CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- north grid corporation proself enterprise/standard edition, proself gateway edition, proself mail sanitize edition +2 more +4 moreImproper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier,...7.5 High
- all my web needs logo schedulerWordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- webtoffee stripe payment plugin for woocommerceThe Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized...5.3 Medium
- d-link dir-880l, dlink dir-880l a1 firmware +1 moreD-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets.9.8 Critical
- tenda ac15, ac15 firmware +1 moreTenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the...9.8 Critical
- tenda wh450a, wh450a firmware +1 moreTenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.9.8 Critical
- d-link dir-880l, dlink dir-880l a1 firmware +1 moreD-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function...9.8 Critical
- d-link dir-880l, dlink dir-880l a1 firmware +1 moreD-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function...7.5 High
- d-link dir-868l, dlink dir-868l firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to...9.8 Critical
- d-link dir-868l firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to...9.8 Critical
- d-link dir-842, dlink dir-842 firmware +1 moreD-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows...9.8 Critical
- d-link dir-868l, dlink dir-868l firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to...9.8 Critical
- cszcms csz cmsA Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary...5.4 Medium
- cszcms csz cmsCSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute...6.1 Medium
- phpgurukul online shopping portalOnline Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands...8.8 High
- kidus minimatiSQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain...7.5 High
- phplistAn issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate...6.7 Medium
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do...5.5 Medium
- marco steinbrecher wp browserupdateWordPress WP BrowserUpdate Plugin <= 4.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- netflix dispatchDispatch writes JWT tokens in error message9.1 Critical
- acymailing, acymailing.com acymailing enterprise component for joomla +1 moreExtension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.36.1 Medium
- acymailing, acymailing.com acymailing enterprise component for joomla +1 moreExtension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.35.3 Medium
- acymailing, acymailing.com acymailing enterprise component for joomla +1 moreExtension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.34.3 Medium
- acymailing, acymailing.com acymailing enterprise component for joomla +1 moreExtension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.34.3 Medium
- acymailing.com acymailing component for joomla, acyba acymailing starter +1 moreExtension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.09.8 Critical
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable9.8 Critical
- juniper junos, junos os +1 moreJunos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files5.3 Medium
- turbowarp desktopMalicious projects can read and upload arbitrary files from disk in TurboWarp Desktop7.4 High
- opennms horizon, meridian +1 moreROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN5.3 Medium
- opennms horizon, meridian +1 moreDisable BeanShell Interpreter Remote Server Mode7.1 High
intel-microcodeTuxCareUpdate of alt-phpNo scoreintel-microcodeTuxCareUpdate of alt-phpNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo score- xwiki, xwiki xwiki-platform +1 morePrivilege escalation (PR)/RCE from account through Invitation subject/message9.9 Critical
- rubygems rubygems.orgUnauthorized gem replacement for full names ending in numbers on rubygems.org7.4 High
- lenovo notebook, legion 5-15ach6 firmware, legion 5-15ach6a firmware +28 more +30 moreA buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products...6.7 Medium
- lenovo thinkpad, thinkpad p14s gen 2 firmware, thinkpad p15s gen 2 firmware +2 more +4 moreA vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen...8.4 High
- lenovo thinkpad, k14 type 21cu firmware, k14 type 21cv firmware +24 more +26 moreA buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad...6.7 Medium
- lenovo notebook, 13w yoga, 13w yoga firmware +58 more +60 moreA buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo...6.7 Medium
- lenovo universal device client (udc), universal device client +1 moreAn uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC...7.8 High
- rockwell automation thinmanager thinserverRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability9.8 Critical
- rockwell automation thinmanager thinserverRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability7.5 High
- rockwell automation thinmanager thinserverRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy7.5 High
- phpradar woocommerce tip/donation, woocommerce tip\/donation +1 moreWordPress Woocommerce Tip/Donation Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- balasaheb bhise advanced youtube channel paginationWordPress Advanced Youtube Channel Pagination Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- praveen goswami advanced category templateWordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…