CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by file open dialog7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreRace conditions in reference counting code were found through code inspection. These could have...5.9 Medium
- mozilla firefox, firefox esr, debian linux +2 moreAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 High
- mozilla firefox, firefox esr, debian linux +2 moreIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Medium
- mozilla firefox, firefox esr, debian linux +2 moreOffscreen Canvas did not properly track cross-origin tainting, which could have been used to...5.3 Medium
- webkul uvdeskAn arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code...7.8 High
- rconfigrconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path...8.8 High
- rconfigrconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a...8.8 High
- rconfigrconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b...8.8 High
- jeesiteAn issue in the delete function in the MenuController class of jeesite v1.2.6 allows...4.3 Medium
- rws worldserverSession tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated,...5.3 Medium
- phpgurukul online shopping portalOnline Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via...8.8 High
- lavaliteLavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.7.5 High
- lavaliteLavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.7.5 High
- viatomtech vihealthAn issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to...7.8 High
- cubiclesoft barebones cmsThe Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting (XSS) when an authenticated...5.4 Medium
- motocmsMotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template...9.8 Critical
- e107Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary...5.4 Medium
- faculty evaluation system project evaluation systemCross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an...5.4 Medium
- chamiloA command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18...9.8 Critical
- phpjabbers catering systemPHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- getgreenshot greenshotGreenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely...7.8 High
- ezviz cs-c6n-a0-1c2wfr-mul firmware, cs-c6n-b0-1g2wf firmware, cs-c6n-r101-1g2wf firmware +7 more +9 moreIn certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and...8.8 High
- ezviz cs-c6n-a0-1c2wfr-mul firmware, cs-c6n-b0-1g2wf firmware, cs-c6n-r101-1g2wf firmware +7 more +9 moreIn certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the...8.0 High
- phpjabbers time slots booking calendarThere is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in...6.1 Medium
- phpjabbers time slots booking calendarIn PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email...8.8 High
- phpjabbers time slots booking calendarUser enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs...9.8 Critical
- phpjabbers time slots booking calendarImproper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3...9.8 Critical
- phpjabbers time slots booking calendarThere is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in...6.1 Medium
- ajaxmanager project ajaxmanagerAn Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and...9.8 Critical
- tp-link archer ax21, archer ax21 firmware +1 moreTP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are...9.8 Critical
- qualcomm apq8096au firmware, aqt1000 firmware, mdm9628 firmware +63 more +65 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN6.7 Medium
- google androidIn openContentUri of ActivityManagerService.java, there is a possible way for a third party app...5.5 Medium
- google androidIn update of MmsProvider.java, there is a possible way to bypass file permission checks due to a...5.5 Medium
- google androidIn multiple locations, there is a possible bypass of a multi user security boundary due to a...5.5 Medium
- google androidIn visitUris of Notification.java, there is a possible way to reveal images across users due to a...5.5 Medium
- google admob, android +1 moreIn multiple locations, there is a possible code execution due to type confusion. This could lead...9.8 Critical
- google androidIn visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a...7.8 High
- google androidIn setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images...5.5 Medium
- google androidIn multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling...5.5 Medium
- google androidIn multiple functions of StatusHints.java, there is a possible way to reveal images across users...5.5 Medium
- google androidIn TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect...8.8 High
- google androidIn multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after...7.8 High
- google androidIn setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS...5.5 Medium
- google androidIn visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused...5.5 Medium
- google androidIn multiple locations, there is a possible way to obscure the microphone privacy indicator due to...3.3 Low
- google androidIn visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a...5.5 Medium
- google androidIn writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to...5.5 Medium
- Show moreLoading…