CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows...6.5 Medium
- invisible-island ncurses, debian linux, netapp active iq unified manager +3 more +5 moreBuffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in...6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1...6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1...6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1...6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6...6.5 Medium
- freedesktop popplerBuffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause...6.5 Medium
- exiv2Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows...7.8 High
- audiofileHeap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause...5.5 Medium
- nasm netwide assemblerA Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows...5.5 Medium
- gdraheim zziplibAn issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13...5.5 Medium
- exempi project exempiBuffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote...6.5 Medium
- exempi project exempiBuffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0...6.5 Medium
- hdfgroup hdf5Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote...8.8 High
- webassembly binaryenHeap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm:...6.5 Medium
- webassembly binaryenA NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s...6.5 Medium
- hdfgroup hdf5Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote...8.8 High
- jenkins fortify, jenkins project fortify plugin +1 moreCSRF vulnerability in Fortify Plugin allow capturing credentials4.2 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreMissing permission checks in Fortify Plugin allow capturing credentials4.2 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreHTML injection vulnerability in Fortify Plugin4.3 Medium
- danfoss ak-sm800a, ak-sm 800a, ak-sm 800a firmware +2 moreAuthneticated Path Traversal in Danfoss AK-SM800A8.8 High
- danfoss ak-sm800a, ak-sm 800a firmware +1 moreAuthentication Bypass in Danfoss AK-SM800A7.5 High
- danfoss ak-sm800a, ak-sm 800a firmware +1 moreAuthenticated Remote Command Execution in Danfoss AK-SM800A9.9 Critical
- node-saml, node saml project saml +1 more@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform privilege escalation (PR) from account through AWM content fields9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreSXSS in the user profile via the timezone displayer9.1 Critical
- craftcms cms, craft cms +1 moreCraft CMS vulnerable to Remote Code Execution via validatePath bypass7.2 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability3.1 Low
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()5.5 Medium
- devolutions remote desktop managerImproper access controls in the entry duplication component in Devolutions Remote Desktop Manager...6.5 Medium
- devolutions remote desktop managerInadequate validation of permissions when employing remote tools and macros within Devolutions...9.8 Critical
- ivanti mobileiron sentry, sentry +1 moreA security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and...9.8 Critical
- red hat rhol-5.5-rhel-8, rhol-5.6-rhel-8, rhol-5.7-rhel-8 +1 more +3 moreOpenshift-logging: lokistack authorisation is cached too broadly5.7 Medium
gpsdOSS-FuzzStack-buffer-overflow in crc24q_checkNo scoreapache-commons-jxpathOSS-FuzzSecurity exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toStringNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_TV_to_utf8_codepageNo scoreicuOSS-FuzzStack-use-after-scope in ulocimp_addLikelySubtags_74No score- unknown change wp admin login, wpexperts all in one login +1 moreChange WP Admin < 1.1.4 - Secret Login Page Disclosure7.5 High
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF4.3 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 7.2.1 - Reflected XSS6.1 Medium
- multiparcels shipping for woocommerce, unknown multiparcels shipping for woocommerce +1 moreMultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS6.1 Medium
- bitapps bit assist, unknown chat button: whatsapp chat, facebook messenger, telegram chat, wechat, line chat, discord chat for customer support chat with floating chat widget +1 moreBit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- butterfly-button butterfly buttonButterfly Button Project - Sensitive Information Disclosure7.5 High
- wallabag, wallabag wallabag/wallabag +1 moreCross-Site Request Forgery (CSRF) in wallabag/wallabag6.5 Medium
- wallabag, wallabag wallabag/wallabag +1 moreCross-Site Request Forgery (CSRF) in wallabag/wallabag4.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore6.4 Medium
- luxcal web calendar, luxsoft luxcal web calendar +1 moreSQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web...9.1 Critical
- luxsoft luxcal web calendarCross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and...6.1 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 moreCross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced...5.4 Medium
- Show moreLoading…