CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System suppliar_data.php cross site scripting3.5 Low
openscOSS-FuzzStack-buffer-overflow in sc_color_fprintf_vaNo scoreluceneOSS-FuzzOut-of-memory in QueryParserFuzzerNo scorentopngOSS-FuzzHeap-buffer-overflow in Flow::dissectBittorrentNo score- spa-cart ecommerce cmsSPA-Cart eCommerce CMS GET Parameter search sql injection5.3 Medium
- spa-cart ecommerce cmsSPA-Cart eCommerce CMS search cross site scripting5.1 Medium
- byzoro smart s85f management platformByzoro Smart S85F Management Platform licence.php access control3.5 Low
- ibos, ibos oa +1 moreIBOS OA export&checkids=x sql injection6.3 Medium
- byzoro smart s85f management platformByzoro Smart S85F Management Platform php.ini direct request4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- ibos, ibos oa +1 moreIBOS OA export&contactids=x sql injection6.3 Medium
- d-link dar-8000-10, dlink dar-8000-10 firmware +1 moreD-Link DAR-8000-10 sys1.php os command injection6.3 Medium
- wiresharkWireshark CP2179 divide by zero6.5 Medium
- apache tomcat, debian linux +1 moreApache Tomcat: Open redirect with FORM authentication6.1 Medium
- metal3 ironic-imageUnauthenticated access to Ironic API7.3 High
- dream0x01 weblogic-frameworkweblogic-framework Deserialization of Untrusted Data vulnerability9.8 Critical
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining5.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ global buffer read overflow in nsCodingStateMachine::NextState5.5 Medium
- zulip, zulip server +1 moreZulip vulnerable to insufficient authorization check for edition/deletion of messages and topics in private streams by former subscribers6.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar5.5 Medium
- stellar freighterFreighter mnemonic phrase may be accessed by Javascript through a private API8.1 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert7.8 High
- openfgaOpenFGA Authorization Bypass6.5 Medium
- agendaless pyramid, fedoraproject fedora +1 morePyramid static view path traversal up one directory4.3 Medium
- esri arcgis enterprise server, arcgis server +1 moreBUG-000158039 - There is an information disclosure issue in ArcGIS Server.5.3 Medium
- google chromeInappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a...7.8 High
- google chromeInappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a...9.6 Critical
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registration6.5 Medium
harfbuzzOSS-FuzzUNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_dataNo scorecpython3OSS-FuzzUse-of-uninitialized-value in _PyFunction_FromConstructorNo scorelibheifOSS-FuzzHeap-buffer-overflow in HeifContext::interpret_heif_fileNo score- neomind fusion platformNeoMind Fusion Platform Link cross site scripting3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration4.6 Medium
- i thirteen web solution video carousel slider with lightboxWordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)7.1 High
- rednao donations made easy – smart donations, smart donations +1 moreWordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- a. r. jones featured image pro post gridWordPress Featured Image Pro Post Grid Plugin <= 5.14 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pi websolution product page shipping calculator for woocommerce, woocommerce +1 moreWordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.25 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy iframe popup, iframe project iframe +1 moreWordPress iframe popup Plugin <= 3.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wolfgang ertl weebotliteWordPress weebotLite Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- palasthotel sunny searchWordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- themekraft post formWordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- zte mf286r, mf286r firmware +1 moreOS Command Injection Vulnerability in a Mobile Internet Product of ZTE6.8 Medium
- mattermost, mattermost server +1 moreParameter tampering in the registration resulting in blocked accounts to be created4.3 Medium
- cloud primero b.v dbargainWordPress DBargain Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ebecasWordPress eBecas Plugin <= 3.1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- devbuddy twitter feed, eji osigwe devbuddy twitter feed +1 moreWordPress DevBuddy Twitter Feed Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- plainwaire locatoraid store locatorWordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ono oogami wp chinese conversionWordPress WP Chinese Conversion Plugin <= 1.1.16 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…