CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- sami ahmed siddiqui custom permalinksCustom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting4.4 Medium
- pixeljar favicon generator, brandondove favicon generator (closed) +1 moreFavicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion9.6 Critical
- instawp string locatorString Locator <= 2.6.5 - Reflected Cross-Site Scripting6.1 Medium
- tiktokThe TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the...7.4 High
- nicmx fort-validatorAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- fort validator project validator, nicmx fort validator +1 moreAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- fort validator project validator, nicmx fort-validator +1 moreAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...9.8 Critical
- fort validator project validator, nicmx fort-validator +1 moreAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- fort validator project validator, nicmx fort validator +1 moreAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- nicmx fort-validatorAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge (HTML-based) Memory Corruption Vulnerability6.3 Medium
- mage mage-aiMage AI pipeline interaction request remote arbitrary file leak6.5 Medium
- mage mage-aiMage AI git content request remote arbitrary file leak6.5 Medium
- mage mage-aiMage AI file content request remote arbitrary file leak6.5 Medium
- mage mage-aiMage AI allows deleted users to use the terminal server with admin access, leading to remote code execution7.1 High
- froxlorFroxlor before 2.2.0 Insecure File Permissions mysql.conf8.4 High
- spipSPIP porte_plume Plugin Arbitrary PHP Execution9.8 Critical
- opentext™ network node manager i (nnmi)Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).4.8 Medium
- opentext™ network node manager i (nnmi)Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi).4.8 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Improper Input Validation (CWE-20)4.1 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)4.8 Medium
- opensearch-project security-dashboards-pluginOpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect6.1 Medium
- gethomepage homepagehomepage DNS rebinding vulnerability (GHSL-2024-096)6.5 Medium
- steveklabnik request storeRequestStore has Incorrect Default Permissions7.8 High
- openedx, openedx openedx-translations +1 moreopenedx-translations's Atlas translations for Open edX missing validation7.7 High
- jeesitethinkgem JeeSite Cookie login cross site scripting6.9 Medium
- collaboraonline onlineCollabora Online's remote host TLS certificates are not fully verified8.2 High
- pretixStored XSS in Placeholder Samples in Mail Preview7.2 High
- manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 moreStored XSS6.3 Medium
- manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 moreIncorrect Authorization8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- zohocorp manageengine opmanager, manageengine opmanager, remote monitoring and management, zohocorp manageengine opmanager msp +3 more +5 moreRemote Code Execution8.8 High
- Show moreLoading…