CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- kashipara music management systemA Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music...6.1 Medium
- kashipara music management systemA Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action...6.1 Medium
- diffie-hellman key exchange project key exchange, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +16 more +18 moreValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 High
- seacmsSeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku...9.8 Critical
- fastcom fw300r, fw300r firmware +1 moreA stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute...9.8 Critical
- sir gnuboard, gnuboard gnuboard6 +1 moreThere is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in...6.1 Medium
- g8bpq bpq32An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers...9.8 Critical
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +15 more +17 moreA denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect...7.5 High
- continew adminContiNew Admin tree sql injection5.1 Medium
- rems qr code bookmark systemSourceCodester QR Code Bookmark System Parameter update-bookmark.php cross site scripting5.3 Medium
- rems qr code bookmark systemSourceCodester QR Code Bookmark System delete-bookmark.php cross site scripting5.3 Medium
- rems qr code bookmark systemSourceCodester QR Code Bookmark System Parameter add-bookmark.php cross site scripting5.3 Medium
- rems interactive map with markerSourceCodester Interactive Map with Marker delete-mark.php cross site scripting5.3 Medium
- continew adminContiNew Admin user sql injection5.1 Medium
- 9front, 9front lib9p +1 moreUser impersonation for lib9p based 9p fileservers8.8 High
- logitech options+, options\+ +1 moreLogitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within...2.0 Low
- bdtask pharmacy management system, pharmacy management system project management system +1 morecode-projects Pharmacy Management System index.php sql injection5.3 Medium
- bdtask pharmacy management system, pharmacy management system project management system +1 morecode-projects Pharmacy Management System index.php sql injection5.3 Medium
- cyberark identity management, identity +1 moreCyberArk - CWE-602: Client-Side Enforcement of Server-Side Security8.3 High
- cyberark identity management, identity +1 moreCyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- cyberark identity management, identity +1 moreCyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- cyberark identity management, identity +1 moreCyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- classcmsClassCMS Article admin cross site scripting5.1 Medium
- classcmsClassCMS Logo admin cross site scripting5.3 Medium
- rems daily calories monitoring toolSourceCodester Daily Calories Monitoring Tool delete-calorie.php cross site scripting5.3 Medium
- rems daily calories monitoring toolSourceCodester Daily Calories Monitoring Tool add-calorie.php cross site scripting5.3 Medium
- rems task progress trackerSourceCodester Task Progress Tracker update-task.php cross site scripting5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websiteitsourcecode E-Commerce Website search_list.php sql injection5.3 Medium
- bdtask pharmacy management system, pharmacy management system project management system +1 morecode-projects Pharmacy Management System Parameter index.php editManager sql injection5.3 Medium
- imroc reqreq may send an unintended request when a malformed URL is provided9.8 Critical
- hyperledger fabricHyperledger Fabric does not verify request has a timestamp within the expected time window5.3 Medium
- purevpnPureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to...5.3 Medium
- jkev record management systemSourceCodester Record Management System search_user.php cross site scripting5.3 Medium
- jkev record management systemSourceCodester Record Management System sort1_user.php cross site scripting5.3 Medium
- go-tribe gotribeGo-Tribe gotribe token.go Sign hard-coded credentials5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection5.3 Medium
- le van toan image hotspot by devvnImage Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection8.8 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection5.3 Medium
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container6.8 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection5.3 Medium
- presstigers simple job boardSimple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection7.2 High
- maxfoundry maxbuttons, maxbuttons – create buttons +1 moreWordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure5.3 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions5.0 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.14 - Cross-Site Request in Several AJAX Actions4.7 Medium
- risetheme rt easy builder – advanced addons for elementor, risethemes rt easy builder +1 moreRT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting6.4 Medium
- Show moreLoading…