CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
apache-poiOSS-FuzzSecurity exception in org.apache.poi.ddf.EscherContainerRecord.fillFieldsNo scorentopngOSS-FuzzHeap-buffer-overflow in Flow::dissectMDNSNo score- typoraTypora Local File Disclosure6.3 Medium
- marktextMarkText DOM-Based Cross-site Scripting leading to Remote Code Execution8.6 High
- typoraTypora DOM-Based Cross-site Scripting leading to Remote Code Execution8.6 High
- typoraTypora Local File Disclosure7.4 High
- obsidianObsidian Local File Disclosure8.2 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit8.3 High
- apache nifiApache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs6.5 Medium
- fobybus social-media-skeletonCross-Site Request Forgery (CSRF) in fobybus/social-media-skeleton6.5 Medium
- fobybus social-media-skeletonUnsalted passwords in fobybus/social-media-skeleton7.5 High
- fobybus social-media-skeletonInsufficient Session Expiration in fobybus/social-media-skeleton6.8 Medium
- pumaInconsistent Interpretation of HTTP Requests in puma7.3 High
- cisco secure endpoint, secure endpoint private cloud +1 moreA vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to...7.5 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit6.8 Medium
- ruijie rg-ew1200g, ruijienetworks rg-ew1200g firmware +1 moreRuijie RG-EW1200G login improper authentication7.3 High
- byzoro smart s85f management platform, smart s85f +1 moreByzoro Smart S85F Management Platform decodmail.php command injection6.3 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- daniel powney multi ratingWordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- julien crego manager for icomoonWordPress Manager for Icomoon Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- eduva albo pretorio online, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)7.1 High
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L setWanCfg os command injection6.3 Medium
- eduva albo pretorio online, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
kimageformatsOSS-FuzzHeap-buffer-overflow in QOIHandler::readNo score- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L setTracerouteCfg os command injection6.3 Medium
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L setDiagnosisCfg os command injection6.3 Medium
- ays-pro photo gallery by ays – responsive image gallery, photo gallery, photo gallery team gallery by ays – responsive image gallery +2 moreWordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fahad mahmood wp docsWordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ollybach wppizza – a restaurant plugin, wp-pizza wppizza +1 moreWordPress WPPizza Plugin <= 3.17.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- theme palace tp educationWordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- artiss plugins listWordPress Plugins List Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- happysoft nbs\&happysoftwechatNBS&HappySoftWeChat unrestricted upload6.3 Medium
- codecanyon credit lite, credit lite project lite +1 moreCodecanyon Credit Lite POST Request account_statement sql injection6.3 Medium
- creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- lauri karisola / wp trio stock sync for woocommerceWordPress Stock Sync for WooCommerce Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
postgresderivecrates.io`postgresderive` was removed from crates.io for malicious codeNo score- elecom co.,ltd. wab-s300, wab-s600-ps, elecom wab-s300 firmware +7 more +9 moreOS command injection vulnerability in WAB-S600-PS all versions, and WAB-S300 all versions allows...8.8 High
- elecom co.,ltd. wrc-1167ghbk2, wrc-1750ghbk, wrc-1750ghbk-e +7 more +9 moreOS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can...9.8 Critical
- elecom co.,ltd. wrc-1750ghbk, wrc-f1167acf, elecom wrc-1750ghbk firmware +3 more +5 moreOS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions...8.8 High
- elecom co.,ltd. wrc-1467ghbk-a, wrc-1467ghbk-s, wrc-1900ghbk-a +11 more +13 moreOS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to...8.8 High
- elecom wrc-x1800gs-b, wrc-x1800gsa-b, wrc-x1800gs-b firmware +13 more +15 moreBuffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and...8.8 High
- logitec corporation lan-wh300n/re, elecom wrc-1467ghbk-a firmware, wrc-1467ghbk-s firmware +6 more +8 moreHidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION...8.8 High
- logitec corporation lan-wh300n/re, elecom lan-wh300n\/re firmware, logitec lan-wh300n re +2 moreHidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION...8.0 High
- logitec lan-w451ngr, elecom lan-w451ngr firmware +1 moreLAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control...8.8 High
- elecom co.,ltd. lan-w300n/p, lan-wh300n/dgp, logitec corporation lan-w300n/dr +11 more +13 moreHidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated...9.8 Critical
- elecom co.,ltd. lan-w300n/rs, logitec corporation lan-w300n/pr5, elecom lan-w300n\/pr5 firmware +3 more +5 moreHidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions...9.8 Critical
- north grid corporation proself enterprise/standard edition, proself gateway edition, proself mail sanitize edition +2 more +4 moreProself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and...7.2 High
- Show moreLoading…