CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21494: Adobe Acrobat Reader DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21371: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21449: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21244: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21387: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21245: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21242: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21318: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21246: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21359: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21122: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21252: Adobe Acrobat Reader DC JBIG2 File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- sudipto pratap mahato simple light weight social share, supito mahato simple light weight social share +1 moreWordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- simplecoding terms descriptionsWordPress Terms descriptions Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- keegnotrub art directionWordPress Art Direction Plugin <= 0.2.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- te-st leykaWordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- sk. abul hasan animated number countersWordPress Animated Number Counters Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- spider teams applyonline, spiderteams applyonline - application form builder and manager +1 moreWordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- swas wp category post list, swashata wp category post list widget +1 moreWordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alexey golubnichenko agp font awesome collectionWordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- unknown easy forms for mailchimpWordPress Easy Forms for Mailchimp Plugin <= 6.8.8 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- anspressWordPress AnsPress – Question and answer Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data5.4 Medium
- creative solutions contact form generatorWordPress Contact Form Generator Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- webdzier buttonWordPress Button Plugin <= 1.1.23 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- oppo storeA remote code execution vulnerability in the webview component of OPPO Store app.7.4 High
- wpazure upfrontwpWordPress Upfrontwp Theme <= 1.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- muneeb layer sliderWordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- catalyst connect zoho crm client portal, catalystconnect catalyst connect zoho crm client portal +1 moreWordPress Catalyst Connect Zoho CRM Client Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- arscode ninja popupsWordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open Redirection4.7 Medium
- arsham mirshah add posts to pagesWordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- brandid social proof (testimonial) slider, social proof \(testimonial\) slider +1 moreWordPress Social Proof (Testimonial) Slider Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- oneplus store, oppo oneplus store +1 moreA remote code execution vulnerability in the webview component7.4 High
- checkmkCommand injection via active checks and REST API8.8 High
- johnkolbert absolute privacyAbsolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change8.8 High
- pragmaticmates realiaRealia <= 1.4.0 - Cross-Site Request Forgery to User Email Change8.8 High
- samsung galaxy storeImproper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local...6.8 Medium
- samsung internetImproper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows...3.8 Low
- samsung membersImproper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows...3.3 Low
- samsung mobile galaxy book go, galaxy book go 5g, galaxy book2 go and galaxy book2 pro 360, galaxy book go, galaxy book go 5g +6 more +8 moreStack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System...6.7 Medium
- samsung android, samsung mobile devices +1 morePendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local...4.7 Medium
- samsung android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023...5.3 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug...7.5 High
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local...5.5 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023...4.4 Medium
- samsung android, samsung mobile devices +1 moreAn improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1...4.4 Medium
- samsung mobile galaxy book go, galaxy book go 5g, galaxy book2 go and galaxy book2 pro 360, samsung galaxy book2 go firmware, galaxy book2 pro 360 firmware +2 more +4 moreOut-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. -...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows...6.7 Medium
- Show moreLoading…