CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- mit kerberos 5kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is...8.8 High
- pantsel kongaAn issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.9.8 Critical
- campcodes complete online matrimonial website system scriptinstall/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS...9.8 Critical
- decapcms netlify cmsA Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to...5.4 Medium
- tree kit project kittree-kit Prototype Pollution vulnerability9.8 Critical
- ai-dev aicustomfeeIn the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for...9.8 Critical
- evenbalance punkbusterDirectory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902...9.8 Critical
- amd ryzen™ master, ryzen master, ryzen master monitoring sdk +2 moreInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™...4.4 Medium
- amd ryzen, ryzen™ master, ryzen master +1 more +3 moreInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™...6.7 Medium
- hewlett packard enterprise (hpe) hpe aruba networking virtual intranet access (via), hp aruba virtual intranet access +1 moreArbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client7.1 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux5.5 Medium
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux5.5 Medium
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +1 more +3 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers9.8 Critical
- broadcom lsi storage authority (lsa), lsi storage authority, raid controller web interface +2 more +4 moreBroadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux7.5 High
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller Web server (nginx) is serving private files without any authentication7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server5.5 Medium
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute9.8 Critical
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy9.8 Critical
- broadcom lsi storage authority (lsa), raid controller web interface, intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup9.8 Critical
- hewlett packard enterprise (hpe) hpe aruba networking virtual intranet access (via), hp aruba virtual intranet access +1 moreLocal Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client7.8 High
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable client-side control bypass6.5 Medium
- keystonejs keystoneConditionally missing authorization in @keystone-6/core3.7 Low
- ghostArbitrary file read via symlinks in Ghost4.9 Medium
- google chromeInsufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0...8.8 High
- google chrome, debian linux +1 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96...4.3 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96...5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96...5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote...8.8 High
- Show moreLoading…