CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- m-files classic web, web +1 morePath traversal issue in M-Files Classic Web7.7 High
- m-files server, classic web +1 moreCVE-2023-3425: Out-of-Bounds memory read6.5 Medium
- e-excellence u-office forcee-Excellence U-Office Force - Arbitrary File Upload9.8 Critical
- e-excellence u-office forcee-Excellence U-Office Force - Path Traversal7.5 High
- e-excellence u-office forcee-Excellence U-Office Force - Error Message Leakage5.3 Medium
- skylark, skylark holdings co., ltd. 'skylark' app for android, 'skylark' app for ios +2 moreImproper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2...4.7 Medium
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreFV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update5.4 Medium
- synck graphica mailform pro cgiRegular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3...7.5 High
- mesosoi silverwaregames-io-issue-tracker, silverwaregames +1 moreSilverware Games vulnerable to account enumeration via inconsistent responses5.3 Medium
- mesosoi silverwaregames-io-issue-tracker, silverwaregames +1 moresilverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not3.7 Low
- adguard dnsAdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP...7.5 High
- arraynetworks ag, arrayos ag +1 moreArray AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service...7.5 High
- tenda ax3, ax3 firmware +1 moreTenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function...7.5 High
- tenda ac23, ac23 firmware +1 moreThe get_parentControl_list_Info function does not verify the parameters entered by the user,...6.5 Medium
- tenda ac23The sub_451784 function does not validate the parameters entered by the user, resulting in a...8.8 High
- tenda ac23, ac23 firmware +1 moreThe compare_parentcontrol_time function does not authenticate user input parameters, resulting in...8.8 High
- tenda ac23, ac23 firmware +1 moreTenda AC23 Vv16.03.07.45_cn AC23 is vulnerable to Buffer via sub_450A4C function.9.8 Critical
- tenda ac23, ac23 firmware +1 moreIn Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not...8.8 High
- tenda ac23, ac23 firmware +1 moreIn Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered...8.8 High
- phicomm k2 firmwarePhicomm k2 v22.6.529.216 is vulnerable to command injection.7.8 High
- rarlab winrarRARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability7.8 High
- giflib project giflibgiflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.5.5 Medium
- free and open source inventory management system project and open source inventory management systemA stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management...5.4 Medium
- icewarpIceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102...4.9 Medium
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24...4.9 Medium
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6...7.5 High
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6...5.5 Medium
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24...5.5 Medium
- uatech badasoA stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7...5.4 Medium
- uatech badasoA stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows...5.4 Medium
- libreswanAn issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA...6.5 Medium
- libreswanAn issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured...6.5 Medium
- libreswanAn issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an...6.5 Medium
- infoblox niosInfoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without...8.8 High
- skale sgxwalletAn issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of...7.5 High
- skale sgxwalletBuffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a...7.5 High
- techview la-5570 wireless gateway, jaycar la5570 firmware +1 moreAn issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain...7.5 High
- esotericsoftware yamlbeansEsoteric YamlBeans Unsafe Deserialization vulnerability7.8 High
- esotericsoftware yamlbeansEsoteric YamlBeans XML Entity Expansion vulnerability5.5 Medium
- stormshield ssl vpn clientStormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.7.8 High
- stormshield network securityAn issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login...4.8 Medium
- gerbvDenial of Service in Gerbv5.5 Medium
- rizinRizin vulnerable to Integer Overflow in C++ demangler logic7.8 High
- geonodeGeonode Server Side Request Forgery vulnerability7.5 High
- fit2cloud cloudexplorer lite, cloudexplorer-dev cloudexplorer-lite +1 moreCloudExplorer Lite sensitive information leakage vulnerability7.5 High
- enalean tuleapTuleap vulnerable to Cross-site Scripting on the success message of a kanban deletion4.8 Medium
- enalean tuleapTuleap allows preview of a linked artifact with a type does not respect permissions6.5 Medium
- libp2p go-libp2p, protocol libp2p +1 morelibp2p nodes vulnerable to OOM attack7.5 High
ntpdcrates.iontpd has Dependency on Vulnerable Third-Party Component2.6 Low- Show moreLoading…