CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- chris roberts tippyWordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
luceneOSS-FuzzSecurity exception in org.apache.lucene.util.automaton.RegExp.toAutomatonNo score- apache software foundation airflow spark provider, apache apache-airflow-providers-apache-drill, apache-airflow-providers-apache-spark +2 moreApache Airflow Spark Provider Arbitrary File Read via JDBC7.5 High
- helmholz rex 200, rex 250, mb connect line mbnet +18 more +20 moreStored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 2504.8 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreMemory leak in btrfs_get_dev_args_from_path()6.7 Medium
- pradeep singh dynamically register sidebarsWordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- paul kehrer updraftWordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
perl-Cpanel-JSON-XSopenSUSESecurity update for perl-Cpanel-JSON-XSNo score- hupe13 extensions for leaflet mapWordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fortinet fortiosA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a...6.4 Medium
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADM8.5 High
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADM8.5 High
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADM8.8 High
- really simple plugins recipe maker for your food blog from zip recipesWordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- yannick lefebvre modal dialogWordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS)7.1 High
- icopydoc xml for google merchant centerWordPress XML for Google Merchant Center Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- steve curtis, st. pete design gps plotterWordPress GPS Plotter Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dave ross dave's wordpress live search, davidmichaelross dave\'s wordpress live search +1 moreWordPress Dave's WordPress Live Search Plugin <= 4.8.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- m williams cab gridWordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- trident technolabs easy slider revolutionWordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- genians genian nac suite v5.0, genian nac v4.0, genian nac v5.0 +2 more +4 moreMissing Encryption of Sensitive DataCAPEC- vulnerability in Genians Genian NAC V4.0, Genians...5.2 Medium
- moxa tn-4900 series, tn-5900 series, edr-g9010 series +5 more +7 moreSecond Order Command-injection Vulnerability in the Certificate-delete Function8.1 High
- happy-coders comments like dislikeComments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset4.3 Medium
- genians genian nac suite v5.0, genian nac v4.0, genian nac v5.0 +2 more +4 moreImproper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4...6.0 Medium
- moxa tn-4900 series, tn-5900 series, edr-g9010 series +5 more +7 moreSecond Order Command-injection Vulnerability in the Key-delete Function8.1 High
- ec-cube, ec-cube 2, ec-cube co.,ltd. 2 series +2 moreEC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and ...4.8 Medium
- moxa tn-5900, tn-5900 series, tn-5900 firmware +2 moreSecond Order Command-injection Vulnerability in the Certificate-generation Function7.2 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.1 High
- assaabloy control id gerencia web, control id gerencia web +1 moreControl iD Gerencia Web Cookie cleartext storage3.7 Low
- moxa tn-4900, tn-4900 series, tn-5900 +9 more +11 moreSecond Order Command-injection Vulnerability in the Certificate-generation Function7.2 High
- moxa tn-5900, tn-5900 series, tn-5900 firmware +2 moreSecond Order Command-injection Vulnerability in the Key-generation Function8.8 High
- moxa tn-4900, tn-4900 series, tn-5900 +13 more +15 moreSecond Order Command-injection Vulnerability in the Key-generation Function8.8 High
- zte some zte mobile phones, axon 30 firmware, axon 40 pro firmware +2 more +4 morePermission and Access Control Vulnerability in Some ZTE Mobile Phones4.7 Medium
- moxa tn-4900, tn-4900 series, tn-5900 +12 more +14 moreCommand-injection Vulnerability in Certificate Management7.2 High
- moxa tn-5900, tn-5900 series, tn-5900 firmware +2 moreAuthentication Bypass Without Administrator Privilege8.8 High
- pete4abw lzma software development kitlrzip-next LZMA v23.01 was discovered to contain an access violation via the component ...5.3 Medium
- long range zip project range ziplrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int)...5.5 Medium
- ntsc-crt project ntsc-crtNTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a...7.5 High
- jeecg bootJeecg-boot SQL Injection vulnerability5.5 Medium
- ruijie nbc series wireless controllers, rg-eg, rg-ew +98 more +100 moreAn issue in RG-EW series home routers and repeaters v.EW_3.0(1)B11P204, RG-NBS and RG-S1930...8.8 High
- atlosAn issue in Atlos v.1.0 allows an authenticated attacker to execute arbitrary code via a crafted...8.0 High
- kiduswb minimatiSQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain...7.5 High
- powerjobPowerJob incorrect access control vulnerability7.5 High
- online travel agency system project travel agency systemFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to...7.2 High
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- online travel agency system project travel agency systemCross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote...4.8 Medium
- online travel agency system project travel agency systemFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to...7.2 High
- online travel agency system project travel agency systemSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker...7.2 High
- Show moreLoading…