CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- bitwardenAn issue in Bitwarden Bitwarden Desktop v.2023.5.1 allows a local attacker to obtain sensitive...5.5 Medium
- tigergraphAn issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full...8.8 High
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey...5.5 Medium
- apple macos, mac os x, security update - catalina +1 more +3 moreA type confusion issue was addressed with improved state handling. This issue is fixed in...7.8 High
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13....3.3 Low
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn access issue was addressed with improvements to the sandbox. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13....8.8 High
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3....7.1 High
- apple ipados, macos, ios and ipados +1 more +3 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and...8.8 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...2.4 Low
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- tornadoweb tornadoTornado before 6.3.3 HTTP Request Smuggling via Content-Length9.0 Critical
- google androidIn registerServiceLocked of ManagedServices.java, there is a possible bypass of background...7.8 High
- google androidIn onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged...5.5 Medium
- google androidIn getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged...7.8 High
- google androidIn multiple locations, there is a possible way to retrieve sensor data without permissions due to...3.3 Low
github.com/treeverse/lakefsGolakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files5.8 Medium- google androidIn multiple locations of avrc, there is a possible leak of heap data due to uninitialized data....7.5 High
- google androidIn launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable...5.5 Medium
- google androidIn onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN...7.8 High
- google androidIn checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb...7.8 High
- google androidIn doKeyguardLocked of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode...5.5 Medium
- mskocik svelecteExecution of arbitrary JavaScript from Svelecte item names5.4 Medium
- siemens efibootguardInsufficient input validation in efibootguard6.1 Medium
- shubhamjain svg-loader, svg loader +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in external-svg-loader7.1 High
- privateuploaderImproper Authentication in PrivateUploader9.9 Critical
- yaklangYaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading6.5 Medium
- nexb scancode.ioReflected Cross-Site Scripting (XSS) in scancode.io license endpoint5.4 Medium
- brutalplugins wp brutal aiWP Brutal AI < 2.06 - Admin+ Stored XSS4.8 Medium
- custom field for wp job manager project field for wp job manager, theme funda custom field for wp job manager +1 moreCustom Field For WP Job Manager < 1.2 - Admin+ Stored XSS4.8 Medium
- unknown simple author boxSimple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR4.3 Medium
- themefic ultimate addons for contact form 7Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS4.8 Medium
- solwininfotech user activity logUser Activity Log < 1.6.5 - Unauthenticated SQLi9.8 Critical
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.5.5 - Iframe Injection6.1 Medium
- themefic ultimate addons for contact form 7Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS6.1 Medium
- bitapps contact form builder, unknown contact form builder by bit form +1 moreContact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS4.8 Medium
- lesterchan wp-emailWP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- opennms horizon, meridian +1 moreReflected XSS in multiple JSP files in opennms/opennms6.7 Medium
- opennms horizon, meridian +1 moreStored XSS in multiple JSP files in opennms/opennms6.7 Medium
- ibm iIBM i privilege escalation8.4 High
- opennms horizon, meridian +1 moreROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users8.2 High
- ibm txseries for multiplatforms, txseries for multiplatform +1 moreIBM TXSeries for Multiplatforms denial of service7.5 High
- zyxel nbg6604 firmwareA post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604...8.8 High
- zyxel xgs2220-30 firmware, xmg1930-30 firmware, xs1930-10 firmware +8 more +10 moreImproper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30...6.5 Medium
- Show moreLoading…