CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- zohocorp manageengine admanager plusIncorrect access control in Zoho ManageEngine ADManager Plus Build 7180 allows unauthenticated...6.5 Medium
- joraniIn Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on...9.8 Critical
- ibm cognos analyticsIBM Cognos Analytics server-side request forgey5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics information disclosure5.3 Medium
- ibm security guardiumIBM Security Guardium command execution9.9 Critical
- cisco thousandeyes enterprise agent, thousandeyes recorder application +1 moreA vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation...7.8 High
- cisco duo device health applicationA vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows...7.1 High
- cisco unified communications manager, unified communications manager / cisco unity connection +1 moreA vulnerability in the web-based management interface of Cisco Unified Communications Manager ...8.1 High
- cisco secure endpoint, secure endpoint private cloud console, secure endpoint private cloud +1 more +3 moreA vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV...7.5 High
- cisco unified contact center expressA vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified...5.3 Medium
- cisco thousandeyes enterprise agent, thousandeyes recorder application, thousandeyes recorder +2 moreA vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation...5.5 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreA vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco...4.8 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreMultiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and...4.8 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreMultiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and...5.4 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreMultiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and...5.4 Medium
- cisco intersight private virtual appliance, intersight virtual appliance +1 moreMultiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an...6.5 Medium
- cisco intersight private virtual appliance, intersight virtual appliance +1 moreMultiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an...6.5 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.5 Medium
- cisco ip phones with multiplatform firmware, phoneos, ip conference phone 7832 with multiplatform firmware +22 more +24 moreA vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800...6.5 Medium
- cisco intersight virtual applianceA vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent...4.3 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreA vulnerability in the web-based management interface of Cisco Expressway Series and Cisco...6.5 Medium
- cisco unified communications manager, unified communications manager / cisco unity connection, unified communications manager im and presence service +2 moreA vulnerability in the web-based management interface of Cisco Unified Communications Manager ...4.8 Medium
- cisco identity services engine software, unified computing system (standalone), unified computing system e-series software (ucse) +6 more +8 moreA vulnerability in the web-based management interface of Cisco Integrated Management Controller ...6.1 Medium
- woodpecker-ci woodpeckerRepositoty takeover in woodpecker-ci8.1 High
- flarum, flarum framework +1 moreServer-Side Request Forgery via Avatar upload in flarum7.1 High
- oppiaTiming Attack Reveals CSRF Tokens in oppia5.3 Medium
- hp inc. and samsung printer software, hp 1vr14a firmware, 209u7a firmware +1,021 more +1,023 moreCertain HP and Samsung Printer software packages may potentially be vulnerable to elevation of...7.3 High
- maximatech portal executivoMaximaTech Portal Executivo Cookie missing encryption3.7 Low
- escanav escan anti-virusMicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions7.8 High
- tdevs hyip riotdevs Hyip Rio Profile Settings settings cross site scripting3.5 Low
- dell alienware m15 r7 firmware, alienware m16 firmware, alienware m18 firmware +109 more +111 moreDell BIOS contains an improper authentication vulnerability. A malicious user with physical...4.6 Medium
- dell alienware m15 r7 firmware, alienware m16 firmware, alienware m18 firmware +240 more +242 moreDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated...6.9 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: btrfs: double free in btrfs_get_root_ref()7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()7.1 High
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: jfs: null pointer dereference in dbfree()5.5 Medium
- thalesgroup safenet authentication service, thales safenet authtentication service agent +1 moreImproper securing of log directory may allow a denial of service5.7 Medium
- dell replay manager for vmware, storage integration tools for vmware, storage vsphere client plugin +1 more +3 moreDell Storage Integration Tools for VMware (DSITV) 06.01.00.016 contain an information disclosure...7.8 High
- moxa nport iaw5000a-i/o series, nport iaw5000a-i\/o firmware +1 moreNPort IAW5000A-I/O Series Hardcoded Credential Vulnerability5.4 Medium
- jenkins favorite view, jenkins project favorite view plugin +1 moreJenkins Favorite View Plugin cross-site request forgery vulnerability4.3 Medium
- jenkins docker swarm, jenkins project docker swarm plugin +1 moreJenkins Docker Swarm Plugin stored cross-site scripting vulnerability5.4 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure5.3 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure5.3 Medium
- jenkins project maven artifact choicelistprovider (nexus) plugin, jenkins maven artifact choicelistprovider \(nexus\) +1 moreJenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials6.5 Medium
- jenkins shortcut job, jenkins project shortcut job plugin +1 moreJenkins Shortcut Job Plugin stored cross-site scripting vulnerability5.4 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin vulnerable to exposure of system-scoped credentials6.5 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin missing permission check4.3 Medium
- jenkins tuleap authentication, jenkins project tuleap authentication plugin +1 moreJenkins Tuleap Authentication Plugin non-constant time token comparison5.9 Medium
- Show moreLoading…