CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- dieboldnixdorf vynamic viewAn issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to...7.8 High
- adiscon loganalyzerA Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a...6.1 Medium
- phpjabbers class scheduling systemPHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user...6.5 Medium
- microsoft .net, .net 6.0, .net 7.0 +4 more +6 more.NET and Visual Studio Remote Code Execution Vulnerability7.8 High
- foswikiAn issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to...7.5 High
- alteryx serverAlteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This...4.8 Medium
- foswikiInsufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below...7.5 High
- debian linux, fedoraproject fedora, intel microcode +136 more +138 moreImproper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a...6.0 Medium
- debian linux, fedoraproject fedora, intel xeon bronze 3408u firmware +189 more +191 moreUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors...7.2 High
- debian linux, intel celeron 5205u firmware, celeron 5305u firmware +531 more +533 moreImportant: kernel security, bug fix, and enhancement update6.5 Medium
- nexb scancode.ioScanCode.io command injection in docker image fetch process6.8 Medium
- prestashopPrestaShop vulnerable to file deletion via CustomerMessage6.5 Medium
- prestashopPrestaShop vulnerable to file deletion via attachment API6.7 Medium
- prestashopPrestaShop vulnerable to file reading through path traversal6.8 Medium
- prestashopPrestaShop XSS vulnerability through Validate::isCleanHTML method8.3 High
- prestashopPrestaShopSQL manager vulnerability (potential RCE)9.1 Critical
- prestashopPrestaShop vulnerable to path traversal6.5 Medium
- gstreamerGStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamerGStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability8.8 High
- prestashopPrestaShop vulnerable to boolean SQL injection in search product in BO6.7 Medium
- cryptomatorCryptomator vulnerable to Local Elevation of Privileges5.5 Medium
- code-projects inventory management systemSourceCodester Inventory Management System ex_catagory_data.php sql injection6.3 Medium
- datadog import-in-the-middleimport-in-the-middle allows unsanitized user controlled input in module generation8.1 High
- vyperlang vyperVyper incorrectly allocated named re-entrancy locks9.1 Critical
- code-projects inventory management systemSourceCodester Inventory Management System product_data.php. sql injection6.3 Medium
- getsentry sentrySentry vulnerable to privilege escalation via ApiTokensEndpoint8.1 High
- code-projects inventory management systemSourceCodester Inventory Management System catagory_data.php sql injection6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability6.5 Medium
- hikashop, hikashop.com hikashop component for joomla +1 moreExtension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.29.8 Critical
- creative-solutions creative gallery, creative-solutions.net creative gallery component for joomla +1 moreExtension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.09.8 Critical
- admiror-design-studio admiror gallery, admiror-design-studio.com admiror gallery component for joomla +1 moreExtension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.06.1 Medium
- bestaddon gallery, bestaddon.com ba gallery component for joomla +1 moreExtension - bestaddon.com - SQLi in BA Gallery component for Joomla <= 1.2.09.8 Critical
- mooj proforms, mooj.org proforms basic component for joomla +1 moreExtension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.09.8 Critical
- braincert virtual classroom, braincert.com virtual classroom component for joomla +1 moreExtension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.09.8 Critical
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLi8.8 High
- unknown wp food managerWP Food Manager < 1.0.4 - Admin+ Stored XSS5.4 Medium
- unknown wpcodeWPCode < 2.0.13.1 - Reflected XSS6.1 Medium
- themeum qubelyQubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending7.5 High
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS6.1 Medium
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion8.1 High
- expresstech quiz and survey masterQuiz And Survey Master < 8.1.11 - Contributor+ Stored XSS5.4 Medium
- unknown bubble menuBubble Menu < 3.0.5 - Admin+ Stored XSS4.8 Medium
- cmscommander wp shopping pagesWP Shopping Pages <= 1.14 - Stored XSS via CSRF6.8 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free7.8 High
- hiroaki miyashita custom field templateWordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- opencloudos stream, vim +1 moreA divide by zero issue existed in vim of OpenCloudOS Stream7.8 High
tuicrates.io`tui` is unmaintained; use `ratatui` insteadNo scoremail-internalscrates.iomail-internals use-after-free vulnerability in `vec_insert_bytes`No score- pega platform, pegasystems pega platform +1 morePega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default...9.8 Critical
- Show moreLoading…