CVEs published August 3, 2024
21 CVEs were published on August 3, 2024: 1 critical, 5 high.
- Published
- 21
- Critical
- 1
- High
- 5
- Medium
- 15
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- itsourcecode Ticket Reservation System
- 3
- SimpleMachines SMF
- 2
- Vivotek CC8160
- 2
- Vivotek SD9364
- 2
- D-Link DI-8100
- 1
- dylanjkotze Zephyr Project Manager
- 1
- Elastic APM Server · github.com/elastic/apm-server
- 1
- IBM Business Automation Workflow
- 1
- jetmonsters JetFormBuilder — Dynamic Blocks Form Builder
- 1
- kp4coder Sync Post With Other Site
- 1
Critical 1
High 5
- CVE-2024-7441Vivotek SD9364 httpd read stack-based overflowVivotek SD9364
- CVE-2024-7439Vivotek CC8160 httpd read stack-based overflowVivotek CC8160
- CVE-2024-7031File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Updateninjateam File Manager Pro – Filester
- CVE-2024-7291JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalationjetmonsters JetFormBuilder — Dynamic Blocks Form Builder
- CVE-2024-6477UsersWP < 1.2.12 - Users Information DisclosureUsersWP
Medium, low and unrated 15
- CVE-2024-7446itsourcecode Ticket Reservation System list_tickets.php sql injectionitsourcecode Ticket Reservation System
- CVE-2024-7445itsourcecode Ticket Reservation System checkout_ticket_save.php sql injectionitsourcecode Ticket Reservation System
- CVE-2024-7444itsourcecode Ticket Reservation System Login Page login.php sql injectionitsourcecode Ticket Reservation System
- CVE-2024-7443Vivotek IB8367A upload_file.cgi getenv command injectionVivotek IB8367A
- CVE-2024-7442Vivotek SD9364 upload_file.cgi getenv command injectionVivotek SD9364
- CVE-2024-7440Vivotek CC8160 upload_file.cgi getenv command injectionVivotek CC8160
- CVE-2024-7438SimpleMachines SMF User Alert Read Status index.php resource injectionSimpleMachines SMF
- CVE-2024-37286APM Server Insertion of Sensitive Information into Log FileElastic APM Server · github.com/elastic/apm-server
- CVE-2024-7437SimpleMachines SMF Delete User index.php resource injectionSimpleMachines SMF
- CVE-2024-7436D-Link DI-8100 msp_info.htm msp_info_htm command injectionD-Link DI-8100
- CVE-2024-38321IBM Business Automation Workflow information disclosureIBM Business Automation Workflow
- CVE-2024-6872Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Theme UpdateTemplateSpare – 1000+ WordPress Starter Templates & Full Si…
- CVE-2024-6709Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Updatekp4coder Sync Post With Other Site
- CVE-2024-7356Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameterdylanjkotze Zephyr Project Manager
- CVE-2024-6390Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSSQuiz and Survey Master