CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- cisco unified communications managerA vulnerability in the SIP call processing function of Cisco Unified Communications Manager ...8.6 High
- drupal responsive and off-canvas menu, responsive and off-canvas menu project and off-canvas menu +1 moreResponsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-0305.3 Medium
- ami aptio v, aptiov +1 moreSmm Callout in SmmComputrace Module7.8 High
- ami aptio v, aptiov +1 moreMemory Leak in SmmComuptrace Module7.8 High
- zen cart cart, zen-cart zen cart +1 moreZen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability8.1 High
- centreon, centreon web +1 moreCentreon initCurveList SQL Injection Remote Code Execution Vulnerability8.8 High
- centreon, centreon web +1 moreCentreon updateServiceHost SQL Injection Remote Code Execution Vulnerability8.8 High
- vipre advanced securityVIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 High
- vipre advanced securityVIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- vipre advanced securityVIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability7.8 High
- windscribeWindscribe Directory Traversal Local Privilege Escalation Vulnerability7.8 High
- magnet forensics axiomMagnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability8.0 High
- netgear prosafe network management system, nms300 firmware +1 moreNETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability8.8 High
- netgear prosafe network management system, nms300 firmware +1 moreNETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability8.8 High
- irfanview, irfanview wsq +1 moreIrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- irfanview, irfanview wsq +1 moreIrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- logsign unified secops platformLogsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability5.1 Medium
- logsign unified secops platformLogsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability7.1 High
- logsign unified secops platformLogsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability6.5 Medium
- logsign unified secops platformLogsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability7.1 High
- logsign unified secops platformLogsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability7.1 High
- atlassian confluence data center, confluence server +1 moreThis High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was...7.1 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability3.3 Low
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 firmware +1 moreAutel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- apache airflowApache Airflow: Stored XSS Vulnerability on provider link6.1 Medium
- opentext performance centerStored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center5.1 Medium
- opentext performance centerUser enumeration vulnerability has been discovered in OpenText™ Performance Center2.0 Low
- ckeditor ckeditor4CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover3.1 Low
- ckeditor, ckeditor ckeditor4 +1 moreCode Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability6.1 Medium
python3.11-setuptoolsRocky LinuxImportant: python3.11-setuptools security updateNo score- ckanPotential access to sensitive URLs via CKAN extensions (SSRF)4.5 Medium
- ckanCKAN has a Cross-site Scripting vector in the Datatables view plugin6.8 Medium
- ckanCKAN may leak Solr credentials via error message in package_search action5.3 Medium
- red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 moreUndertow: improper state management in proxy protocol parsing causes information leakage7.5 High
- litespeed technologies cache, litespeedtech litespeed cache +1 moreWordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- redhat openstack platform, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrors8.1 High
- opentext privileged access manager, microfocus netiq privileged access manager +1 moreVulnerability in sshrelay in privileged access manager provides full system access.8.2 High
- opentext privileged access manager, microfocus netiq privileged access manager +1 moreImproper handling of token allows access to restricted resource in Privileged Access Manager8.7 High
- opentext self service password reset, microfocus netiq self service password reset +1 moreCross site scripting vulnerability in Self Service Password Reset7.3 High
- autodesk revit, revit lt +1 moreStack-based Overflow Vulnerability in Revit Software7.8 High
- dell repository manager, repository manager (drm) +1 moreDell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation...7.0 High
- apache seatunnel, apache software foundation seatunnel web +1 moreApache SeaTunnel Web: Arbitrary file read vulnerability7.5 High
- bdthemes ultimate store kit, ultimate store kit – addon for woocommerce, edd and elementor +1 moreUltimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection9.8 Critical
- averta phlox, phlox pro +1 morePhlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters6.1 Medium
- linux, linux kernel +1 moreio_uring/poll: add hash if ready poll request can't complete inline5.5 Medium
- linux, linux kernel +1 moredrm/i915: Fix potential context UAFs7.8 High
- linux, linux kernel +1 moredrm/amdgpu: Fixed bug on error when unloading amdgpu5.5 Medium
- Show moreLoading…