CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- bgp openbgpdIn OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by...5.3 Medium
- trispark novusedu, veo transportation +1 moreTripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084...9.8 Critical
- earcms earAn issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code...9.8 Critical
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c5.5 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen Redirect Vulnerability in jupyter-server4.3 Medium
- jupyter server, jupyter-server jupyter server +1 morecross-site inclusion (XSSI) of files in jupyter-server4.6 Medium
- linuxfoundation spinnakerImproper log output when using GitHub Status Notifications in spinnaker4.0 Medium
- gitpython-developers gitpythonUntrusted search path on Windows systems leading to arbitrary code execution7.8 High
ca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- 3ds 3dexperience, dassault systèmes simulia 3dorchestrate +1 moreOS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x8.8 High
librawspeedOSS-FuzzHeap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternalNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5O__chunk_protectNo scoreopenscOSS-FuzzStack-buffer-overflow in iasecc_crt_parseNo score- glb meetup tag extension, meetup tag +1 moreglb Meetup Tag Extension Link Attribute reverse tabnabbing3.5 Low
- nikooo777 cksurfnikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of service3.5 Low
ca-certificates-mozillaopenSUSE,ca-certificates-mozilla-prebuiltopenSUSE +1 moreSecurity update for ca-certificates-mozillaNo score- apache airflow spark providerApache Airflow Spark Provider Deserialization Vulnerability RCE8.8 High
- apache airflow sqoop providerApache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability8.8 High
- saho adm-100fp, adm100, adm-100 firmware +1 more +3 moreSaho ADM100&ADM-100FP - Execute Code7.5 High
- saho adm-100fp, adm100, adm-100 firmware +1 more +3 moreSaho ADM100&ADM-100FP - Arbitrary File Upload9.8 Critical
- saho adm-100fp, adm100, adm-100 firmware +1 more +3 moreSaho ADM100&ADM-100FP - Broken Access Control9.1 Critical
- spotcam co., ltd. sense, myspotcam sense firmware +1 moreSpotCam Co., Ltd. SpotCam Sense - Command Injection9.8 Critical
- doc2k re-chatDoc2k RE-Chat re_chat.js cross site scripting3.5 Low
- spotcam co., ltd. fhd 2, myspotcam fhd 2 firmware, spotcam co ltd fhd2 +2 moreSpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -29.8 Critical
- spotcam co., ltd. fhd 2, myspotcam fhd 2 firmware, spotcam co ltd fhd2 +2 moreSpotCam Co., Ltd. SpotCamFHD - Command Injection -19.8 Critical
- spotcam co., ltd. fhd 2, myspotcam fhd 2 firmware, spotcam co ltd fhd2 +2 moreSpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -19.8 Critical
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server cross-site request forgery5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server CSV injection7.0 High
- ibm guardium cloud key managerIBM Security Guardium Data Encryption code execution6.5 Medium
- ibm guardium cloud key managerIBM Security Guardium Data Encryption information disclosure5.3 Medium
- ibm guardium cloud key managerIBM Security Guardium Data Encryption information disclosure5.3 Medium
- omeka omeka/omeka-s, s +1 moreImproper Authorization of Index Containing Sensitive Information in omeka/omeka-s6.5 Medium
- omeka omeka/omeka-s, s +1 moreCross-site Scripting (XSS) - Stored in omeka/omeka-s7.1 High
- patton smartnode sn200 firmwareSmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.9.8 Critical
- pagekitCommand injection in pagekit7.8 High
- o-ran-sc ric message routerBuffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote...7.5 High
- o-ran-sc ric message routerBuffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote...7.5 High
- virustotal yaraBuffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute...8.8 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function...9.8 Critical
- pf4j project pf4jpf4j vulnerable to remote code execution via expandIfZip method in the extract function7.5 High
- pf4j project pf4jpf4j vulnerable to remote code execution via loadpluginPath parameter7.5 High
- pf4j project pf4jpf4j vulnerable to remote code execution via the zippluginPath parameter7.5 High
- perfree perfreeblogAn issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via...7.2 High
- libmingBuffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a...6.5 Medium
- phpjabbers make an offer widgetUser enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during...9.8 Critical
- phpjabbers ticket support scriptUser enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during...9.8 Critical
- phpjabbers event booking calendarUser enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during...9.8 Critical
- phpjabbers car rental scriptUser enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during...9.8 Critical
- phpjabbers taxi booking scriptUser enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during...9.8 Critical
- Show moreLoading…