CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023...6.7 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreParcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to...8.4 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...4.3 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation vulnerability within initialize function in HAL VaultKeeper prior to...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows...8.4 High
- samsung android, samsung mobile devices +1 moreImproper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers...7.8 High
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows...6.7 Medium
- opengroup archiAn NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS...6.5 Medium
- haproxyHAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and...7.2 High
- misp-project mispMISP 2.4174 allows XSS in app/View/Events/index.ctp.6.1 Medium
- openbsdOpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal...5.5 Medium
- idreamsoft icmsiCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.9.8 Critical
- idreamsoft icmsiCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at...9.8 Critical
- phpjabbers ticket support scriptA File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute...9.8 Critical
- phpjabbers yacht listing scriptAn information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients'...7.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.6.1 Medium
- ezsoftmagic mp3 audio converterEZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow.9.8 Critical
- netboxA stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute...5.4 Medium
- cactiCacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a...7.5 High
- online hospital management system project hospital management systemCode-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI)...9.8 Critical
- phpjabbers callback widgetThere is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in...6.1 Medium
- phpjabbers callback widgetThere is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message...6.1 Medium
- phpjabbers document creatorPHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post...6.1 Medium
- phpjabbers callback widgetThere is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone...5.4 Medium
- phpjabbers document creatorThere is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in...9.8 Critical
- phpjabbers document creatorThere is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in...6.1 Medium
- phpjabbers document creatorThere is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in...6.1 Medium
- outsystems service studioA DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build...7.8 High
- lindell tss implementations wallet, lindell17 project lindell17 +1 moreLindell17 TSS Abort Mishandling9.6 Critical
- gg tss implementations wallet, gg18 project gg18, gg20 project gg20 +2 moreGG18 / GG20 TSS Beta Parameter Vulnerability9.6 Critical
@opentelemetry/instrumentationnpmUnsanitized user controlled input in module generation8.1 Highgithub.com/supranational/blstGoBlst has logical error in SigValidate in Go bindingsNo score- hcl software dryice iautomateUse of a broken cryptographic algorithm affects HCL DRYiCE iAutomate6.4 Medium
- hcl software dryice mycloudUse of a broken cryptographic algorithm affects HCL DRYiCE MyCloud6.4 Medium
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “reporter events type date” feature of the...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1...8.8 High
- sciencelogic sl1, sl 1 +1 moreA SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic...8.8 High
- Show moreLoading…