CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- apache ivyApache Ivy: XML External Entity vulnerability in Apache Ivy8.2 High
- jeecg jimureportjeecgboot JimuReport Template injection6.3 Medium
firefoxUbuntufirefox regressionsNo score- inventory management system project management system, sourcecodester free and open source inventory management system +1 moreSourceCodester Free and Open Source Inventory Management System sql injection6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS run-movepass.php password recovery6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS article-chat.php sql injection6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS category.php sql injection5.5 Medium
- mini mini-tmallMini-Tmall sql injection6.3 Medium
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices edit-user.php sql injection6.3 Medium
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices edit-doc.php sql injection6.3 Medium
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices booking-complete.php sql injection6.3 Medium
- mcafee safe connectMcAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve...7.2 High
- nvki intelligent broadband subscriber gatewayN.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability...9.8 Critical
- nvki intelligent broadband subscriber gatewayN.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which...9.8 Critical
- nvki intelligent broadband subscriber gatewayN.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- tenda ac8 firmware, ac8v4 firmware +1 moreTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the...7.5 High
- tenda ac8 firmware, ac8v4 firmware +1 moreTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the...7.5 High
- tenda ac8 firmware, ac8v4 firmware +1 moreTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the...7.5 High
- tp-link tl-wr941nd, tl-wr941nd v6 firmware +1 moreTP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at ...9.8 Critical
- d-link dap-2660, dlink dap-2660 firmware +1 moreD-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter...9.8 Critical
- d-link dap-2660, dlink dap-2660 firmware +1 moreD-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource...9.8 Critical
- tp link tl-wr1041n, tp-link tl-wr1041n v2 firmware +1 moreAn issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to...7.5 High
- tp-link tl-wr940n, tl-wr941nd, wr841n v8 +3 more +5 moreTP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer...9.8 Critical
- tp-link tl-wr841n, tl-wr941nd, tl-wr841n v8 firmware +3 more +5 moreTP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a...7.5 High
- gabrieleventuri pandasaipandasai vulnerable to prompt injection9.8 Critical
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability...9.8 Critical
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to...9.8 Critical
- alibabacloud nacos spring projectNacos Spring vulnerable to Unsafe Deserialization8.8 High
- zerowdd studentmanagerCross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to...5.4 Medium
- chamiloCross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote...3.5 Low
- weaviateWeaviate denial of service vulnerability7.5 High
- jerryscriptBuffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker...9.8 Critical
- tp-link tapo, tapo l530e firmware +1 moreAn issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...6.5 Medium
- berkaygediz o blogSQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate...7.8 High
- boidcmsFile Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code...8.8 High
- draytek vigor2620, vigor2620 firmware, vigor2625 firmware +2 moreuser_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925...9.8 Critical
- leeco letv x43, letv x43 firmware +1 moreAn issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S,...9.8 Critical
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices appointment.php sql injection6.3 Medium
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices appointment.php sql injection6.3 Medium
- card holder management system project holder management system, sourcecodester card holder management system +1 moreSourceCodester Card Holder Management System Minus Value unknown vulnerability4.3 Medium
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System search_sales_report.php sql injection6.3 Medium
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System search_sell_paymen_report.php sql injection6.3 Medium
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System edit_update.php sql injection6.3 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit6.1 Medium
- hamza417 hamza417/inure, inure +1 moreImproper Input Validation in hamza417/inure7.7 High
- hamza417 hamza417/inure, inure +1 moreMissing Authorization in hamza417/inure5.1 Medium
- veilidVeilid before 0.1.9 does not check the size of uncompressed data during decompression upon an...7.5 High
- qt, debian linux +1 moreIn Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an...7.5 High
- unity parsecUnity Parsec before 8 has a TOCTOU race condition that permits local attackers to escalate...7.0 High
- terra-master terramaster operating systemTerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via...9.8 Critical
- Show moreLoading…