CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- qibosoftCross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker...6.1 Medium
- emerson dl8000 firmware, roc809 firmware, roc809l firmware +6 more +8 moreCVE-2023-19359.4 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreCVE-2023-14379.8 Critical
- ininet scadawebserverCVE-2023-33296.5 Medium
drupal/matomoPackagistThis module enables you to add the Matomo web statistics tracking system to your website. The module does not check the Matomo JS code loaded on the website. So a user could configure the module to lo…No score- go standard library crypto/tls, golang go +1 moreLarge RSA keys can cause high CPU usage in crypto/tls5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP Configuration utility vulnerability5.4 Medium
- f5 big-ip, big-iq, big-ip access policy manager +19 more +21 moreBIG-IP and BIG-IQ iControl SOAP vulnerability4.3 Medium
- f5 big-ip edge client, access policy manager clients, big-ip access policy manager +2 moreBIG-IP Edge Client for macOS vulnerability7.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP Configuration utility vulnerability7.5 High
- f5 big-ip edge client, access policy manager clients, big-ip access policy manager +2 moreBIG-IP Edge Client for Windows and macOS vulnerability7.1 High
- f5 f5os-a, f5os - appliance +1 moreF5OS-A vulnerability4.4 Medium
- f5 big-ip, big-ip 10200v-f firmware, big-ip 10350v-f firmware +28 more +30 moreBIG-IP FIPS HSM password vulnerability CVE-2023-34706.0 Medium
- golang.org/x/net golang.org/x/net/html, golang networking +1 moreImproper rendering of text nodes in golang.org/x/net/html6.1 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff6.5 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive resource consumption in golang.org/x/image/tiff6.5 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure3.1 Low
- ibm sdk, sdk, java technology edition +1 moreIBM SDK, Java Technology Edition code execution8.1 High
libredwgOSS-FuzzHeap-buffer-overflow in bit_read_BBNo score- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreFunctions with insufficient randomness were used to generate authorization tokens of the...7.5 High
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "OX Count" web service did not specify a media-type when processing responses by external...5.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "OX Chat" web service did not specify a media-type when processing responses by external...5.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreCustom log-in and log-out locations are used-defined as jslob but were not checked to contain...5.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "upsell" widget for the portal allows to specify a product description. This description...5.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe users clientID at "application passwords" was not sanitized or escaped before being added to...5.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreFrontend themes are defined by user-controllable jslob settings and could point to a malicious...5.4 Medium
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreFull-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements....5.5 Medium
- open-xchange appsuite office, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreIn case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP...3.2 Low
- open-xchange appsuite office, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreCacheservice did not correctly check if relative cache object were pointing to the defined...5.7 Medium
- open-xchange appsuite office, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe cacheservice API could be abused to indirectly inject parameters with SQL syntax which was...7.1 High
- open-xchange appsuite office, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe cacheservice API could be abused to inject parameters with SQL syntax which was...7.6 High
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreExternal service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use...4.3 Medium
- ox software gmbh app suite, open-xchange appsuite backend, open-xchange gmbh ox app suite +2 moreAttackers with access to user accounts can inject arbitrary control characters to SIEVE mail...3.5 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions4.3 Medium
- mage-people bus ticket booking with seat reservationBus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting6.1 Medium
- gitlabMissing Authorization in GitLab4.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLab4.8 Medium
- seiko epson corporation epson printer web config, epson ep-801a firmware, ep-802a firmware +10 more +12 moreImproper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote...7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a...5.5 Medium
- fedoraproject fedora, linux kernal, procps project procps +3 more +5 moreUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a...2.5 Low
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to interact...5.5 Medium
- brocade fabric os, broadcom brocade fabric operating system +1 moreArbitrary File Overwrite using less command7.1 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab4.8 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.9 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- brocade fabric os, broadcom brocade fabric operating system +1 moreAn information disclosure in the web interface of Brocade Fabric OS5.3 Medium
- miniupnp project ngiflibngiflib commit 84a75 was discovered to contain a segmentation violation via the function...5.5 Medium
- miniupnp project ngiflibngiflib commit fb271 was discovered to contain a segmentation violation via the function "main"...5.5 Medium
- Show moreLoading…