CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- itsourcecode payroll management systemitsourcecode Payroll Management System login.php sql injection6.9 Medium
- vim, netapp bootstrap os +1 moreheap-buffer-overflow in do_search() in Vim < 9.1.06894.5 Medium
- online health care system project health care system, sourcecodester online health care system +1 moreSourceCodester Online Health Care System search.php sql injection5.3 Medium
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 exportOvpn buffer overflow8.7 High
- opentext cx-e voiceA path traversal vulnerability has been discovered in OpenText™ CX-E Voice.6.9 Medium
- totolink ac1200 t8, t8 firmware +1 moreTOTOLINK AC1200 T8 setTracerouteCfg buffer overflow8.7 High
- totolink ac1200 t8, t8 firmware +1 moreTOTOLINK AC1200 T8 setTracerouteCfg os command injection5.3 Medium
- totolink ac1200 t8, t8 firmware +1 moreTOTOLINK AC1200 T8 setDiagnosisCfg buffer overflow8.7 High
- avtec outpost 0810, outpost uploader utility, avtecinc outpost 0810 firmware +2 moreAvtec Outpost Use of Hard-coded Cryptographic Key8.7 High
- avtec outpost 0810, outpost uploader utility, avtecinc outpost 0810 firmware +2 moreAvtec Outpost Storage of File with Sensitive Data Under Web Root8.7 High
- totolink ac1200 t8, t8 firmware +1 moreTOTOLINK AC1200 T8 setDiagnosisCfg os command injection5.3 Medium
- versa director, versa-networks versa director +1 moreThe Versa Director GUI provides an option to customize the look and feel of the user interface....6.6 Medium
- python software foundation cpythonInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 High
- f5 nginx agent, nginx instance manager +1 moreNGINX Agent Vulnerability6.9 Medium
- goauthentik authentikauthentik has Insufficient Authorization for several API endpoints7.5 High
- gitlabImproper Access Control in GitLab4.3 Medium
- gitlabIncorrect Provision of Specified Functionality in GitLab5.7 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab6.4 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- forcepoint web securityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...9.6 Critical
- mattermost, mattermost server +1 moreUnauthorized channel file upload4.3 Medium
- mattermost, mattermost server +1 moreInsufficient permissions checks on teams6.0 Medium
- mattermost, mattermost server +1 moreUnauthorized disabling of invite URL2.7 Low
- eclipse honoHono CSRF middleware can be bypassed using crafted Content-Type header5.0 Medium
- ruby rexml, netapp bootstrap os +1 moreREXML denial of service vulnerability5.9 Medium
- byron gitoxidegitoxide-core does not neutralize special characters for terminals2.5 Low
- veronalabs wp smsWordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability5.3 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure5.9 Medium
- mediajedi user private files, deepakkite file sharing & download manager – user private files +1 moreUser Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access4.3 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services cross-site request forgery4.3 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure5.9 Medium
- ibm openpages with watson, openpages grc platform +1 moreIBM OpenPages information disclosure6.5 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- dfactory responsive lightbox & gallery, responsive lightbox +1 moreResponsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload6.4 Medium
- mage mage-aiMage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users5.3 Medium
- mattermostSystem Role with edit access to permissions can elevate themselves to system admin4.7 Medium
- mattermostUser creation date manipulation in POST /api/v4/users5.3 Medium
- mattermostOne-click Client-Side Path Traversal Leading to CSRF in User Management admin page4.6 Medium
- mattermostIDOR when marking read a user's channel4.3 Medium
- mattermostServer crash via Elasticsearch certificate file4.9 Medium
- mattermostEmail addresses of remote users visible in props regardless of server settings4.3 Medium
- mattermostMunged email address used for password resets and notifications4.8 Medium
- linux, linux kernel +1 moreice: fix concurrent reset and removal of VFs8.8 High
- linux, linux kernel +1 morebpf: Fix crash due to incorrect copy_map_value7.8 High
- linux, linux kernel +1 morebpf: Add schedule points in batch ops3.3 Low
- linux, linux kernel +1 moreCDC-NCM: avoid overflow in sanity checking5.5 Medium
- linux, linux kernel +1 moreio_uring: add a schedule point in io_add_buffers()3.3 Low
- linux, linux kernel +1 morenetfilter: nf_tables: unregister flowtable hooks on netns exit7.8 High
- linux, linux kernel +1 morenfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()5.5 Medium
- linux, linux kernel +1 morenetfilter: nf_tables: fix memory leak during stateful obj update5.5 Medium
- Show moreLoading…