CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3 Medium
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels7.2 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Improper Privilege Management in WP 6xxx Web panels7.2 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: WP 6xxx Web panels prone to download code without integrity check7.2 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels8.2 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Missing Authorization in WP 6xxx Web panels7.5 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels8.8 High
- oppo coloros, find x3 +1 moreCommand Injection In OPPO Service7.4 High
opensshUbuntuopenssh updateNo score- automattic mongooseCesanta Mongoose MQTT Message Parsing Heap Overflow8.8 High
- full - customer, fullservices full – cliente +1 moreFULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check4.3 Medium
- full - customer, fullservices full – cliente +1 moreFULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation8.8 High
- japan computer emergency response team coordination center (jpcert/cc) special interest group network for analysis and liaisonImproper authorization vulnerability in Special Interest Group Network for Analysis and Liaison...4.3 Medium
- japan computer emergency response team coordination center (jpcert/cc) special interest group network for analysis and liaisonImproper authorization vulnerability in Special Interest Group Network for Analysis and Liaison...4.3 Medium
- ffri dual safe, yarai, ffri security, inc. yarai home and business edition +10 more +12 more"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional...3.3 Low
- webcodingplace real estate manager, rameez iqbal real estate manager – property listing and agent management +1 moreReal Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation8.8 High
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerability5.3 Medium
- libbitcoin explorerThe cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6...7.5 High
- opnsenseA command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense before...9.8 Critical
- opnsense/ui/cron/item/open in the Cron component of OPNsense before 23.7 allows XSS.9.6 Critical
- opnsenseThe Crash Reporter (crash_reporter.php) component of OPNsense before 23.7 mishandles input...5.4 Medium
- opnsenseInsecure permissions exist for configd.socket in OPNsense before 23.7.7.5 High
- opnsenseInsecure permissions in the configuration directory (/conf/) of OPNsense before 23.7 allow...9.8 Critical
- opnsenseOPNsense before 23.7 was discovered to contain insecure permissions in the directory /tmp.7.5 High
- opnsenseA cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in...6.1 Medium
- opnsenseA command injection vulnerability in the component diag_backup.php of OPNsense before 23.7 allows...9.8 Critical
- opnsenseA reflected cross-site scripting (XSS) vulnerability in the component /ui/diagnostics/log/core/...6.1 Medium
- opnsenseA Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense before 23.7...6.5 Medium
- opnsenseAn open redirect in the Login page of OPNsense before 23.7 allows attackers to redirect a victim...6.1 Medium
- opnsenseA directory traversal vulnerability in the Captive Portal templates of OPNsense before 23.7...7.2 High
- lw-systems benno mailarchivA CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1.8.8 High
- lw-systems benno mailarchivAn issue was discovered in LWsystems Benno MailArchiv 2.10.1. Attackers can cause XSS via...6.1 Medium
- sherlock gym management systemCode-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL...9.8 Critical
- avira phantom vpnAn issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely...7.3 High
- clario vpnAn issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client...5.7 Medium
- clario vpnAn issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client...6.3 Medium
- wireguardThe WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall...5.7 Medium
- cskaza cszcmsA SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL...9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreLinux: buffer overrun in netback due to unusual packet7.8 High
- kramerav via connect2, via connect2 firmware, via go2 +1 more +3 moreIn instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA...7.8 High
- kramerav via connect2, via connect2 firmware, via go2 +1 more +3 moreKramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a...9.1 Critical
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line...7.2 High
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760. Due to command-line...7.2 High
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. The NetApp Volume...8.8 High
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. To exploit the...4.7 Medium
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. To exploit the...4.7 Medium
- paessler prtg network monitorAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. To exploit the...4.7 Medium
- zoom, zoom video communications, inc. desktop client for windows +1 moreImproper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an...5.9 Medium
- zoom, zoom video communications, inc. sdk's, zoom meeting software development kit +1 more +3 moreExposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated...7.6 High
- zoom, zoom video communications, inc. desktop client for windows and zoom vdi client, zoom virtual desktop infrastructure +2 moreImproper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI...9.6 Critical
- Show moreLoading…