CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- oretnom23 music gallery siteSourceCodester Music Gallery Site Master.php sql injection5.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS runlogon.php sql injection5.3 Medium
- master-nan sweet-cms, sweetcms +1 moremaster-nan Sweet-CMS log.go LogHandler neutralization for logs5.3 Medium
- open-policy-agent opa, openpolicyagent open policy agent +1 moreOPA SMB Force-Authentication6.1 Medium
- master-nan sweet-cmsmaster-nan Sweet-CMS index sql injection5.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS user-move-run.php sql injection5.3 Medium
- linux, linux kernel +1 moresched: Fix yet more sched_fork() races5.5 Medium
- codection clean loginClean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion8.8 High
- maxfoundry media library foldersMedia Library Folders <= 8.2.3 - Missing Authorization on Various Functions6.3 Medium
- wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 moreWP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting6.1 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: ctnetlink: use helper function to calculate expect ID5.5 Medium
- themeific tourfic, themefic tourfic – travel booking, hotel booking & car rental wordpress plugin +1 moreTourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions4.3 Medium
- theeventscalendar events calendar pro, the events calendar pro +1 moreThe Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution9.1 Critical
- elecom co.,ltd. wab-i1750-ps, elecom wab-i1750-ps firmware +1 moreMissing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and...3.7 Low
- elecom co.,ltd. wrc-x3000gs2-b, wrc-x3000gs2-w, wrc-x3000gs2a-b +4 more +6 moreCross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, and WRC-X3000GS2A-B...6.1 Medium
- elecom co.,ltd. wab-i1750-ps, wab-s1167-ps, elecom wab-i1750-ps firmware +4 more +6 moreCross-site scripting vulnerability exists in WAB-I1750-PS and WAB-S1167-PS due to improper...6.1 Medium
- salephpscripts web directory freeWeb Directory Free < 1.7.3 - Unauthenticated LFI9.1 Critical
- hubspot, hubspotdev hubspot all-in-one marketing – forms, popups, live chat +1 moreHubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget6.4 Medium
- muffingroup bethemeBetheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection8.8 High
- muffingroup bethemeBetheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference7.1 High
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters6.4 Medium
- kriesi enfold, enfold - responsive multi-purpose theme +1 moreEnfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters6.4 Medium
- caseproof, llc memberpressMemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters6.1 Medium
- 6shr system project system, gether technology 6shr system, gethertechnology 6shr +2 moreGether Technology 6SHR System - Unrestricted File Upload8.8 High
- 6shr system project system, gether technology 6shr system, gethertechnology 6shr +2 moreGether Technology 6SHR System - SQL Injection8.8 High
- easy test online learning and testing platform project test online learning and testing platform, hwa jiuh digital technology easy test online learning and testing platform +1 moreHWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS5.4 Medium
- easy test online learning and testing platform project test online learning and testing platform, hwa jiuh digital technology easy test online learning and testing platform +1 moreHWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection8.8 High
- zyxel nwa1100-n firmware, nwaw1100-n firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(),...7.5 High
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an...9.8 Critical
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer...9.8 Critical
- libexpat project libexpat, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +4 more +6 moreAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length...7.5 High
- safeguard privileged passwordsOne Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because...9.8 Critical
- seacmsA cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9...3.5 Low
- seacmsVulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP...7.2 High
- tpmecmsTpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the ...6.1 Medium
- seacmsSeacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.6.1 Medium
- shopxoShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to...6.1 Medium
- wolfssl wolfcrypt, wolfssl +1 moreFault Injection of EdDSA signature in WolfCrypt6.7 Medium
- wolfssl, wolfssl wolfcrypt +1 moreAES T-Table sub-cache-line leakage4.1 Medium
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability8.8 High
- silabs.com se firmwareFailure to update the tamper reset cause register when a tamper event occurs2.0 Low
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability9.8 Critical
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability9.8 Critical
- restsharpCRLF Injection in RestSharp's `RestRequest.AddHeader` method6.1 Medium
- acronis snap deploySensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- dinesh karki wp armour extended, dineshkarki wp armour +1 moreWordPress WP Armour Extended plugin <= 1.26 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- Show moreLoading…