CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- gnu binutilsAn issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains...7.8 High
- 7-zip p7zipp7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function...7.8 High
- open-mpi hwlocAn issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...4.7 Medium
- gnu binutilsAn issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38,...5.5 Medium
- gnu binutilsAn issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows...5.5 Medium
- gnu binutilsAn issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34...5.5 Medium
- gnu binutilsAn issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38,...5.5 Medium
- gnu binutilsHeap buffer overflow vulnerability in binutils readelf before 2.40 via function...7.8 High
- fresenius-kabi pharmahelp firmwareAn issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated...9.8 Critical
- openstack horizonHorizon Web Dashboard Open Redirect vulnerability6.1 Medium
- gnu binutilsHeap buffer overflow vulnerability in binutils readelf before 2.40 via function...7.8 High
- southrivertech titan ftp serverThere is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected...6.1 Medium
- sass-lang libsassStack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector:...7.5 High
- sass-lang libsass, sassc +1 moreStack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector:...7.5 High
- cactiCross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.6.1 Medium
- libtiffAn issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to...6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead...6.5 Medium
- freedesktop popplerA reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of...6.5 Medium
- freedesktop poppler, debian linux +1 moreAn issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of...6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service...6.5 Medium
- qemuThe hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in...10.0 Critical
- gnu binutilsNull pointer dereference vulnerability in Binutils readelf 2.38.50 via function...5.5 Medium
- gnu binutilsAn issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function...5.5 Medium
- etcdetcd denial of service vulnerability7.5 High
- nasm netwide assemblerBuffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows...5.5 Medium
- radare radare2A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.7.5 High
- radare radare2A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.7.5 High
- radare radare2A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.7.5 High
- radare radare2A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.7.5 High
- radare radare2A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.7.5 High
- radare radare2A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.7.5 High
- sass-lang libsassStack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref...8.8 High
- vinitkumar json2xmljson2xml Uncaught Exception vulnerability7.5 High
- djvulibre project djvulibreAn issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a...6.5 Medium
- djvulibre project djvulibreAn issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial...6.5 Medium
- upxReachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of...6.5 Medium
- binutils objdump, gnu binutils +1 moreHeap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.7.5 High
- e.foundation app loungeImproper verification of applications' cryptographic signatures in the /e/OS app store client App...6.5 Medium
- freeimage project freeimageFreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer...6.5 Medium
- freeimage project freeimageA heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.8.8 High
- freeimage project freeimageNULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag...6.5 Medium
- freeimage project freeimageA heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.8.8 High
- freeimage project freeimageA stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in...6.5 Medium
- imagemagickAn issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile...7.5 High
- samsung syncthru web serviceAn issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain...7.5 High
- opensc project openscStack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to...7.5 High
- dpic project dpicdpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different...9.8 Critical
- dpic project dpicdpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y9.8 Critical
- dpic project dpicdpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of...7.5 High
- dpic project dpicdpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.7.5 High
- Show moreLoading…