cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of August 5, 2024
10web - Slider by 10Web Responsive Image Slider
Vulnerability: Time-based SQL Injection
CVSS Score: 8.8
CVE-ID: CVE-2024-7150Alien Technology - ALR-F800
Vulnerability: OS Command Injection
CVSS Score: 9.8
CVE-ID: CVE-2024-7580Alien Technology - ALR-F800
Vulnerability: Improper Authorization
CVSS Score: 7.3
CVE-ID: CVE-2024-7578AMD - 3rd Gen AMD EPYC Processors
Vulnerability: Improper Restriction of Write Operations
CVSS Score: 7.9
CVE-ID: CVE-2024-21980Apache Software Foundation - Apache CloudStack
Vulnerability: Access Permission Validation Issue
CVSS Score: 8.8
CVE-ID: CVE-2024-42062Apache Software Foundation - Apache OFBiz
Vulnerability: Incorrect Authorization
CVSS Score: 8.1
CVE-ID: CVE-2024-38856Arm Ltd - Bifrost GPU Kernel Driver
Vulnerability: Use After Free
CVSS Score: 7.8
CVE-ID: CVE-2024-2937Arm Ltd - Bifrost GPU Kernel Driver
Vulnerability: Use After Free
CVSS Score: 7.8
CVE-ID: CVE-2024-4607Asterisk
Vulnerability: AMI User Privilege Escalation
CVSS Score: 7.4
CVE-ID: CVE-2024-42365Calibre
Vulnerability: Improper Access Control
CVSS Score: 9.8
CVE-ID: CVE-2024-6782Calibre
Vulnerability: Path Traversal
CVSS Score: 7.5
CVE-ID: CVE-2024-6781Canonical Ltd. - wpa_supplicant
Vulnerability: Arbitrary Shared Object Loading
CVSS Score: 8.8
CVE-ID: CVE-2024-5290Cisco - Cisco Small Business IP Phones
Vulnerability: Arbitrary Command Execution and Denial of Service
CVSS Score: 9.8
CVE-ID: CVE-2024-20450Cisco - Cisco Small Business IP Phones
Vulnerability: Arbitrary Command Execution and Denial of Service
CVSS Score: 9.8
CVE-ID: CVE-2024-20454Cisco - Cisco Small Business IP Phones
Vulnerability: Denial of Service
CVSS Score: 7.5
CVE-ID: CVE-2024-20451codename065 - MultiPurpose
Vulnerability: PHP Object Injection
CVSS Score: 8.8
CVE-ID: CVE-2024-7486codename065 - News Flash
Vulnerability: PHP Object Injection
CVSS Score: 7.2
CVE-ID: CVE-2024-7560crmperks - CRM Perks Forms WordPress Form Builder
Vulnerability: Arbitrary File Upload
CVSS Score: 7.2
CVE-ID: CVE-2024-7484Delta Electronics - DIAScreen
Vulnerability: Stack-Based Buffer Overflow
CVSS Score: 7.8
CVE-ID: CVE-2024-7502ForIP Tecnologia - Administrao PABX
Vulnerability: SQL Injection
CVSS Score: 7.3
CVE-ID: CVE-2024-7461