CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- tenda g3, g3 firmware +1 moreTenda G3 SetSysTimeCfg formSetSysTime stack-based overflow8.7 High
- tenda g3, g3 firmware +1 moreTenda G3 setDebugCfg formSetDebugCfg stack-based overflow8.7 High
- music gallery site project gallery site, oretnom23 music gallery site +1 moreSourceCodester Music Gallery Site Master.php sql injection5.3 Medium
- oretnom23 music gallery siteSourceCodester Music Gallery Site sql injection5.3 Medium
- oretnom23 music gallery siteSourceCodester Music Gallery Site manage_category.php sql injection5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System staffedit.php sql injection5.3 Medium
- code-projects responsive hotel site, responsive hotel site project hotel site +1 morecode-projects Responsive Hotel Site index.php sql injection6.9 Medium
- code-projects online quiz sitecode-projects Online Quiz Site index.php sql injection6.9 Medium
- meshtastic firmwareDevice crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware7.5 High
- nixos hydraNix Hydra Missing authentication when triggering evaluations7.5 High
- akilli commerce software technologies ltd. co. e-commerce website, e-commerce website project website +1 moreSourceCodester E-Commerce Website registration.php sql injection6.9 Medium
- itsourcecode insurance management system, nafisulbari life insurance management system +1 morenafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection5.3 Medium
- avaiga taipySession Cookie without Secure and HTTPOnly flags in taipy6.3 Medium
taipyPyPITaipy 3.1.1 affected by CVEs on flask-core and pymongoNo score- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection5.3 Medium
- wolfsslECDSA nonce bias caused by truncation4.1 Medium
- wolfsslUnverifed Ciphersuite used on a client-side TLS1.3 Downgrade5.1 Medium
- wolfsslSafe-error attack on TLS 1.3 Protocol5.1 Medium
- amazon aws cloud development kit, aws aws-cdk +1 moreAWS CDK RestApi not generating authorizationScope correctly in resultant CFN template6.4 Medium
- wolfsslBuffer overread in domain name matching10.0 Critical
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 hd_config.cgi sprintf command injection5.3 Medium
- itsourcecode insurance management system, nafisulbari life insurance management system +1 morenafisulbari/itsourcecode Insurance Management System addClient.php cross site scripting5.3 Medium
- itsourcecode insurance management system, nafisulbari life insurance management system +1 morenafisulbari/itsourcecode Insurance Management System editClient.php cross site scripting5.3 Medium
- hp security managerHP Security Manager - Potential Remote Code Execution9.8 Critical
- apollographql apollo gateway, apollo router, federation +3 more +5 moreApollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries7.5 High
- apollographql apollo router, router, apollo-router +1 more +3 moreApollo Router Coprocessors may cause Denial-of-Service when handling request bodies7.5 High
- webpackDOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)6.4 Medium
- smashballoon reviews feed, smub reviews feed – add testimonials and customer reviews from google reviews, yelp, tripadvisor, and more +1 moreReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update4.3 Medium
- smashballoon reviews feed, smub reviews feed – add testimonials and customer reviews from google reviews, yelp, tripadvisor, and more +1 moreReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery4.3 Medium
- fortra filecatalyst workflowSQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)7.2 High
- fortra filecatalyst workflowInsecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)9.8 Critical
- brain information technologies inc. low-code, brainlowcode brain low-code +1 moreUnauthenticate SQLi in Brain Information Technologies' Brain Low-Code9.3 Critical
- flowiseai flowiseFlowise Authentication Bypass9.8 Critical
- flowiseai flowiseFlowise Denial of Service7.5 High
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreAn HTTP parameter may contain a URL value and could cause the web application to redirect the...4.3 Medium
- hitachi energy microscada sys600, hitachienergy microscada x sys600 +1 moreThe product exposes a service that is intended for local only to all network interfaces without...8.3 High
- hitachi microscada x sys600, hitachi energy microscada sys600 +1 moreAn attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the...8.2 High
- hitachi energy microscada pro sys600, microscada x sys600, hitachienergy microscada sys600 +2 moreThe product allows user input to control or influence paths or file names that are used in...9.9 Critical
- hitachi energy microscada pro sys600, microscada x sys600, hitachienergy microscada sys600 +2 moreThe product does not validate any query towards persistent data, resulting in a risk of injection...9.9 Critical
cosmwasm-vmcrates.io,github.com/CosmWasm/wasmvmGo +1 moreCWA-2023-004: Excessive number of function parameters in compiled Wasm6.9 Medium- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server binaries may load potentially insecure shared libraries from specific relative paths6.4 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget6.4 Medium
- m-files serverPath traversal in M-Files API8.4 High
- beckhoff twincat/bsd, mdp package, twincat\/bsd +2 moreBeckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD7.3 High
- beckhoff twincat/bsd, ipc diagnostics package, twincat\/bsd +2 moreBeckhoff: Local Denial-of-Service vulnerability in TwinCAT/BSD and the IPC-Diagnostics package5.5 Medium
- beckhoff twincat/bsd, ipc diagnostics package, ipc diagnostics +1 more +3 moreBeckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD7.3 High
- beckhoff twincat/bsd, ipc diagnostics package, twincat\/bsd +2 moreBeckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD7.8 High
- Show moreLoading…