CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- vtiger crmA reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page...9.6 Critical
- vtiger crmA reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of...9.6 Critical
- vtiger crmA reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of...9.6 Critical
- vtiger crmAn Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to...6.1 Medium
- dedebizA cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute...6.1 Medium
- dedebizA cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute...6.1 Medium
- causefx organizrOrganizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.9.8 Critical
- organizrOrganizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.6.1 Medium
- causefx organizrOrganizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- sourcefabric rpi-jukebox-rfid, phoniebox +1 moreRPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- phpipamphpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load...6.1 Medium
- baijunyao bjyadmin, thinkphp-bjyadmin +1 morebjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics...6.1 Medium
- baijunyao bjyadmin, thinkphp-bjyadmin +1 morebjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics...6.1 Medium
- unmarkunmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.6.1 Medium
- jpatokal openflightsopenflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php6.1 Medium
- jpatokal openflightsopenflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php6.1 Medium
- jpatokal openflightsopenflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php5.4 Medium
- jpatokal openflightsopenflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php5.4 Medium
- wiresharkExpired Pointer Dereference in Wireshark7.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...8.8 High
- phpoffice phpspreadsheetPhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information5.4 Medium
- phpoffice phpspreadsheetXML External Entity Reference (XXE) in PHPSpreadsheet8.8 High
- portabilis i-educarAuthenticated SQL Injection in i-Educar8.8 High
- portabilis i-educarPrivilege escalation in i-Educar8.1 High
- portabilis i-educarReflected Cross-Site Scripting in i-Educar6.3 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreOpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability5.3 Medium
- hwameistorPotential Permission Leakage of Cluster Level in hwameistor2.8 Low
- jupyter jupyterlab, notebook +1 moreHTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering7.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Escape Vulnerability5.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Escape Vulnerability5.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Escape Vulnerability5.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os system software in aci mode +1 moreCisco NX-OS Software Command Injection Vulnerability4.4 Medium
- progress ws ftp serverMulti-Factor Authentication Bypass in Progress WS_FTP Server6.5 Medium
- teamviewer meeting, teamviewer, teamviewer remote full client +2 moreImproper access control in the clipboard synchronization feature4.3 Medium
- progress ws ftp serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server6.5 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability6.5 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Bash Arbitrary Code Execution Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Bash Privilege Escalation Vulnerability6.7 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability4.3 Medium
- advanced varnish project varnish, drupal advanced varnish +1 moreAdvanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-0335.3 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure5.3 Medium
- hyperview geoportal toolkitReflected XSS in HyperView Geoportal Toolkit5.3 Medium
- Show moreLoading…