CVEs published August 2, 2024
66 CVEs were published on August 2, 2024: 9 critical, 25 high.
- Published
- 66
- Critical
- 9
- High
- 25
- Medium
- 32
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 19
Most affected products
- SourceCodester Simple Realtime Quiz System
- 6
- CHANGING Information Technology TCBServiSign Windows Version
- 4
- elliptic
- 3
- Adobe InDesign Desktop
- 2
- fogproject
- 2
- Siemens Omnivise T3000 Application Server R9.2 · Siemens… +1
- 2
- advancedcoding Comments – wpDiscuz
- 1
- Ai3 QbiBot
- 1
- anji-plus AJ-Report
- 1
- Apache Software Foundation Apache InLong TubeMQ Client · or…
- 1
Critical 9
- CVE-2024-42348FOG leaks sensitive information (AD domain, username and password)fogproject
- CVE-2024-7314anji-plus AJ-Report Authentication Bypassanji-plus AJ-Report
- CVE-2024-38882An issue in Horizon Business Services Inc.
- CVE-2024-38883An issue in Horizon Business Services Inc.
- CVE-2024-38886An issue in Horizon Business Services Inc.
- CVE-2024-38887An issue in Horizon Business Services Inc.
- CVE-2024-38889An issue in Horizon Business Services Inc.
- CVE-2024-38891An issue in Horizon Business Services Inc.
- CVE-2024-42458server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369.
High 25
- CVE-2024-3056Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attackpodman · Red Hat Enterprise Linux +6
- CVE-2024-22169Misconfiguration in node.js causing a code execution in WD DiscoveryWestern Digital WD Discovery
- CVE-2024-7029Command Injection in AVTech AVM1203 (IP Camera)AVTech AVM1203
- CVE-2024-41127Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.monkeytypegame monkeytype
- CVE-2024-38879A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), OmniviSiemens Omnivise T3000 Application Server R9.2 · Siemens… +1
- CVE-2024-38878A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), OmniviSiemens Omnivise T3000 Application Server R9.2 · Siemens… +1
- CVE-2024-38877A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All verSiemens Omnivise T3000 Application Server R9.2 · Siemens… +8
- CVE-2024-38876A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All verSiemens Omnivise T3000 Application Server R9.2 · Siemens… +6
- CVE-2024-40721CHANGING Information Technology TCBServiSign Windows Version - Improper Input ValidationCHANGING Information Technology TCBServiSign Windows Version
- CVE-2024-40720CHANGING Information Technology TCBServiSign Windows Version - Improper Input ValidationCHANGING Information Technology TCBServiSign Windows Version
- CVE-2024-36268Apache InLong TubeMQ Client: Remote Code Execution vulnerabilityApache Software Foundation Apache InLong TubeMQ Client · or…
- CVE-2024-27181Apache Linkis Basic management services: Privilege Escalation Attack vulnerabilityApache Software Foundation Apache Linkis Basic management s…
- CVE-2024-38776WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerabilityMartin Gibson WP GoToWebinar
- CVE-2024-39392Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2024-3238WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletionlooks_awesome WordPress Menu Plugin — Superfly Responsive M…
- CVE-2024-7389Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposurewpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2024-28297SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors.
- CVE-2024-33894Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing sever
- CVE-2024-33896Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper paramet
- CVE-2024-38881An issue in Horizon Business Services Inc.
- CVE-2024-38884An issue in Horizon Business Services Inc.
- CVE-2024-38885An issue in Horizon Business Services Inc.
- CVE-2024-38890An issue in Horizon Business Services Inc.
- CVE-2024-41310AndServer 2.1.12 is vulnerable to Directory Traversal.
- CVE-2024-41518An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers t
Medium, low and unrated 32
- CVE-2024-7319Openstack-heat: incomplete fix for cve-2023-1625openstack-heat · Red Hat OpenStack Platform
- CVE-2024-42349FOG has a Log Information Disclosurefogproject
- CVE-2024-6704Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injectionadvancedcoding Comments – wpDiscuz
- CVE-2024-7323Digiwin EasyFlow .NET - Arbitrary File DownloadDigiwin EasyFlow .NET
- CVE-2024-7204Ai3 QbiBot - Stored XSSAi3 QbiBot
- CVE-2024-40723CHANGING Information Technology HWATAIServiSign Windows Version - Stack-based Buffer OverflowCHANGING Information Technology HWATAIServiSign Windows Ver…
- CVE-2024-40722CHANGING Information Technology TCBServiSign Windows Version - Stack-based Buffer OverflowCHANGING Information Technology TCBServiSign Windows Version
- CVE-2024-40719CHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption StrengthCHANGING Information Technology TCBServiSign Windows Version
- CVE-2024-4643Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2024-27182Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerabilityApache Software Foundation Apache Linkis Basic management…
- CVE-2024-39396Adobe Indesign 2024 PCX File Parsing Out Of Bound ReadAdobe InDesign Desktop
- CVE-2024-5595Essential Blocks < 4.7.0 - Contributor+ Stored XSSEssential Blocks
- CVE-2024-3827Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDsBrainstorm Force Spectra Pro
- CVE-2024-38482CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component.Dell CloudLink
- CVE-2024-7378SourceCodester Simple Realtime Quiz System manage_question.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-7377SourceCodester Simple Realtime Quiz System view_result.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-6567Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosuremotovnet Ebook Store
- CVE-2024-7376SourceCodester Simple Realtime Quiz System print_quiz_records.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-7375SourceCodester Simple Realtime Quiz System my_quiz_result.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-22278Harbor fails to validate the user permissions when updating project configurationsharbor · github.com/goharbor/harbor
- CVE-2024-7374SourceCodester Simple Realtime Quiz System manage_user.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-7373SourceCodester Simple Realtime Quiz System ajax.php sql injectionSourceCodester Simple Realtime Quiz System
- CVE-2024-28298SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_
- CVE-2024-33892Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to
- CVE-2024-33893Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to im
- CVE-2024-33895Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters
- CVE-2024-38888An issue in Horizon Business Services Inc.
- CVE-2024-41517An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote at
- CVE-2024-41519Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" throug
- CVE-2024-42459In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zelliptic
- CVE-2024-42460In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit elliptic
- CVE-2024-42461In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.elliptic