CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- trellix nx, ex, ax, fx, cms and ivxAn authenticated user can download sensitive files from Trellix products NX, EX, FX, AX, IVX, ...5.9 Medium
- wpwax logo showcase ultimate – logo carousel, logo slider & logo gridLogo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- wpmanageninja ninja tables, techjewel ninja tables – easy data table builder +1 moreNinja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File6.4 Medium
- oxygen builder builderOxygen Builder <= 4.8.3 - Missing Authorization to Authenticated (Subscriber+) Stylesheet Update4.3 Medium
- hitachi ops center common servicesAuthentication Bypass Vulnerability in Hitachi Ops Center Common Services7.8 High
- perl cpanminus, app\ \ +1 moreThe App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling...8.1 High
- skyss arfa-cms, skysystem arfa cms +1 moreA cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before...8.8 High
- dlink dir-846w firmwareD-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE)...9.8 Critical
- dlink dir-846w firmwareD-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE)...9.8 Critical
- dlink dir-846w firmwareD-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE)...8.8 High
- aertherwide exiftagsBuffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute...7.8 High
- dlink dir-846w firmwareD-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE)...9.8 Critical
- ptc thingworxAn Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view...6.5 Medium
- rubrik cdm, cloud data management +1 moreAn incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and...9.8 Critical
- teldat rs123 firmware, rs123w firmware +1 moreA weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote...8.0 High
- teldat rs123 firmware, rs123w firmware +1 moreCross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute...4.8 Medium
- shopify tophatImproper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat Link4.3 Medium
- jpillora chiselChisel AUTH environment variable not respected in server entrypoint8.6 High
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- sender, sender – newsletter, sms and email marketing automation for woocommerce +1 moreWordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- 10up simple local avatarsWordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- unknown hummingbirdWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.3.1 - CSRF Leading to Optout Vulnerability4.3 Medium
- wpbackitup backup and restore wordpressWordPress Backup and Restore WordPress plugin <= 1.50 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, sendinblue newsletter\, smtp\, email marketing and subscribe +1 moreWordPress Brevo plugin <= 3.1.82 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- passionate programmer peter wp data accessWordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- softaculous speedycacheWordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- fonts plugin fontsWordPress Fonts plugin <= 3.7.7 - Cross Site Request Forgery (CSRF) to Stored XSSvulnerability7.1 High
- checkout plugins stripe payments for woocommerce by checkout, checkoutplugins stripe payments for woocommerce +1 moreWordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- naiche dark mode for wp dashboardWordPress Dark Mode for WP Dashboard plugin <= 1.2.3 - Cross Site Request Forgery vulnerability4.3 Medium
- wp user manager user manager, wpusermanager wp user manager +1 moreWordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- brave popup builder, getbrave brave +1 moreWordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- advancedformintegration advanced form integrationWordPress AFI – The Easiest Integration Plugin plugin <= 1.89.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability5.5 Medium
- bobbingwide oikWordPress oik plugin <= 4.12.0 - Arbitrary File Deletion vulnerability4.3 Medium
- zookatron mybooktable bookstore, stormhillmedia mybook table bookstore +1 moreWordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.3.9 - CSRF to XSS vulnerability7.1 High
- webinarpressWordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- mycredWordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability5.3 Medium
- anssi laitila shared filesWordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability5.3 Medium
- bit apps form pro, bitapps bit form +1 moreWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability6.5 Medium
- nouthemes leopard, leopard - wordpress offload media +1 moreWordPress Leopard plugin <= 2.0.36 - Subscriber+ Sensitive Data Exposure vulnerability6.5 Medium
- store locator plus locator plus, storelocatorplus store locator plus +1 moreWordPress Store Locator Plus® for WordPress plugin <= 2311.17.01 - Sensitive Data Exposure vulnerability5.3 Medium
- jem-products order export for woocommerce, jem plugins order expert for woocommerce +1 moreWordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerability5.3 Medium
- mediavine create, create by mediavine +1 moreWordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability5.3 Medium
- acer altos r680 f4, altos r680s f4, aspire c22-1600 +738 more +740 moreInsecure Platform Key (PK) used in UEFI system firmware signature6.4 Medium
- vimheap-buffer-overflow in ins_typebuf() in Vim < 9.1.06974.5 Medium
- Show moreLoading…