CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- linux, linux kernel +1 moredmaengine: idxd: Prevent use after free on completion memory7.8 High
- panasonic control fpwin proStack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may...7.8 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-console: oauth2 insufficient state parameter entropy8.0 High
- octopus serverIn affected versions of Octopus Server OIDC cookies were using the wrong expiration time which...2.6 Low
- kirstyburgoine responsive videoResponsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- flamix flamix: bitrix24 and contact form 7 integrationsFlamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure5.3 Medium
- appcheap app builder – create native android & ios apps on the flight, app builder +1 moreApp Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search5.6 Medium
- shawfactor lh add media from urlLH Add Media From Url <= 1.23 - Reflected Cross-Site Scripting6.1 Medium
- otasync ota sync booking engine widgetOTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- elbanyaoui smart online order for cloverSmart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion6.5 Medium
- elbanyaoui smart online order for cloverSmart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update4.3 Medium
- eventespresso event espresso, event espresso – event registration & ticketing sales +1 moreEvent Espresso 4 Decaf – Event Registration Event Ticketing <= 4.10.46.decaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification4.3 Medium
- starkdigital wp testimonial widgetWP Testimonial Widget <= 3.1 - Missing Authorization5.3 Medium
- sersis wordsurveyWordSurvey <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via sounding_title Parameter5.5 Medium
- liquidpoll, liquidpoll – polls, surveys, nps and feedback reviews +1 moreLiquidPoll <= 3.3.78 - Unauthenticated Stored Cross-Site Scripting via form_data Parameter7.2 High
- clevelandwebdeveloper hide my siteHide My Site <= 2.2 - Unauthenticated Information Exposure4.3 Medium
- sjhoo woo inquiryWoo Inquiry <= 0.1 - Unauthenticated SQL Injection10.0 Critical
- dell supportassist for home pcsDell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation...7.3 High
firefoxUbuntufirefox regressionsNo scoresimdutfOSS-FuzzHeap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1No scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo score- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreexec: Fix ToCToU between perm check and set-uid/gid usage7.8 High
- linux, linux kernel +1 morewifi: ath12k: change DMA direction while mapping reinjected packets8.8 High
- linux, linux kernel +1 moremlxsw: spectrum_acl_erp: Fix object nesting warning7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()5.5 Medium
- linux, linux kernel +1 morexfrm: Fix input error path memory access8.1 High
- linux, linux kernel +1 moremedia: pci: ivtv: Add check for DMA map result7.8 High
- linux, linux kernel +1 morePCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: Clean up error handling in vpci_scan_bus()5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked5.5 Medium
- linux, linux kernel +1 morevhost/vsock: always initialize seqpacket_allow7.8 High
- linux, linux kernel +1 moreRDMA/hns: Fix soft lockup under heavy CEQE load7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moredevres: Fix memory leakage caused by driver API devm_free_percpu()5.5 Medium
- linux, linux kernel +1 moreperf: Fix event leak upon exit5.5 Medium
- linux, linux kernel +1 moreperf: Fix event leak upon exec and file release5.5 Medium
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreDrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek...8.0 High
- tosei online store management systemAn issue in the downloader.php component of TOSEI online store management system v4.02, v4.03,...7.5 High
- yzncmsA cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2...5.4 Medium
- kashipara music management systemA SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0...8.8 High
- kashipara music management systemA SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music...8.8 High
- kashipara music management systemA SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music...9.8 Critical
- kashipara music management systemKashipara Music Management System v1.0 is vulnerable to SQL Injection via /music...9.8 Critical
- kashipara music management systemA SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music...9.8 Critical
- kashipara music management systemA SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management...9.8 Critical
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in...8.8 High
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in...8.8 High
- lopalopa music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in...8.8 High
- kashipara music management systemAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of...9.8 Critical
- No product listedA cross-site scripting (XSS) vulnerability in the component /email/welcome.php of Mini Inventory...5.4 Medium
- Show moreLoading…