CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- supersoju block referer spamWordPress Block Referer Spam Plugin <= 1.1.9.4 is vulnerable to Cross Site Scripting (XSS)5.1 Medium
- bill minozzi block bad bots and stop bad bots crawlers and spiders and anti spam protectionWordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- booking ultra pro appointments booking calendar plugin, bookingultrapro appointments booking calendar, deetronix booking ultra pro appointments booking calendar plugin +2 moreWordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wpo365 | mail integration for office 365 / outlook, mail integration for office 365 \/ outlook +1 moreWordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-163055.5 Medium
- silabs gecko bootloaderSecond Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability9.8 Critical
- rakuten mobile, inc. wifi pocket, rakuten wifi pocket firmware +1 more** UNSUPPPORTED WHEN ASSIGNED ** Improper authentication vulnerability in Rakuten WiFi Pocket all...5.4 Medium
- cbc co.,ltd. dr-16f, dr-8f, dr-4f, dr-16h, dr-8h, dr-4h, dr-4m41 series, nr4h, nr8h, nr16h series, cbc dr-16f42a firmware +25 more +27 moreOS command injection vulnerability in the CBC products allows a remote authenticated attacker to...8.8 High
- cbc dr-16f, dr-16h, dr-4f +44 more +46 moreHidden functionality vulnerability in the CBC products allows a remote authenticated attacker to...8.8 High
- cbc co.,ltd. dr-16f, dr-8f, dr-4f, dr-16h, dr-8h, dr-4h, dr-4m41 series, nr4h, nr8h, nr16h series, cbc dr-16f42a firmware +25 more +27 moreImproper authentication vulnerability in the CBC products allows a remote authenticated attacker...8.8 High
- wpcharitable charitable, smub charitable – donation plugin for wordpress – fundraising with recurring donations & more +1 moreDonation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation9.8 Critical
- hitachi eh-viewOut-of-bounds Read Vulnerability in Hitachi EH-VIEW (Designer)7.8 High
- hitachi eh-viewOut-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer)7.8 High
- hitachi eh-viewImproper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in Hitachi EH-VIEW (KeypadDesigner)7.8 High
- hitachi eh-viewOut-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)7.8 High
- python, netapp active iq unified manager +1 moreAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 High
- libvmod digest digest, varnish-software varnish enterprise, vmod digest +2 morelibvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of...6.5 Medium
- hcaptcha for ext\ form projecthCaptcha for EXT:form Broken Access Control vulnerability5.3 Medium
- misp-project mispAn issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected...6.1 Medium
- rarlab winrarRARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to...7.8 High
- oretnom23 student study center desk management systemCross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management...4.8 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote...8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote...8.1 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote...8.1 High
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure3.7 Low
- ibm robotic process automationIBM Robotic Process Automation information disclosure4.3 Medium
- ibm robotic process automationIBM Robotic Process Automation privilege escalation6.6 Medium
- ibm cics tx advanced, cics tx standard, cics tx +2 more +4 moreIBM GSKit-Crypto information disclosure7.5 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure5.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorReflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface6.1 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface6.5 Medium
- datasetteDatasette 1.0 alpha series leaks names of databases and tables to unauthenticated users5.3 Medium
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface7.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface7.2 High
- arubanetworks edgeconnect sd-wan orchestratorShared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator7.4 High
- arubanetworks edgeconnect sd-wan orchestratorUnauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface8.0 High
- ericcornelissen shescapeShescape on Windows escaping may be bypassed in threaded context6.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorUnauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface8.1 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface8.1 High
- Show moreLoading…