CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- jenkins flaky test handler, jenkins project flaky test handler plugin +1 moreJenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 moreJenkins Blue Ocean Plugin cross-site request forgery vulnerability8.8 High
- jenkins nodejs, jenkins project nodejs plugin +1 moreJenkins NodeJS Plugin improper credential masking vulnerability7.5 High
- jenkins config file provider, jenkins project config file provider plugin +1 moreJenkins Config File Provider Plugin improper credential masking vulnerability7.5 High
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin information disclosure vulnerability4.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin cross-site request forgery vulnerability4.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin cross-site request forgery vulnerability8.8 High
- dell powerscale onefsDell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. An...7.3 High
- dell powerscale onefsDell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low...5.3 Medium
- dell powerscale onefsDell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file...6.3 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2x -9.5x contains an improper privilege management vulnerability. A high...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2x -9.5x contains a privilege escalation vulnerability. A local attacker...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A...5.3 Medium
- dell powerscale onefsDell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevation of privilege vulnerability. A low...7.8 High
- dell powerscale onefsDell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS, 8.2.x-9.5.x, contains a exposure of sensitive information to an...7.8 High
- dell powerscale onefsDell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges...6.7 Medium
postgresscrates.io`postgress` was removed from crates.io for malicious codeNo scoreserdcrates.io`serd` was removed from crates.io for malicious codeNo scoreoncecellcrates.io`oncecell` was removed from crates.io for malicious codeNo scorexrvrvcrates.io`xrvrv` was removed from crates.io for malicious codeNo scoreenvloggercrates.io`envlogger` was removed from crates.io for malicious codeNo scoreif-cfgcrates.io`if-cfg` was removed from crates.io for malicious codeNo scorelazystaticcrates.io`lazystatic` was removed from crates.io for malicious codeNo score- minapper rest api to miniprogramREST API TO MiniProgram <= 4.6.1 - Subscriber+ Attachment Deletion5.4 Medium
- ko-fi button, unknown ko-fi button +1 moreKo-fi Button < 1.3.3 - Admin+ Stored XSS4.8 Medium
- oplugins booking managerBooking Manager < 2.0.29 - Subscriber+ SSRF8.8 High
- saad iqbal wp easypayWP EasyPay < 4.1 - Reflected Cross-Site Scripting6.1 Medium
- unknown yellow yard searchbarYellow Yard < 2.8.12 - Contributor+ Stored XSS5.4 Medium
- jeremyshapiro url paramsURL Params < 2.5 - Contributor+ Stored XSS5.4 Medium
- pottie seo alertSEO ALert <= 1.59 - Admin+ Stored XSS4.8 Medium
- tiempo, unknown tiempo.com +1 moreTiempo.com <= 0.1.2 - Reflected XSS6.1 Medium
- tiempo, unknown tiempo.com +1 moreTiempo.com <= 0.1.2 - Stored XSS via CSRF6.1 Medium
- tiempo, unknown tiempo.com +1 moreTiempo.com <= 0.1.2 - Shortcode Deletion via CSRF4.3 Medium
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting6.1 Medium
- unknown yarpp, yarpp yet another related posts plugin +1 moreYARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi8.8 High
- 10web image optimizer, unknown image optimizer by 10web +1 moreImage Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting6.1 Medium
- clickfunnelsClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreUnverified Password Change in instantsoft/icms24.3 Medium
- pt woo plugins (by webdados) stock exporter for woocommerceWordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- daggerheart query wranglerWordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)7.1 High
- kaya studio qr code generator, kayastudio kaya qr code generator +1 moreWordPress Kaya QR Code Generator Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- icopydoc yml for yandex marketWordPress YML for Yandex Market Plugin <= 3.10.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- i thirteen web solution video gridWordPress Video Grid Plugin <= 1.21 is vulnerable to Cross Site Scripting (XSS)7.1 High
- andy moyle church adminWordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- benjamin guy captcha them allWordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- recruit rikunabi next, recruit co., ltd. "rikunabi next" app for android +1 moreImproper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior...6.1 Medium
- excalidraw@excalidraw/excalidraw Cross-site Scripting vulnerability6.1 Medium
- froger wp remote users syncWP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View4.3 Medium
- froger wp remote users syncWP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery8.5 High
- Show moreLoading…