CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare27.3 High
- gingertech external videosWordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- icontrolwp article directory reduxWordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- commoninja paytm payment donation, paytm payment donation +1 moreWordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ihomefinder optima express + marketboost idx plugin, optima express \+ marketboost idx +1 moreWordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- adfoxly – ad manager, adsense ads & ads.txt, wpfoxly adfoxly +1 moreWordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- i thirteen web solution email subscription popupWordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)7.1 High
luceneOSS-FuzzSecurity exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.cloneNo score- essitco affiliate solutionWordPress AFFILIATE Solution Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- couponaffiliates woocommerce affiliate, elliot sowersby, relywp woocommerce affiliate plugin – coupon affiliates +1 moreWordPress Coupon Affiliates Plugin <= 5.4.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- a3rev a3 portfolioWordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- opensuse opensuse-welcome, welcome +1 moreA Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows...7.8 High
- bob watu quizWordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.3 High
- eset security, endpoint antivirus, endpoint security +14 more +16 moreLocal privilege escalation in security products for Windows7.8 High
- nodejs node, node.js, nodejs +2 moreA privilege escalation vulnerability exists in the experimental policy mechanism in all active...7.5 High
- node.js, nodejs node, fedoraproject fedora +2 moreThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...8.8 High
- node.js, nodejs node, nodejs +2 moreThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the...9.8 Critical
- cyberpower powerpanel enterprise, powerpanel server +1 moreWhen adding a remote backup location, an authenticated user can pass arbitrary OS commands...9.1 Critical
- cyberpower powerpanel enterprise, powerpanel server +1 moreA non-feature complete authentication mechanism exists in the production application allowing an...9.8 Critical
- cyberpower powerpanel enterprise, powerpanel server +1 moreAn authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta...9.8 Critical
- dataprobe iboot pdu, cyberpower powerpanel server, dataprobe iboot-pdu4-c20 firmware +21 more +23 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to...6.7 Medium
- dataprobe iboot pdu, iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware +20 more +22 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to...7.5 High
- dataprobe iboot pdu, iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware +20 more +22 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded...6.7 Medium
- dataprobe iboot pdu, cyberpower powerpanel server, dataprobe iboot-pdu4-c20 firmware +21 more +23 moreWhen adding a remote backup location, an authenticated user can pass arbitrary OS commands...7.5 High
- dataprobe iboot pdu, cyberpower powerpanel server, dataprobe iboot-pdu4-c20 firmware +21 more +23 moreWhen adding a remote backup location, an authenticated user can pass arbitrary OS commands...7.2 High
- dataprobe iboot pdu, iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware +20 more +22 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to...9.8 Critical
- litespeedtech openlitespeedLiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.7.5 High
- docker machineDocker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide...6.5 Medium
- qemuQEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because...5.5 Medium
- invisible-island xtermxterm before 380 supports ReGIS reporting for character-set names even if they have unexpected...9.8 Critical
- mariadb maxscaleAn issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password...6.5 Medium
- gnu indentGNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.5.5 Medium
- gnu inetutilsGNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of...7.8 High
- eminfedar async-sockets-cppasync-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in...7.5 High
- 0branch boronlibboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.8.8 High
- 0branch boronlibboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c.6.5 Medium
- samsung harman infotainmentHarman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC...6.8 Medium
- samsung harman infotainmentHarman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.4.3 Medium
- samsung harman infotainmentHarman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel...7.8 High
- getzola zolazola Path Traversal vulnerability7.5 High
- yubico yubihsm 2 sdkThe PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of...7.5 High
- tenda a18, a18 firmware +1 moreTenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g...7.5 High
- tenda a18, a18 firmware +1 moreTenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in...7.5 High
- tenda a18, a18 firmware +1 moreTenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in...7.5 High
- mitel mivoice office 400, mivoice office 400 smb controller firmware +1 moreA Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller...9.8 Critical
- mitel mivoice office 400, mivoice office 400 smb controller firmware +1 moreA SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller...9.8 Critical
- xxyopen novel-plusnovel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.9.8 Critical
- code-projects hospital information systemCode Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- Show moreLoading…