CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface8.1 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface8.1 High
- trane technologies pivot thermostat, trane pivot firmware, xl1050 firmware +5 more +7 moreTrane Thermostats Injection6.8 Medium
- apache xml graphics batik, debian linux +1 moreApache XML Graphics Batik: Information disclosure vulnerability7.1 High
matioOSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo score- apache xml graphics batik, debian linux +1 moreApache XML Graphics Batik: Information disclosure vulnerability4.4 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure4.3 Medium
- artica pfms pandora fms, pandora fms fms +1 moreRemote Code Execution via Unrestricted File Upload6.4 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting - Special Days Module5.9 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting Vulnerability in Visual Console Module6.3 Medium
- artica pfms pandora fms, pandora fms fms +1 moreServer side request forgery in api checker5.2 Medium
rustls-webpkicrates.iorustls-webpki: CPU denial of service in certificate path building7.5 Highwebpkicrates.iowebpki: CPU denial of service in certificate path building7.5 High- asustor adm, data master +1 moreAn Arbitrary File Movement vulnerability was found on the ADM7.5 High
- asustor adm, data master +1 moreAn Improper Privilege Management vulnerability was found on the ADM8.7 High
- cszcms csz cmsCross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary...5.4 Medium
- ziahamza webui-aria2webui-aria2 Path Traversal vulnerability7.5 High
- filemageDirectory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before...7.5 High
- douran dsgateAn issue in all versions of Douran DSGate allows a local authenticated privileged attacker to...6.7 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration7.8 High
- tp-link tapo, tapo l530e firmware +1 moreAn issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...6.5 Medium
- tp-link tapo, tapo l530e firmware +1 moreAn issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...6.5 Medium
- nasm netwide assemblerStack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service...5.5 Medium
- nasm netwide assemblerStack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial...5.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor:...5.5 Medium
- nasm netwide assemblerNull pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of...5.5 Medium
- langchainlangchain vulnerable to arbitrary code execution9.8 Critical
- supermicro x12dpg-qr, h11dsi-nt firmware, h11dsi firmware +269 more +271 moreBuffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to...7.8 High
- geomatika isigeo webAn issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to...4.9 Medium
- geomatika isigeo webAn issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to...8.8 High
- geomatika isigeo webAn issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to...6.5 Medium
- memcachedmemcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.7.5 High
- cryptopp crypto\+\+Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function...7.5 High
- python, debian linux, netapp active iq unified manager +1 more +3 moreAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Medium
- python, debian linux +1 moreAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Critical
- python, netapp active iq unified manager +1 moreread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Medium
- python, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 High
- file project file, debian linux +1 moreFile before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is...5.5 Medium
- cactiA reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows...6.1 Medium
- xpdfreader xpdfAn infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.5.5 Medium
- imagemagick, fedoraproject fedora +1 moreA memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial...7.1 High
- cactiIn Cacti 1.2.19, there is an authentication bypass in the web login functionality because of...5.3 Medium
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to...9.8 Critical
- busybox, debian linux, siemens ruggedcom rst2428p +16 more +18 moreThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...9.8 Critical
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreGNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function...5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreGNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...5.5 Medium
- gnu binutilsGNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...5.5 Medium
- gnu binutilsAn issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of...7.8 High
- gnu binutilsAn issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of...7.8 High
- Show moreLoading…