CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- webiny@webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content4.8 Medium
- rust-lang cargo, rust +1 moreMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports6.1 Medium
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS Command Injection vulnerability8.8 High
- gravitl netmakerNetmaker Privilige Escalation Vulnerability8.8 High
- gravitl netmakerNetmaker IDOR Vulnerability Allows User to Update Other User's Password7.5 High
- gravitl netmakerNetmaker has Hardcoded DNS Secret Key7.5 High
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreThe LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an...7.5 High
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreA remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to...9.8 Critical
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreThe LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote...9.8 Critical
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreA remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its...7.5 High
- qnap qts, quts hero +1 moreQTS, QuTS hero3.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero and QuTScloud3.5 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero7.1 High
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreAn adversary could cause a continuous restart loop to the entire device by sending a large...6.8 Medium
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreUncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server6.8 Medium
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreImproper Access Control in OPTO 22 SNAP PAC S15.8 Medium
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreWeak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server8.6 High
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreImproper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server8.6 High
- mozilla firefoxA potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was...8.8 High
exiv2OSS-FuzzContainer-overflow in libbrotlidec.so.1No scorepopplerOSS-FuzzUse-of-uninitialized-value in aesEncryptBlockNo score- ibm aix, vios +1 moreIBM AIX information disclosure6.2 Medium
- spring for apache kafka, vmware spring for apache kafka +1 moreJava Deserialization vulnerability in Spring-Kafka When Improperly Configured5.3 Medium
basti-cdknpmMinimal `basti` IAM Policy Allows Shell AccessNo score- gloriafood restaurant menu – food ordering system – table reservation, oracle restaurant menu - food ordering system - table reservation +1 moreWordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- booking ultra pro appointments booking calendar plugin, bookingultrapro booking ultra pro appointments booking calendar, deetronix booking ultra pro appointments booking calendar plugin +2 moreWordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cagewebdev order your posts manuallyWordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- aditya infotech limited cp-vnr-3104, cp-vnr-3108, cp-vnr-3208, cp-vnr-3104, cp-vnr-3108 +4 more +6 moreInformation Disclosure Vulnerability in CP-Plus Network Video Recorder7.5 High
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Server Banner Information Disclosure5.3 Medium
- aditya infotech limited cp-uvr-1601e1-hc, cp-uvr-1601e2-h, cp-uvr-1601e1-h, cp-uvr-0801f1-hc, cp-uvr-0801k1-h, cp-uvr-0801k1b-h, cp-uvr-0808k1-h, cp-uvr-0401l1-4kh, cp-uvr-0401l1b-4kh, cp-uvr-0401l1-4kh, cp-uvr-0401l1b-4kh +16 more +18 moreTimestamp Modification Vulnerability in CP-Plus Digital Video Recorder5.3 Medium
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Session Headers Not Implemented4.3 Medium
- wiresharkMissing Release of Memory after Effective Lifetime in Wireshark5.3 Medium
- wiresharkUncontrolled Recursion in Wireshark5.3 Medium
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark5.3 Medium
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Session Cookies Attribute Not Set Properly3.1 Low
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Existence of an Unauthorized Service5.3 Medium
tryton-serverDebiantryton-server - security updateNo score- tenda ac10v4 firmwareTenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10v4, ac10v4 firmware +1 moreTenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac10, ac10v4 firmware +1 moreTenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- tenda ac8v4, ac8 firmware +1 moreTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via...9.8 Critical
- Show moreLoading…