CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- vmware horizon clientVMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with...5.3 Medium
- fujitsu software infrastructure manager, fujitsu limited software infrastructure manager advanced edition, software infrastructure manager advanced edition for primeflex +1 more +3 moreFujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's...7.5 High
- smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 moreWP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution8.0 High
- smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 moreWP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution8.0 High
- smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 moreWP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing7.5 High
- smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 moreWP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation6.6 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()5.5 Medium
- ntpsecIncomplete Internal State Distinction in ntpsec7.5 High
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs...9.8 Critical
- papercut mf, ng +1 morePaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables...9.8 Critical
- shopex ecshopECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.6.5 Medium
- nomachine enterprise client, free edition, nomachine +2 moreAn arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for...9.1 Critical
- creativeitem academy lmsCreative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.6.1 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user...6.5 Medium
- connectedio connected io, er2000t-vz-cat1 firmware +1 moreConnected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has a command as part of its communication protocol allowing the...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's...9.8 Critical
- assmann ht-ip211hdp, ht-ip211hdp firmware +1 moreAssmann Digitus Plug&View IP Camera family allows unauthenticated attackers to download a copy of...7.5 High
- pyrocmsPyroCMS remote code execution vulnerability9.8 Critical
- zohocorp manageengine network configuration managerAn issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The...4.3 Medium
- openrefineOpenRefine Server-Side Request Forgery vulnerability6.5 Medium
- mitsubishi electric corporation got simple series gs21 model, got2000 series gt21 model, mitsubishielectric gs21 firmware +1 more +3 morePredictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation...5.9 Medium
- mitsubishi electric got2000 series gt27 model, mitsubishi electric corporation got simple series gs25 model, gt designer3 version1 (got2000) +12 more +14 moreWeak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27...7.5 High
- hcl software unica campaign, hcltech unica +1 moreA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Campaign8.1 High
- hcl software unica platform, hcltech unica +1 moreA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform8.1 High
- hcl software unica platform, hcltech unica +1 moreA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform8.1 High
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation8.1 High
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreA vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage...9.1 Critical
- cisco small business ip phones, spa500ds firmware, spa500s firmware +10 more +12 moreA vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP...6.1 Medium
- cisco small business ip phones, spa500ds firmware, spa500s firmware +10 more +12 moreA vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone...5.8 Medium
- cisco broadworks, broadworks application delivery platform, broadworks application server +10 more +12 moreA vulnerability in the privilege management functionality of all Cisco BroadWorks server types...4.4 Medium
- cisco asyncos, secure web appliance +1 moreA vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance...5.8 Medium
- cisco broadworks, broadworks application delivery platform, broadworks application server +1 more +3 moreA vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application...5.4 Medium
- hcl software unica platform, hcltech unica +1 moreAn XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform8.1 High
- palantir foundry, com.palantir.foundry:foundry-frontend +1 moreFoundry Issues reporterPath phishing by parameter injection5.0 Medium
- palantir foundry campaigns, com.palantir.campaigns:campaigns +1 moreCVE-2023-309506.5 Medium
- zabbix frontend, palantir com.palantir.foundry:foundry-frontend +1 moreDOM XSS in Developer mode dashboard via redirect GET parameter4.7 Medium
- palantir com.palantir.magritte:magritte-rest-source-bundle, magritte-rest-source-bundle +1 moreCVE-2023-309516.3 Medium
javapackages-toolsSUSESecurity update for javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflagsNo scorepipewireopenSUSESecurity update for pipewireNo scorepython-pip-wheelSUSESecurity update for python-pipNo score- aerospike java client, aerospike-client-java +1 moreAerospike Java Client vulnerable to unsafe deserialization of server responses9.8 Critical
python-pipSUSESecurity update for python-pipNo score@soketi/soketinpmSoketi was exposed to Sandbox Escape vulnerability via vm29.8 Critical- Show moreLoading…