CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- hyperview geoportal toolkitArbitrary cross-domain file inclusion in HyperView Geoportal Toolkit5.3 Medium
- funnelforms free, interactive contact form and multi step form builder with drag & drop editor – funnelforms free, interactive contact form and multi step form builder +2 moreInteractive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload5.3 Medium
- connx esp hr managementStored XSS in ConnX ESP HR Management8.7 High
- manageengine pam360, password manager pro, zohocorp manageengine pam360 +1 more +3 moreSQL Injection8.3 High
- mi getapps, xiaomi getapps application +1 moreGetApps application has code execution vulnerability8.8 High
- mi app marketXiaomi App Market has a code execution vulnerability7.6 High
- mi file manager, xiaomi file manager app international version +1 moreThe international version of Xiaomi File Manager has a path traversal vulnerability6.3 Medium
- mi getapps, xiaomi getapps application +1 moreGetApps application has code execution vulnerability8.8 High
- linux, linux kernel +1 moremm: gup: stop abusing try_grab_folio5.5 Medium
- xiaomi getapps applicationGetApps application has code execution vulnerability8.8 High
- funnelforms free, interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion6.5 Medium
- funnelforms free, interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreHandling of sensitive data in process memory in NetIQ Advance Authentication8.1 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreSensitive Data Exposure leaks potential information in NetIQ Advance Authentication6.3 Medium
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreImproper account management vulnerability in NetIQ Advance Authentication8.2 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreRemote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication5.1 Medium
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreWeak communication protocol identified in Advance Authentication client application8.3 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreCross-Site Scripting (XSS) in Advance Authentication6.2 Medium
- microfocus netiq access manager, netiq access manager +1 moreMultiple xss vulnerability in NetIQ Access Manager7.3 High
- microfocus netiq access manager, netiq access manager +1 moreUser impersonation with MFA when configure in specific way7.7 High
- microfocus netiq access manager, netiq access manager +1 moreDirectory traversal vulnerability in NetIQ Access Manager5.7 Medium
- safie inc. qbic cloud cc-2l, one, safie qbic cloud cc-2\/2l firmware +1 more +3 moreQBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate...6.8 Medium
- dell client platform bios, alienware area 51m r2 firmware, alienware aurora r13 firmware +18 more +20 moreDell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high...8.2 High
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, alienware m16 r1 firmware +344 more +346 moreDell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability...6.7 Medium
- mollie payments for woocommerce, mollieintegration mollie payments for woocommerce +1 moreMollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure5.3 Medium
- bdthemes ultimate store kit, ultimate store kit – addon for woocommerce, edd and elementor, utlimate store kit elementor addons +2 moreUltimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection9.8 Critical
- comesio relevanssi live ajax search, relevanssi relevanssi-live-ajax-search +1 moreRelevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection5.3 Medium
- tenda o6, o6 firmware +1 moreTenda O6 setPortForward fromVirtualSet stack-based overflow8.7 High
- tenda o6, o6 firmware +1 moreTenda O6 setMacFilterList fromSafeSetMacFilter stack-based overflow8.7 High
- tenda o6, o6 firmware +1 moreTenda O6 operateMacFilter frommacFilterModify stack-based overflow8.7 High
- tenda o5, o5 firmware +1 moreTenda O5 setMacFilterList fromSafeSetMacFilter stack-based overflow8.7 High
- tenda o1, o1 firmware +1 moreTenda O1 DhcpSetSer fromDhcpSetSer stack-based overflow8.7 High
- in2code powermail, typo3 +1 morePowermail TYPO3 extension Broken Access Control in the OutputController9.8 Critical
- in2code powermail, typo3 +1 more"powermail" (powermail) Insecure Direct Object Reference (IDOR)5.3 Medium
- irfanview exr, irfanview +1 moreAn issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an...5.5 Medium
- irfanview exr, irfanview +1 moreAn issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an...5.5 Medium
- irfanview exr, irfanview +1 moreAn issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an...5.5 Medium
- gzequan eq enterprise management systemAn issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory...9.8 Critical
- sunmochina enterprise management systemIncorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise...7.5 High
- beijing digital china cloud technology dcme-320Beijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution...9.8 Critical
- ruoyiRuoyi v4.7.9 and before was discovered to contain a cross-site scripting (XSS) vulnerability via...6.1 Medium
- kashipara music management systemA Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System...8.0 High
- shedaniel roughlyenoughitemsRoughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified...4.3 Medium
- mezz justenoughitemsJustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index,...4.3 Medium
- emilyploszaj emiEMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index,...4.3 Medium
- kashipara responsive school management systemA SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management...7.2 High
- totolink a3002ru firmwareTOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow....9.8 Critical
- totolink a3002r firmwareTOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow...9.8 Critical
kernelopenEuler,linuxDebian,linux-6.1Debian +106 more +108 morentfs3 in the Linux kernel before 6.5.11 allows a physically proximate attacker to read kernel...7.1 High- tenda o1, o1 firmware +1 moreTenda O1 setcfm formSetCfm stack-based overflow8.7 High
- Show moreLoading…