CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “ticket template watchers” feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report”...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report”...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “schedule editor decoupled” feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1...8.8 High
- sciencelogic sl1, sl 1 +1 moreA command injection vulnerability exists in the download and convert report feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA command injection vulnerability exists in the ticket report generate feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1...8.8 High
- sciencelogic sl1, sl 1 +1 moreA command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic...8.8 High
- getsentry sentrySentry vulnerable to incorrect credential validation on OAuth token requests6.5 Medium
- trailofbits uthenticodeuthenticode signature validation bypass vulnerability9.1 Critical
- trailofbits uthenticodeuthenticode EKU validation bypass5.9 Medium
- hashicorp consul, consul enterprise +1 moreJWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access7.4 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry6.0 Medium
graphite-webUbuntugraphite-web regressionNo score- schneider electric gp-pro ex wingp for ipc, gp-pro ex wingp for pc/at, schneider-electric pro-face gp-pro ex +2 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...5.3 Medium
flacOSS-FuzzHeap-use-after-free in parse_optionsNo scorepcre2OSS-FuzzHeap-buffer-overflow in get_grouplengthNo scorepcre2OSS-FuzzHeap-buffer-overflow in matchNo score- cloudflare lol-htmllol-html panics on certain HTML inputs7.5 High
- google grpcDenial-of-Service in gRPC7.5 High
@nguniversal/commonnpmAngular critical CSS inlining Cross-site Scripting Vulnerability AdvisoryNo scorepipewireopenSUSESecurity update for pipewireNo scorepipewireopenSUSESecurity update for pipewireNo score- hashgraph guardian, nozomi networks cmc +1 moreDoS via SAML configuration in Guardian/CMC before 22.6.26.9 Medium
- hashgraph guardian, nozomi networks cmc +1 morePartial DoS on Reports section due to null report name in Guardian/CMC before 22.6.25.3 Medium
- hashgraph guardian, nozomi networks cmc +1 moreInformation disclosure via the debug function in assertions in Guardian/CMC before 22.6.27.1 High
- hashgraph guardian, nozomi networks cmc +1 moreStored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.27.3 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.28.7 High
- adobe dimensionZDI-CAN-21093: Adobe Dimension GLB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-21078: Adobe Dimension GLB File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-21094: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- kunduz, sifir bes education and informatics kunduz - homework helper app +1 moreHard-coded Cryptographic Key in Kunduz - Homework Helper App9.8 Critical
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.28.7 High
- hashgraph guardian, nozomi networks cmc +1 moreSession Fixation in Guardian/CMC before 22.6.25.4 Medium
- adobe commerceAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system read7.5 High
- adobe commerce, magento commerce +1 moreValidate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.1 Critical
- adobe commerce, magento commerce +1 moreAdobe Commerce Incorrect Authorization Security feature bypass6.5 Medium
- apache traffic serverApache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies9.1 Critical
- apache traffic serverApache Traffic Server: Invalid Range header causes a crash7.5 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels4.9 Medium
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels3.8 Low
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3 Medium
- Show moreLoading…