CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- jeesiteAn issue in the delete function in the ActModelController class of jeesite v1.2.6 allows...5.4 Medium
- zkteco bioaccess ivsAn access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to...5.3 Medium
- zkteco bioaccess ivsA path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to...7.5 High
- zkteco bioaccess ivsZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information...7.5 High
- zkteco bioaccess ivsZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.9.8 Critical
- zkteco biotimeInsecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read...7.5 High
- zkteco biotimeA path traversal vulnerability in ZKTeco BioTime v8.5.5 allows attackers to write arbitrary files...9.8 Critical
- zkteco biotimeA path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated...7.5 High
- zkteco biotimeAn issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily...7.5 High
- jizhicmsAn arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1...7.2 High
- wbce cmsAn arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1...7.2 High
- dango dango-translatorDango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- ehco1996 django-sspaneldjango-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse-after-free in Linux kernel's netfilter: nf_tables component7.8 High
- nextgen mirth connectA remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers...9.8 Critical
- ws-inc j wbemIn WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity...9.1 Critical
- typechoA File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code...8.8 High
- dedecmsDedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).8.8 High
- erambaAn issue in Eramba Limited Eramba Enterprise v.3.19.1 allows a remote attacker to execute...8.8 High
- xoopsCross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute...9.0 Critical
- motocmsSQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via...9.8 Critical
- totalcms total cmsFile Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code...8.8 High
- oretnom23 lost and found information systemCross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0...6.1 Medium
- oretnom23 toll tax management systemCross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows...6.1 Medium
- phpjabbers cleaning business softwareUser enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs...5.3 Medium
- phpjabbers cleaning business softwareIn PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address...9.8 Critical
- phpjabbers cleaning business softwarePHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- phpjabbers class scheduling systemThere is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in...6.1 Medium
- phpjabbers class scheduling systemUser enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during...7.5 High
- phpjabbers class scheduling systemIn PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address...9.8 Critical
- phpjabbers availability booking calendarPHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through...9.8 Critical
- phpjabbers availability booking calendarPHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.9.8 Critical
- phpjabbers availability booking calendarPHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to...9.8 Critical
- gatesair flexiva fax 150w, flexiva fax 150w firmware +1 moreAn isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain...9.8 Critical
- keyfactor ejbcaIn the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert...8.2 High
- ai-dev aioptimizedcombinationsai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection...9.8 Critical
- ai-dev ai-tableai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- assaabloy control id idsecureControl ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and...9.8 Critical
- assaabloy control id idsecureAn uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing...7.5 High
- assaabloy control id idsecureA path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing...9.1 Critical
- assaabloy control id idsecureSome API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive...6.5 Medium
- supremainc biostar 2A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows...8.8 High
- supremainc biostar 2A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows...7.5 High
- supremainc biostar 2An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows...8.8 High
- supremainc biostar 2An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows...7.5 High
- fabasoft cloud, cloud enterprise client, folio \/ egov-suite +2 moreFabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local...7.8 High
- n-able n-centralAn issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to...7.0 High
- insyde kernelAn issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5....6.5 Medium
- bluetens bluetensqBluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in...3.1 Low
- insyde insydecrpkgAn issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime...7.1 High
- Show moreLoading…