CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- jbt live \(github-flavored\) markdown editorCross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit...6.1 Medium
- solarwinds serv-u2FA/MFA Bypass Vulnerability in Serv-U 15.47.2 High
- openzeppelin contracts, openzeppelin-contracts, contracts-upgradable +2 moreOpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender5.3 Medium
moqNuGetMoq v4.20.0-rc to 4.20.1 share hashed user dataNo score- ivanti desktop & server management (dsm), desktop \& server management +1 moreDesktop & Server Management (DSM) may have a possible execution of arbitrary commands.7.8 High
- ivanti avalancheAn attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could...8.8 High
- ivanti avalancheA previously generated artifact by an administrator could be accessed by an attacker. The...7.1 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...6.8 Medium
- ivanti avalancheAn unauthenticated attacker could achieve the code execution through a RemoteControl server.8.8 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...6.8 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...6.3 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...6.3 Medium
- ivanti avalanche, wavelink +1 moreIvanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.6.5 Medium
- ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 moreAn integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch...9.0 Critical
- ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 moreA command injection vulnerability in the DHCP Client function of all UniFi Access Points and...8.3 High
- hcl software nomad for web, hcltech hcl nomad +1 moreHCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented6.6 Medium
- 1panel-dev 1panel1Panel arbitrary file write vulnerability exists in the background7.5 High
- 1panel-dev 1panel1Panel Unauthorized access in Backend6.5 Medium
- 1panel-dev 1panel1Panel O&M management panel has a background arbitrary file reading vulnerability7.5 High
- nextcloud server, kiteworks security-advisories +1 moreMissing password confirmation when creating app passwords8.1 High
- nextcloud server, kiteworks security-advisories +1 moreUsers can delete external storage mount points7.7 High
- nextcloud server, kiteworks security-advisories +1 moreText does not respect "Allow download" permissions3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreExistence of calendars and address books can be checked by unauthenticated users3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on password reset token OAuth2 API controller5.8 Medium
- nextcloud talk, kiteworks security-advisories +1 morePath traversal allows tricking the Talk Android app into writing files into it's root directory7.2 High
- nextcloud notes, kiteworks security-advisories +1 moreNotes attachment render HTML in preview mode3.5 Low
- kiteworks security-advisories, nextcloud user oidc +1 moreuser_oidc app stores client secret unencrypted in database3.8 Low
container-suseconnectSUSESecurity update for container-suseconnectNo score- kiteworks security-advisories, nextcloud user oidc +1 moreIssuer not verified from obtained token in user_oidc4.8 Medium
- nextcloud server, kiteworks security-advisories +1 moreAdvanced permissions not respected when copying entire group folders6.5 Medium
- adobe xmp toolkit, xmp toolkit software development kit +1 moreOther | Uncontrolled Resource Consumption (CWE-400)5.5 Medium
- eggemplo gestion-pymesWordPress Gestion-Pymes Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Untrusted Search Path Application denial-of-service4.7 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21240: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21317: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21334: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20970: Adobe Acrobat Reader DC AcroForm Annotation Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21310: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21118: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21337: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21241: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21103: Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21063: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21243: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21247: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21356: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-21357: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…