CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- linux, linux kernel +1 moreusb: vhci-hcd: Do not drop references before new references are gained9.8 Critical
dieselcrates.ioDiesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts8.9 High- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager® ThinServer™ Information Disclosure6.8 Medium
webkit2gtk3SUSESecurity update for webkit2gtk3No score- piotnet addons, piotnetdotcom piotnet addons for elementor +1 morePiotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- spring bootCVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader6.3 Medium
- mattermost channel export, mattermost +1 moreExcessive Resource Consumption via `/export`4.3 Medium
- sonicwall sonicosAn improper access control vulnerability has been identified in the SonicWall SonicOS management...9.8 Critical
- metaphorcreations dittyDitty 3.1.39-3.1.45 - Author+ Stored XSS6.1 Medium
- unknown wp table builder, wp table builder table builder +1 moreWP Table Builder <= 1.5.0 - Admin+ Stored XSS4.8 Medium
- wpmarketingrobot woocommerce google feed manager, aukejomm wpmr google feed manager for woocommerce – sell on google merchant center & shopping +1 moreWooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion8.8 High
- file manager pro, filemanagerpro file manager pro +1 moreFile Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- microsoft entra id, entra +1 moreMicrosoft Entra ID Elevation of Privilege Vulnerability7.5 High
glslangOSS-FuzzUNKNOWN READ in glslang::TInfoSinkBase::locationNo score- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function...8.8 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino...6.5 Medium
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function...7.3 High
- dlink di-8004w firmware, di 8004w firmware +1 moreD-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in the jhttpd...9.8 Critical
- dlink di-8004w firmware, di 8004w firmware +1 moreD-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in jhttpd msp_info_htm...9.8 Critical
- autmanautMan v2.9.6 allows attackers to bypass authentication via a crafted web request.4.3 Medium
- autmanautMan v2.9.6 was discovered to contain an access control issue.4.3 Medium
- adonesevangelista online accreditation management systemitsourcecode Online Accreditation Management System contains a Cross Site Scripting vulnerability...5.4 Medium
- staff appraisal system appraisal systemA host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain...8.0 High
- arrowjs arrowcms, trquoccuong arrow cms +1 moreA host header injection vulnerability exists in the forgot password functionality of ArrowCMS...9.1 Critical
- microfocus acutowebCross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker...6.1 Medium
- invesaliusAn eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1...8.0 High
- kashipara bus ticket reservation systemKashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via ...5.4 Medium
- kashipara bus ticket reservation systemA SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0...9.8 Critical
- kashipara bus ticket reservation systemKashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF)...9.4 Critical
- netgear dgn1000 firmware, dgn1000ww firmware +1 moreAn issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via...8.8 High
- dedecmsDedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile...7.2 High
- ezviz cs-cv246 firmwareEzviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live...9.8 Critical
- publiccmspubliccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin...7.2 High
- denx u-bootBuffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 ...8.1 High
- automadAutomad Cross-site Scripting vulnerability4.8 Medium
- centreon webA SQL Injection vulnerability exists in the service configuration functionality in Centreon Web...8.8 High
- smseagleA stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software...6.1 Medium
- centreon webA SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x...9.1 Critical
- centreon webA SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before...9.1 Critical
- centreon webA SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24...9.1 Critical
- centreon, centreon web +1 moreA SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04...9.8 Critical
- google chromeInappropriate implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a...4.3 Medium
- e-commerce system project system, janobe e-commerce system +1 moreSourceCodester E-Commerce System controller.php unrestricted upload5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.8 High
- microsoft edge, edge for android +1 moreMicrosoft Edge for Android Spoofing Vulnerability6.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.8 High
- janobe e-commerce system, sourcecodester ecommerce system +1 moreSourceCodester E-Commerce System popup_Item.php sql injection5.3 Medium
- e-commerce system project system, janobe e-commerce system +1 moreSourceCodester E-Commerce System Admin Login login.php sql injection6.9 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Setting SystemSettings.php cross site scripting5.1 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Master.php sql injection5.3 Medium
- Show moreLoading…