CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- oxid-esales eshopOXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified...5.3 Medium
- gatesair flexiva fax 150w, flexiva fax 150w firmware +1 moreCross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a...5.4 Medium
- shelly pro 4pm, pro 4pm firmware +1 moreShelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds...5.3 Medium
- verint engagement managementVerint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data...5.4 Medium
- xiaomi router, mi xiaomi router firmware +1 moreXiaomi router external request interface has command injection7.0 High
- mi xiaomi cloudA XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is...6.1 Medium
- ngsurveyData Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial...7.5 High
- ngsurveyInformation disclosure in password protected surveys in Data Illusion Survey Software Solutions...7.5 High
- brocade fabric os, broadcom brocade fabric operating system +1 morePrivilege issues in multiple commands7.8 High
- brocade fabric os, broadcom brocade fabric operating system +1 moreXSS vulnerability in Brocade Webtools6.3 Medium
- brocade fabric os, broadcom brocade fabric operating system +1 moreCLI allows upload or transfer files of dangerous types5.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab3.1 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab5.4 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab6.3 Medium
- brocade fabric os, broadcom brocade fabric operating system +1 morebuffer overflow vulnerability in “secpolicydelete” command5.5 Medium
- brocade fabric os, broadcom brocade fabric operating system +1 moreA buffer overflow vulnerability in “diagstatus” command5.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreKnowledge of full path name7.8 High
- google chromeUse after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.98 allowed an...8.8 High
- google chromeUse after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.98 allowed a...8.8 High
cryptographyPyPIpyca/cryptography's wheels include vulnerable OpenSSLNo score- freebsdbhyve privileged guest escape via fwctl8.8 High
- freebsd, netapp clustered data ontap +1 moreRemote denial of service in IPv6 fragment reassembly7.5 High
- brocade fabric os, broadcom fabric operating system +1 morescp, sftp, ftp servers passwords in supportsave6.8 Medium
- brocade fabric os, broadcom fabric operating system +1 morePrivilege escalation via the fosexec command7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreMultiple commands print sensitive information in the terminal5.5 Medium
- mindsdbMindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue9.1 Critical
com.tencyle.fixes:org.codehaus.jettison--jettisonMavenJettison parser crash by stackoverflow6.5 Medium- ens.domains ethereum name service, ensdomains ens-contracts +1 more.eth registrar controller can shorten the duration of registered names4.9 Medium
- hewlett packard enterprise (hpe) aruba cx switches, hpe arubaos-cx +1 moreAuthenticated Command Injection Vulnerability in AOS-CX Command Line Interface8.8 High
- amd processors, * +1 moreSoftware based Power Side Channel on AMD CPUs4.7 Medium
- simonsmith cypress-image-snapshot, cypress image snapshot +1 morecypress-image-snapshot vulnerable to insecure snapshot file names6.5 Medium
- artifex ghostscript, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos5.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening appref-ms files, Firefox did not warn the user that these files may contain...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox updater created a directory writable by non-privileged users. When uninstalling...6.5 Medium
openscOSS-FuzzHeap-buffer-overflow in test_verifyNo score- pnpmpnpm incorrectly parses tar archives relative to specification7.5 High
pipewireopenSUSESecurity update for pipewireNo score- checkmkXSS in business intelligence5.4 Medium
containerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- underscore-keypath project underscore-keypathunderscore-keypath vulnerable to Prototype Pollution7.5 High
- hcl software verseHCL Verse is susceptible to a Stored Cross-Site Scripting (XSS) Vulnerability8.3 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreOS Command Injection in mlflow/mlflow8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by external program6.5 Medium
- Show moreLoading…