CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- servision ivg webmax, ivg webmax 1.0.57 +1 moreServision - CWE-287: Improper Authentication8.2 High
- 7-twenty bot7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5.4 Medium
- schneider electric accutech managerCWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability...7.5 High
- barix sip client web management interface ui, sip client firmware +1 moreBarix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- ericsson packet core controllerEricsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability6.5 Medium
- priorityPriority – CWE-552: Files or Directories Accessible to External Parties4.4 Medium
- priorityPriority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- priorityPriority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 Medium
- code-atlantic popup maker, danieliser popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder +1 morePopup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- atlassian bamboo, bamboo data center, bamboo server +2 moreThis High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in...7.6 High
- checkmkPrivilege escalation in mk_informix plugin5.2 Medium
- apache dolphinschedulerApache DolphinScheduler: Remote Code Execution Vulnerability9.8 Critical
- spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 moreCVE-2024-38808: Spring Expression DoS Vulnerability4.3 Medium
- smartsearchwp chatbot with chatgpt wordpress, webdigit chatbot with chatgpt +1 moreSmartSearch WP <= 2.4.4 - Unauthenticated SQLi9.8 Critical
- themeum tutor lms elementor addonsTutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget6.4 Medium
- infosatech wp last modified infoWP Last Modified Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via lmt-post-modified-info Shortcode6.4 Medium
- spring security, vmware spring security +1 moreMissing Authorization When Using @AuthorizeReturnObject6.5 Medium
- bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 moreContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion8.7 High
- adegans adrotate banner manager, adrotate banner manager project banner manager +1 moreAdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload7.2 High
- bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder, contact form by bit form multi step form +2 moreContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection7.2 High
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget6.4 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget6.4 Medium
- bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 moreContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion9.0 Critical
- bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 moreContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads5.5 Medium
- bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 moreContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Fu…7.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update6.5 Medium
- levelfourstorefront shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter8.8 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure5.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution10.0 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion5.4 Medium
- andrea tarantini bp profile searchBP Profile Search <= 5.7.5 - Cross-Site Request Forgery to Reflected Cross-Site Scripting6.1 Medium
- sourcecodester online graduate tracer systemSourceCodester Online Graduate Tracer System fetch_genderit.php sql injection5.3 Medium
- remyandrade accounts manager appSourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting5.3 Medium
- code-projects point of sales and inventory management systemSourceCodester Point of Sales and Inventory Management System login.php sql injection6.9 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System User Signup register.php sql injection6.9 Medium
- adonesevangelista laravel property management systemitsourcecode Laravel Property Management System Notes Page create cross site scripting5.3 Medium
- adonesevangelista laravel property management systemitsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload5.3 Medium
- adonesevangelista laravel property management systemitsourcecode Laravel Property Management System PropertiesController.php upload unrestricted upload5.3 Medium
- rems leads manager toolSourceCodester Leads Manager Tool update-leads.php cross site scripting5.3 Medium
- itsourcecode project expense monitoring system, project expense monitoring system project expense monitoring system +1 moreitsourcecode Project Expense Monitoring System printtransfer.php sql injection5.3 Medium
- openbsd, vixie cron +1 morecron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based...7.3 High
- escanav escan management consoleeScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via...9.8 Critical
- apolloconfig apolloAn issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information...7.5 High
- pligg cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- kliqqi cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- pligg cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- kliqqi cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- pligg cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- pligg cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- pigg cmsPligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- Show moreLoading…