CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- netskope, netskope client +1 moreClient Enrollment Process Bypass8.5 High
- blood bank system project bank system, code-projects blood bank system +1 morecode-projects Blood Bank System Login Page login.php cross site scripting6.9 Medium
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability5.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability7.5 High
- bplugins llc flash & html5 videoWordPress HTML5 Video Player plugin <= 2.5.31 - Sensitive Data Exposure vulnerability4.3 Medium
- blood bank system project bank system, code-projects blood bank system +1 morecode-projects Blood Bank System Login Page login.php sql injection6.9 Medium
- rems qr code attendance systemSourceCodester QR Code Attendance System delete-student.php cross site scripting5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System staffcatedit.php sql injection5.3 Medium
- rems zipped folder manager appSourceCodester Zipped Folder Manager App add-folder.php unrestricted upload5.3 Medium
unzip-streamnpmunzip-stream allows Arbitrary File Write via artifact extraction8.7 High- stark digital wp testimonial widgetWordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- stark digital wp testimonial widgetWordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability7.6 High
- code-projects online quiz sitecode-projects Online Quiz Site signupuser.php sql injection6.9 Medium
- code-projects online bus reservation sitecode-projects Online Bus Reservation Site login.php sql injection6.9 Medium
- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager thinserver +1 moreThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities9.3 Critical
- rockwell automation thinmanager® thinserver™, rockwellautomation thinmanager thinserver +1 moreRockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities8.5 High
- code-projects job portalcode-projects Job Portal forget.php sql injection6.9 Medium
- ruijie eg2000k, eg2000k firmware +1 moreRuijie EG2000K index.php unrestricted upload5.1 Medium
- checkmkXSS in view page with SLA column4.8 Medium
- apache portable runtime (apr), portable runtime +1 moreApache Portable Runtime (APR): Unexpected lax shared memory permissions5.5 Medium
- beikeshopChengdu Everbrite Network Technology BeikeShop export exportZip path traversal5.3 Medium
- beikeshop, beikeshop chengdu everbrite network technology +1 moreChengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload5.3 Medium
- beikeshop, chengdu everbrite network technology beike shop +1 moreChengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal5.3 Medium
- totolink t10 ac1200, t10 firmware, t10 v2 firmware +2 moreTOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials9.3 Critical
- adobe acrobat reader, microsoft edge +1 moreRE: New Edge T5 MSRC Case [DCMSFT-1294]7.8 High
cw0crates.io`cw0` is unmaintainedNo score- xiaomi router ax9000, mi ax9000 firmware +1 moreXiaomi router has a command injection vulnerability after authorization6.5 Medium
- linux, linux kernel +1 moref2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC7.8 High
- linux, linux kernel +1 moref2fs: fix to cover read extent cache access with lock7.8 High
- debian linux, linux kernel +1 morefou: remove warn in gue_gro_receive on unsupported protocol7.5 High
- linux, linux kernel +1 morejfs: fix null ptr deref in dtInsertEntry7.8 High
- linux, linux kernel +1 morejfs: Fix shift-out-of-bounds in dbDiscardAG5.5 Medium
- linux, linux kernel +1 moreplatform/x86: intel-vbtn: Protect ACPI notify handler against recursion5.5 Medium
- linux, linux kernel +1 morepower: supply: rt5033: Bring back i2c_set_clientdata5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moresctp: Fix null-ptr-deref in reuseport_add_sock().5.5 Medium
- linux, linux kernel +1 morenet: bridge: mcast: wait for previous gc cycles when removing port7.8 High
- linux, linux kernel +1 morebnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl()7.3 High
- linux, linux kernel +1 moreidpf: fix UAFs when destroying the queues7.8 High
- linux, linux kernel +1 moregpio: prevent potential speculation leaks in gpio_device_get_desc()5.5 Medium
- linux, linux kernel +1 moremd/raid5: avoid BUG_ON() while continue reshape after reassembling5.5 Medium
- linux, linux kernel +1 morenvme: apple: fix device reference counting7.0 High
- linux, linux kernel +1 morewifi: nl80211: disallow setting special AP channel widths5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: fix NULL dereference at band check in starting tx ba session5.5 Medium
- linux, linux kernel +1 morebpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses7.8 High
- linux, linux kernel +1 moredrm/amdgpu/pm: Fix the null pointer dereference for smu75.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix the null pointer dereference to ras_manager5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules5.5 Medium
- linux, linux kernel +1 moredrm/admgpu: fix dereferencing null pointer context5.5 Medium
- linux, linux kernel +1 moredrm/amd/pm: Fix the null pointer dereference for vega10_hwmgr5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing5.5 Medium
- Show moreLoading…