CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- phpjabbers fundraising scriptUser enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during...9.8 Critical
- phpjabbers yacht listing scriptUser enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during...9.8 Critical
- phpjabbers hotel booking systemUser enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during...9.8 Critical
- phpjabbers restaurant booking scriptUser enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during...9.8 Critical
- phpjabbers document creatorUser enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password...9.8 Critical
- phpjabbers food delivery scriptUser enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during...9.8 Critical
- phpjabbers callback widgetUser enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password...9.8 Critical
- phpjabbers callback widgetThere is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in...6.1 Medium
- phpjabbers car rental scriptIn PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or...8.8 High
- phpjabbers ticket support scriptThere is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in...5.4 Medium
- phpjabbers make an offer widgetThere is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in...6.1 Medium
- phpjabbers fundraising scriptPHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action"...6.1 Medium
- phpjabbers yacht listing scriptThere is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in...6.1 Medium
- phpjabbers food delivery scriptPHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of...9.8 Critical
- phpjabbers food delivery scriptPHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter...9.8 Critical
- busyboxAn issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.7.8 High
- free and open source inventory management system project and open source inventory management systemMultiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management...6.1 Medium
- free and open source inventory management system project and open source inventory management systemA stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management...6.1 Medium
- themevolty theme volty video tabtheme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- themevolty theme volty cms blogTheme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability...9.8 Critical
- tribalsystems zenarioA stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4...4.8 Medium
- gpacGPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the...5.5 Medium
- ectouchECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter...9.8 Critical
- html2pdf project html2pdfSpipu HTML2PDF vulnerable to cross-site scripting6.1 Medium
- ansible-semaphore ansible semaphoreCode injection in ansible semaphore8.8 High
- uatech badasoCross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute...5.4 Medium
- frrouting, pica8 picos, debian linux +1 more +3 moreFRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial...7.5 High
- samsung exynos, exynos 1080 firmware, exynos 1280 firmware +11 more +13 moreAn issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610,...7.5 High
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.8.1 High
- techview la-5570 wireless gateway, jaycar la5570 firmware +1 moreAn issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical...6.8 Medium
- jaycar la5570 firmware, techview la-5570 wireless gateway +1 moreAn issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers...6.8 Medium
- stormshield network securityASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a...7.5 High
- stormshield ssl vpn clientAn issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are...5.3 Medium
- humaxdigital hgb10r-02 firmwareCross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version...6.1 Medium
- qemu, debian linux +1 moreAn issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute...8.8 High
- ibm security guardiumIBM Security Guardium information disclosure7.5 High
- ibm security guardiumIBM Security Guardium SQL injection7.6 High
- ibm security guardiumIBM Security Guardium cross-site scripting4.6 Medium
- ibm security guardiumIBM Security Guardium command execution7.2 High
- bettershop laiketuiBettershop LaikeTui POST Request unrestricted upload6.3 Medium
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System staff_data.php sql injection6.3 Medium
- ibm security guardiumIBM Security Guardium information disclosure5.3 Medium
- ibm security guardiumIBM Security Guardium cross-site scripting5.5 Medium
- ibm security guardiumIBM Security Guardium cross-site scripting8.9 High
- ibm spectrum copy data management, storage copy data management +1 moreIBM Spectrum Copy Data Management information disclosure5.9 Medium
- code-projects inventory management system, inventory management system project management system +1 moreSourceCodester Inventory Management System search_purchase_paymen_report.php sql injection6.3 Medium
checkstyleOSS-FuzzSecurity exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContextNo scorelibredwgOSS-FuzzSegv on unknown address in dwg_encodeNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::SomeIpSdLayer::isDataValidNo score- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injection6.3 Medium
- Show moreLoading…