CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability7.6 High
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability9.3 Critical
- dingfanzu cms, geeeeeeeek dingfanzu +1 moredingfanzu CMS chpwd.php sql injection5.3 Medium
- funnelkit funnel builder, funnel builder pro +1 moreFunnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post6.4 Medium
- dingfanzu cms, gitapp dingfanzu +1 moredingfanzu CMS checkin.php sql injection6.9 Medium
- kitsada8621 digital library management systemkitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs6.9 Medium
- calinvingan premium seo pack – wp seo plugin, squirrly wp seo plugin, calinvingan premium seo pack wp seo plugin +2 morePremium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure5.3 Medium
- averta premium portfolio features for phlox theme, auxinportfolio +1 morePremium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- feehi feehicmsFeehiCMS index.php insert unrestricted upload5.3 Medium
- popup builder builder, sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +2 morePopup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File5.3 Medium
- feehi feehicmsFeehiCMS index.php createBanner unrestricted upload5.3 Medium
- feehi feehicmsFeehiCMS index.php update unrestricted upload5.3 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter6.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure5.3 Medium
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- sportsnet, sportsnet sportsnetcms +1 moreMultiple vulnerabilities in SportsNET9.8 Critical
- linux, linux kernel +1 moretcp: add sanity tests to TCP_QUEUE_SEQ5.5 Medium
- magepeople inc. taxi booking manager for woocommerce, mage-people ecab taxi booking manager +1 moreWordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreReflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL5.1 Medium
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreUntrusted search path vulnerability in B&R APROL5.4 Medium
- b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 moreUntrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL7.3 High
- dell poweredge platform, dss 8440 firmware, emc storage nx3240 firmware +29 more +31 moreDell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory...3.8 Low
- menulux managment portal, management portal +1 moreSensetive Data Exposure in Menulux Managment Portal6.9 Medium
- philip hazel xfptxfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data,...7.8 High
- godaddy coblocks, gutentor gutenberg blocks, unknown page builder gutenberg blocks +2 moreCoBlocks < 3.1.13 - Editor+ Stored XSS4.8 Medium
- unknown viral signup, wow-company viral-signup +1 moreViral Signup <= 2.1 - Admin+ Stored XSS4.8 Medium
- gutentor, gutentor gutenberg blocks +1 moreGutentor < 3.3.6 - Contributor+ Stored XSS5.4 Medium
openipmiAlpaquita,OpenIPMI-debuginfoRed Hat,OpenIPMI-debugsourceRed Hat +9 more +11 moreOpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the...5.0 Medium- etoilewebdesign front end usersFront End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection8.8 High
- vol4ikman wp accessibility helper (wah), volkov wp accessibility helper +1 moreWP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update5.4 Medium
- delower wp to doWP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments4.4 Medium
- etoilewebdesign front end usersFront End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- dell poweredge platform, dss 8440 firmware, emc storage nx3240 firmware +29 more +31 moreDell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input...5.3 Medium
- radiustheme the post grid, techlabpro1 the post grid – shortcode, gutenberg blocks and elementor addon for post grid +1 moreThe Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure4.3 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- mndpsingh287 theme editorTheme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization7.2 High
- funnelforms free, interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreInteractive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion5.3 Medium
- rakuten ichiba, rakuten group, inc. 'rakuten ichiba app' for android, 'rakuten ichiba app' for ios +2 more'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and...6.1 Medium
- maxfoundry media library foldersMedia Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection6.5 Medium
- ollamaOllama can extract members of a ZIP archive outside of the parent directory7.5 High
- chartistChartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.9.8 Critical
- serilog, serilog-contrib serilog-enrichers-clientinfo +1 moreSerilog Client IP Spoofing vulnerability6.5 Medium
- seacmsA cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows...5.4 Medium
- Show moreLoading…