PUBLIÉES EN
août 2024
2 945 CVE, des plus récentes aux plus anciennes.
CVE-2024-8366A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfile…
6.9 MOYENNE
CVE-2024-44946Ce problème affecte l'implémentation des sockets du Kernel Connection Multiplexor (KCM) du noyau Linux. Un utilisateur local disposant de privilèges restreints peut déclencher une …
7.8 ÉLEVÉE
CVE-2022-4539The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where th…
5.3 MOYENNE
CVE-2024-8108The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient …
6.4 MOYENNE
CVE-2024-7717Les sites WordPress utilisant l'extension WP Events Manager (version 2.1.11 et antérieures) sont vulnérables à une faille d'injection SQL. Un attaquant disposant d'un compte enregi…
8.8 ÉLEVÉE
CVE-2024-0111NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit…
4.4 MOYENNE
CVE-2024-0110NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vu…
4.4 MOYENNE
CVE-2024-0109NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability ma…
3.3 FAIBLE
CVE-2022-4536The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP…
5.3 MOYENNE
CVE-2022-4100The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP addr…
5.3 MOYENNE
CVE-2024-8276The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gu…
6.4 MOYENNE
CVE-2024-39579Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vul…
6.7 MOYENNE
CVE-2024-39578Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit t…
6.3 MOYENNE
CVE-2024-44945Les systèmes Linux sont affectés par un défaut d'initialisation de la mémoire dans le sous-système netfilter du noyau. Un utilisateur local disposant de privilèges limités peut exp…
7.1 ÉLEVÉE
CVE-2024-5212The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insuffic…
6.1 MOYENNE
CVE-2024-3886The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insuffic…
6.1 MOYENNE
CVE-2024-7435Les sites WordPress utilisant le thème Attire (version 2.0.6 et antérieures) sont vulnérables à l'injection d'objets PHP. Un attaquant disposant d'un accès avec un compte de niveau…
8.8 ÉLEVÉE
CVE-2024-39747IBM Sterling Connect:Direct Web Services (versions 6.0 à 6.3) est livré avec des identifiants d'administration par défaut. Un attaquant non authentifié ayant un accès réseau au ser…
8.1 ÉLEVÉE
CVE-2024-8006Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available …
4.4 MOYENNE
CVE-2024-45304Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup. This vulnerability can lead to unauthorized ownership transfer, contrary to the…
5.3 MOYENNE
CVE-2023-7256In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clea…
4.4 MOYENNE
CVE-2024-6586Les installations de Lightdash (version 0.1024.6) sont affectées par une faille permettant à un utilisateur disposant de permissions d'Éditeur ou d'Administrateur de créer un table…
7.3 ÉLEVÉE
CVE-2024-6585Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated…
5.4 MOYENNE
CVE-2024-8348A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function delete_categor…
5.3 MOYENNE
CVE-2024-8347A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the fi…
5.3 MOYENNE
CVE-2024-8285A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's…
5.9 MOYENNE
CVE-2024-44684TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields.
6.1 MOYENNE
CVE-2024-44683Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.
6.1 MOYENNE
CVE-2024-44682ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing POST parameters.
6.1 MOYENNE
CVE-2024-8346A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classe…
5.3 MOYENNE
CVE-2022-4538Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2022-4528Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2022-4412Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2024-42379Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2022-4540Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2022-4530Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2022-4424Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions …
CVE-2024-38868Les versions de ManageEngine Endpoint Central antérieures à 11.3.2406.08 et 11.3.2400.15 contiennent une faille d'autorisation concernant l'isolation des appareils. Un utilisateur …
7.6 ÉLEVÉE
CVE-2024-21658discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This al…
4.3 MOYENNE
CVE-2024-8345A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f…
5.3 MOYENNE
CVE-2024-8344A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin…
5.3 MOYENNE
CVE-2024-8235A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory resul…
6.2 MOYENNE
CVE-2024-6204ManageEngine Exchange Reporter Plus (versions antérieures à 5715) contient une faille dans son module de rapports qui permet à un attaquant d'exécuter des requêtes de base de donné…
8.3 ÉLEVÉE
CVE-2024-45047svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-sid…
5.4 MOYENNE
CVE-2024-44918A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
3.5 FAIBLE
CVE-2024-8343A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0. Affected is an unknown function of the file /classes/Users.p…
6.9 MOYENNE
CVE-2024-8342A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some unknown processing of the file /controlle…
5.3 MOYENNE
CVE-2024-8064Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-7712Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-7051Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.