CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS)...5.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS)...5.4 Medium
- pythonAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Medium
- pbootcmsPbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via...9.8 Critical
- renault easy linkA lack of exception handling in the Renault Easy Link Multimedia System Software Version...4.6 Medium
- icewarp mail serverIceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- icewarp mail serverIceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability...9.8 Critical
- juplink rx4-1500, rx4-1500 firmware +1 moreJuplink RX4-1500 Stack-based Buffer Overflow Vulnerability9.0 Critical
- walchem intuition 9, intuition 9 firmware +1 moreWalchem Intuition Missing Authentication for Critical Function7.5 High
- walchem intuition 9, intuition 9 firmware +1 moreWalchem Intuition Improper Authentication6.5 Medium
- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Insecure Default Initialization of Resource7.1 High
- prometheus alertmanager, debian linux +1 moreAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform's Groovy jobs check the wrong author, allowing remote code execution9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action9.1 Critical
- rails activesupportActive Support Possibly Discloses Locally Encrypted Files5.5 Medium
silverstripe/adminPackagistSilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCENo score- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...6.7 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...4.4 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...6.7 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...4.4 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...6.7 Medium
- opennms horizon, meridian +1 moreAuthenticated XXE Injection Via The File Editor5.3 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreA vulnerability in the restricted security domain implementation of Cisco Application Policy...5.4 Medium
- cisco adaptive security appliance (asa) software, firepower extensible operating system (fxos), firepower threat defense software +1 more +3 moreA vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to...4.4 Medium
- cisco nx-os, nx-os software +1 moreA vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000...5.4 Medium
- cisco firepower extensible operating system (fxos), unified computing system (managed), firepower 4112 firmware +7 more +9 moreA vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software...7.7 High
- cisco nx-os software, nx-os +1 moreA vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS...7.4 High
- cisco nx-os software, nx-os +1 moreA vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow...7.1 High
- argoproj argo cd, argo-cd +1 moreArgo CD web terminal session doesn't expire4.7 Medium
drupal/datafieldPackagistThe Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g. the Paragraphs system. Access to these forms isn't properly validated, allo…No scoreca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo scoredrupal/safedeletePackagistThis module aims to prevent broken content references by informing content editors either on delete or archive moderation. The module provides an "orphaned content" report for broken references, which…No scoredrupal/shorthandPackagistThis module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling". The module does not check appropriate permissions when displaying a list of…No scoredrupal/config_pagesPackagistThis module enables you to build administrative pages for managing configuration objects, which may then be used elsewhere in the site. The module doesn't sufficiently validate access when the JSONAPI…No score- opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 moreA Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux...5.9 Medium
- apache airflow, apache software foundation airflow imap provider, airflow smtp provider +2 more +4 moreApache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation5.9 Medium
- apache airflowApache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature8.1 High
- apache airflowSession fixation in Apache Airflow web interface8.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOS5.3 Medium
drupal/forum_accessPackagistThis module changes your forum administration page to allow you to set forums private. You can control what user roles can view, edit, delete, and post to each forum. You can also give each forum a li…No scoredrupal/aclPackagistThe ACL module, short for Access Control Lists, is an API for other modules to create lists of users and give them access to nodes. The module processes user input in a way that could be unsafe. This…No score- cagewebdev order your posts manuallyWordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- arshid easy hide loginWordPress Easy Hide Login Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- yoast seo: local, seo +1 moreWordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ux-themes flatsomeWordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
ntopngOSS-FuzzHeap-buffer-overflow in Flow::dissectNetBIOSNo score- netmix radio station, tony zeoli, tony hayes radio station by netmix® – manage and play your show schedule in wordpress! +1 moreWordPress Radio Station Plugin <= 2.4.0.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ays pro easy form by ays, ays-pro easy form, easy form team form by ays +2 moreWordPress Easy Form by AYS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- Show moreLoading…