CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a...8.8 High
- google chromeUse after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote...8.8 High
- sap se cla assistant, sap contributor license agreement assistant +1 moreMissing Authorization check allows certain operations on CLA Assistant data8.1 High
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 moreAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users...10.0 Critical
- node.js, nodejs node, fedoraproject fedora +2 more`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a...5.3 Medium
- node.js, nodejs node, fedoraproject fedora +2 moreA vulnerability has been discovered in Node.js version 20, specifically within the experimental...8.8 High
- phprecdbphpRecDB index.php cross site scripting3.5 Low
ntopngOSS-FuzzHeap-buffer-overflow in IEC104Stats::processPacketNo score- codeflavors vimeotheque, vimeotheque: vimeo wordpress plugin +1 moreWordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- intel quartus primeUse of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R...5.5 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 moreWordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)5.5 Medium
- wpgem woocommerce easy duplicate productWordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- infinitewp client, revmakx infinitewp client +1 moreInfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure7.5 High
- plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 moreUser Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'7.2 High
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Reflected in librenms/librenms7.6 High
- doctor appointment system project appointment systemDoctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter...9.8 Critical
- webchess project webchesswebchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter...9.8 Critical
- schoolmate project schoolmateSchoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the ...9.8 Critical
- sulimet 5-in-1 smart door lock firmwareMissing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to...2.4 Low
- mydigoo dg-hamb smart home security system firmwareMissing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows...2.4 Low
- etekcity 3-in-1 smart door lock firmwareMissing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to...4.6 Medium
- llamaindex project llamaindexllama-index vulnerable to arbitrary code execution9.8 Critical
- gabrieleventuri pandasaiPandasAI vulnerable to arbitrary code execution9.8 Critical
- langchainLangChain vulnerable to arbitrary code execution9.8 Critical
- mohammad-ajazuddin evotingsystem-phpSQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute...8.8 High
- wolf18 easyadmin8File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute...9.8 Critical
- pythonAn issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the...5.3 Medium
- langchainLangChain vulnerable to arbitrary code execution9.8 Critical
- alluxioAlluxio vulnerable to arbitrary code execution9.8 Critical
- comfast cf-xr11, cf-xr11 firmware +1 moreCOMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588....9.8 Critical
- comfast cf-xr11, cf-xr11 firmware +1 moreCOMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0....9.8 Critical
- comfast cf-xr11, cf-xr11 firmware +1 moreAn issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the...9.8 Critical
- comfast cf-xr11, cf-xr11 firmware +1 moreAn issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname...9.8 Critical
- comfast cf-xr11, cf-xr11 firmware +1 moreAn issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the...9.8 Critical
- wavlink wl-wn575a3 firmware, wl wnj575a3 +1 moreAn issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute...9.8 Critical
- langchainLangChain vulnerable to arbitrary code execution9.8 Critical
- faad2 project faad2Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code...6.5 Medium
- faad2 project faad2Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code...5.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- libxls project libxlsBuffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code...6.5 Medium
- msweet codedocBuffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial...5.5 Medium
- Show moreLoading…