3 Medium
- itsourcecode project expense monitoring system, project expense monitoring system project expense monitoring system +1 moreitsourcecode Project Expense Monitoring System Backend Login login1.php sql injection6.9 Medium
- zephyrproject zephyrBT:Classic: Multiple missing buf length checks7.6 High
- zephyrproject zephyrBT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero7.6 High
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System view_csprofile.php sql injection5.3 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System get_packings.php sql injection5.3 Medium
- oretnom23 simple forum websiteSourceCodester Simple Forum Website Signup Page registration.php cross site scripting6.9 Medium
- fastadminFastAdmin lang path traversal5.3 Medium
- zzcmsZZCMS class.php path traversal6.9 Medium
- zzcmsZZCMS about_edit.php path traversal6.9 Medium
- mycredWordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability9.8 Critical
- pluginops landing page builderWordPress Landing Page Builder plugin <= 1.5.2.0 - Local File Inclusion vulnerability7.5 High
- wpdeveloper embedpressWordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability8.3 High
- jamie bergen plugin notes plusWordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability5.4 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability4.3 Medium
- geek code lab login as usersWordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability9.8 Critical
- python cpython, python +1 moreQuadratic complexity parsing cookies with backslashes7.5 High
- zzcmsZZCMS eginfo.php information disclosure5.3 Medium
- zzcmsZZCMS list.php path traversal6.9 Medium
- void coders elementor post grid addon for elementor page builderWordPress Void Elementor Post Grid Addon for Elementor Page builder plugin <= 2.3 - Local File Inclusion vulnerability5.3 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability4.7 Medium
- icegramWordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Unpublished Campaign Viewer vulnerability5.3 Medium
- themelocation widgets for woocommerce products on elementor, woo products widgets for elementor +1 moreWordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.0 - Local File Inclusion vulnerability8.5 High
- hamed naderfar compute linksWordPress Compute Links plugin <= 1.2.1 - Remote File Inclusion vulnerability9.6 Critical
- nouthemes leopard - wordpress offload mediaWordPress Leopard plugin <= 2.0.36 - Subscriber+ Plugin Settings Change vulnerability7.1 High
- crew hrm hrm, crewhrm +1 moreWordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability9.0 Critical
- bit apps form pro, bitapps bit form +1 moreWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability7.1 High
- bit apps form pro, bitapps bit form, bit form pro +2 moreWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability9.9 Critical
- bit apps form pro, bitapps bit form, bit form pro +2 moreWordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability8.6 High
- creativeon whmpressWordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability8.8 High
- eyecix jobsearch, jobsearch wp job board +1 moreWordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability9.8 Critical
- azzaroco ultimate membership proWordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability9.0 Critical
- azzaroco ultimate membership proWordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability9.4 Critical
- scott paterson easy paypal buy now buttonWordPress Easy PayPal & Stripe Buy Now Button plugin <= 1.9 - Open Redirection vulnerability4.7 Medium
- wp onlinesupport, essential plugin timeline and history sliderWordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerability8.5 High
- crocoblock jetgridbuilderWordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerability8.5 High
- givewpWordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability10.0 Critical
- haxx libcurl, google nest speakers, nest mini firmware +2 moreThe libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest...5.9 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform allows XSS through XClass name in string properties9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreIn XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them9.1 Critical
- nissan altima, nissan-global blind spot protection sensor ecu firmware +1 morePredictable seed generation after ECU reset5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection5.3 Medium
- mobsf mobile security framework, mobile-security-framework-mobsf +1 moreMobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files8.0 High
- Show moreLoading…