CVEs published July 8, 2024
62 CVEs were published on July 8, 2024: 2 critical, 34 high.
- Published
- 62
- Critical
- 2
- High
- 34
- Medium
- 23
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- 19
- OpenVPN
- 3
- directus
- 2
- IBM Cloud Pak for Business Automation
- 2
- IBM MQ Operator
- 2
- LevelOne WBR-6013
- 2
- randombit botan
- 2
- Renesas rcar_gen3_v2.5
- 2
- Samsung Mobile Devices
- 2
- /n software IPWorks SSH SFTPServer
- 1
Critical 2
- CVE-2024-1305tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can useOpenVPN tap-windows6 · OpenVPN-GUI
- CVE-2023-46685A hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623.LevelOne WBR-6013
High 34
- CVE-2024-5971Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticketundertow · Red Hat build of Apache Camel 3.20.7 for Spr… +14
- CVE-2024-6227Infinite Loop in aimhubio/aimaimhubio/aim · aim
- CVE-2024-6409Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9OpenSSH · Red Hat Enterprise Linux +1
- CVE-2024-39896Directus allows SSO User Enumerationdirectus
- CVE-2023-47677A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-34435A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2024-21778A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDKLevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-49593Leftover debug code exists in the boa formSysCmd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623.LevelOne WBR-6013
- CVE-2023-49073A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-48270A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-45742An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-49595A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-45215A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-47856A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50240Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50239Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-41251A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50244Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50243Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50383Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50382Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50381Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-50330A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2023-49867A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11.LevelOne WBR-6013 · Realtek rtl819x Jungle SDK
- CVE-2024-6563Buffer Overflow Arbitrary WriteRenesas rcar_gen3_v2.5
- CVE-2024-39742IBM MQ Container authentication bypassIBM MQ Operator
- CVE-2024-37999A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions).Siemens Medicalis Workflow Orchestrator
- CVE-2024-27903OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitraryOpenVPN
- CVE-2024-24974The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attackerOpenVPN
- CVE-2024-27459The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute aOpenVPN GUI
- CVE-2024-38330IBM i privilege escalationIBM i
- CVE-2024-5711Stored XSS in stitionai/devikastitionai/devika
- CVE-2024-31504Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodbus v.2018-09-12 allows a remtoe attacker to cause a denial of service
- CVE-2024-39202D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution (RCE) vulnerability via the dhcpd_startip parameter a
Medium, low and unrated 26
- CVE-2024-28882OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the valiOpenVPN
- CVE-2024-3653Undertow: learningpushhandler can lead to remote memory dos attacksundertow · Red Hat build of Quarkus 3.8.6.redhat +19
- CVE-2024-38372Undici vulnerable to data leak when using response.arrayBuffer()nodejs undici · undici
- CVE-2024-6580/n software IPWorks SSH insufficient file access verification/n software IPWorks SSH SFTPServer
- CVE-2024-4882URL Redirection to Arbitrary Site Exists in SitefinityProgress Software Sitefinity
- CVE-2024-39895Directus GraphQL Field Duplication Denial of Service (DoS)directus · @directus/env
- CVE-2024-39701Directus Incorrectly handles _in` filterdirectus
- CVE-2024-39312Botan has an Authorization Error due to Name Constraint Decoding Bugrandombit botan
- CVE-2024-34702Botan has a Denial of Service Due to Excessive Name Constraintsrandombit botan
- CVE-2024-23562HCL Domino is susceptible to an information disclosure vulnerabilityHCL Software Domino Server
- CVE-2024-39699Directus has a Blind SSRF On File Importdirectus · @directus/api
- CVE-2024-6564Buffer overflow in Rensas RCARRenesas rcar_gen3_v2.5
- CVE-2024-39695Exiv2 has an out-of-bounds read in AsfVideo::streamPropertiesexiv2
- CVE-2024-39677NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilitiesnhibernate-core · NHibernate
- CVE-2024-39308RailsAdmin Cross-site Scripting vulnerability in the list viewrailsadminteam rails_admin · rails_admin
- CVE-2024-25639Prompt Injection triggered XSS vulnerability in Khoj Obsidian, Desktop and Web clientskhoj-ai khoj
- CVE-2024-4341IDOR in ExtremePacs's Extreme XDSExtremePacs Extreme XDS
- CVE-2024-39743IBM MQ Container denial of serviceIBM MQ Operator
- CVE-2024-6163local IP restriction of internal HTTP endpointsCheckmk
- CVE-2024-37389Apache NiFi: Improper Neutralization of Input in Parameter Context DescriptionApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2024-34603Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.Samsung Mobile Devices
- CVE-2024-34602Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitiSamsung Mobile Devices
- CVE-2024-37528IBM Cloud Pak for Business Automation cross-site scriptingIBM Cloud Pak for Business Automation
- CVE-2024-31897IBM Cloud Pak for Business Automation server-side request forgeryIBM Cloud Pak for Business Automation
- CVE-2024-39723IBM FlashSystem denial of serviceIBM Storage Virtualize
- CVE-2024-39203A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary