CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- jayesh hotel management systemKashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users...7.2 High
- jayesh hotel management systemAn Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in...9.1 Critical
- jayesh hotel management systemAn Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel...7.5 High
- jayesh hotel management systemAn Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in...9.1 Critical
- jayesh hotel management systemAn Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel...7.5 High
- jayesh hotel management systemA Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php"...4.8 Medium
- jayesh hotel management system, kashipara hotel management +1 moreA Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of...4.7 Medium
- jayesh hotel management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of...6.1 Medium
- jayesh hotel management system, kashipara hotel management +1 moreA Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System...6.8 Medium
- jayesh hotel management systemKashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin...7.2 High
- kashipara bus ticket reservation systemA Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the...5.4 Medium
- kashipara bus ticket reservation systemA Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus...5.4 Medium
- kashipara bus ticket reservation systemA Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara...6.1 Medium
- seacmsSeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that...8.8 High
- retoolRetool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into...6.5 Medium
- swissphone dical-red 4009Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without...9.8 Critical
- swissphone dical-red 4009cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker...8.1 High
- swissphone dical-red 4009Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole...7.6 High
- swissphone dical-redcgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to...8.8 High
- swissphone dical-red 4009Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP...5.4 Medium
- swissphone dical-redAn issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file...6.8 Medium
- swissphone dical-red 4009Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative...9.4 Critical
- solarwinds web help desk, webhelpdesk +1 moreSolarWinds Web Help Desk Hardcoded Credential Vulnerability9.1 Critical
- wpmlWPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection9.9 Critical
- google chromeInappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84...4.3 Medium
- google chromeInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84...4.3 Medium
- google chromeInappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613...4.3 Medium
- google chromeInappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote...4.3 Medium
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84...7.8 High
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84...7.8 High
- google chromeInsufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed...4.3 Medium
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84...7.8 High
- google chromeInappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a...4.3 Medium
- google chromeInsufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- google chrome, chromium v8, microsoft edge +2 moreType confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit...9.6 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to...8.8 High
- google chromeUse after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who...8.8 High
- google chromeHeap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker...8.8 High
- google chromeOut of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- google chrome, chromium v8, microsoft edge chromium +2 moreInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote...8.8 High
- google chromeUse after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote...8.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine REST API Blind SQL Injection Vulnerabities6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco unified communications managerCisco Unified Communications Manager Cross-Site Scripting Vulnerability6.1 Medium
github.com/CosmWasm/wasmdGoCWA-2024-006: wasmd non-deterministic module_query_safe queryNo scoregithub.com/CosmWasm/wasmdGoCWA-2024-005: Stackoverflow in wasmd8.7 High- Show moreLoading…