CVEs published in July 2024
44 tracked CVEs from 11 vendors had their first vendor advisory published in July 2024: 2 critical, 26 high. Newest first.
13 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-5486Medium
vulnerability exists in ClearPass Policy Manager
Aruba · 1 advisory - Added
CVE-2024-41916Medium
vulnerability exists in ClearPass Policy Manager
Aruba · 1 advisory - Added
CVE-2024-41915High
vulnerability in the web-based management interface of ClearPass Policy Manager could
Aruba · 1 advisory - Added
CVE-2024-4032High
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-41136Medium
authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line…
Aruba · 1 advisory - Added
CVE-2024-41135High
vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface
Aruba · 1 advisory - Added
CVE-2024-41134High
vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface
Aruba · 1 advisory - Added
CVE-2024-41133High
vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface
Aruba · 1 advisory - Added
CVE-2024-33519High
vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could
Aruba · 1 advisory - Added
CVE-2024-21684Medium
Bitbucket: There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center.
Atlassian · 1 advisory - Added
CVE-2024-22444Medium
vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2024-41914High
vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2024-22443High
vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2024-21147High
NetApp · 1 advisory - Added
CVE-2024-21145High
NetApp · 1 advisory - Added
CVE-2024-21140High
NetApp · 1 advisory - Added
CVE-2024-21138High
NetApp · 1 advisory - Added
CVE-2024-21131High
NetApp · 1 advisory - Added
CVE-2024-29014Unrated
Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update
SonicWall · 1 advisory - Added
CVE-2024-20419Critical
vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users
Cisco · 1 advisory - Added
CVE-2024-39877Unrated
Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
Apache · 1 advisory - Added
CVE-2024-21687High
Confluence: This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of…
Atlassian · 1 advisory - Added
CVE-2024-21686High
Confluence Data Center: This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.
Atlassian · 1 advisory - Added
CVE-2024-6235Critical
Sensitive information disclosure
NetScaler · 1 advisory - Added
CVE-2024-38100High
Windows File Explorer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-5974High
Firebox Authenticated Buffer Overflow Vulnerability
WatchGuard · 1 advisory - Added
CVE-2024-4944High
Mobile VPN with SSL Local Privilege Escalation Vulnerability
WatchGuard · 2 advisories - Added
CVE-2024-38472Unrated
Apache HTTP Server on WIndows UNC SSRF
Apache · 1 advisory - Added
CVE-2024-36997High
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user
Splunk · 1 advisory - Added
CVE-2024-36996Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker
Splunk · 1 advisory - Added
CVE-2024-36995Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and…
Splunk · 1 advisory - Added
CVE-2024-36994Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and…
Splunk · 1 advisory - Added
CVE-2024-36993Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and…
Splunk · 1 advisory - Added
CVE-2024-36992Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and…
Splunk · 1 advisory - Added
CVE-2024-36991High
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker
Splunk · 1 advisory - Added
CVE-2024-36990Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an…
Splunk · 1 advisory - Added
CVE-2024-36989High
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a…
Splunk · 1 advisory - Added
CVE-2024-36987Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an…
Splunk · 1 advisory - Added
CVE-2024-36986Medium
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and…
Splunk · 1 advisory - Added
CVE-2024-36985High
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk…
Splunk · 1 advisory - Added
CVE-2024-36984High
Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows
Splunk · 1 advisory - Added
CVE-2024-36983High
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and…
Splunk · 1 advisory - Added
CVE-2024-36982High
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and…
Splunk · 1 advisory - Added
CVE-2024-6387High
OpenSSH Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories