CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse after free race between mbind() and vma-locked page fault7.0 High
- essential addons for elementor pro, wpdeveloper essential addons for elementor pro, essential addons for elementor +2 moreWordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker...8.8 High
- hewlett packard enterprise arubaos-switchMemory Corruption Vulnerability in ArubaOS-Switch4.5 Medium
- knx connection authorization, knx association protocol connection authorization option 1 +1 moreKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the...7.5 High
- hewlett packard enterprise arubaos-switchAuthenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface6.6 Medium
- hewlett packard enterprise arubaos-switchUnauthenticated Stored Cross-Site Scripting in ArubaOS-Switch8.3 High
- tenable nessusImproper authorization in Nessus4.3 Medium
- tenable nessusArbitrary File Write6.8 Medium
- tenable nessusPass-back vulnerability in Nessus4.1 Medium
- vmware aria operations for networksAria Operations for Networks contains an arbitrary file write vulnerability. An authenticated...7.2 High
- vmware aria operations for networksAria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of...9.8 Critical
- goauthentik authentikUsername enumeration attack in goauthentik5.3 Medium
- openpgpjsCleartext Signed Message Signature Spoofing in openpgpjs4.3 Medium
- arista eosOn affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.5.9 Medium
- arista eosOn affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward pac…5.3 Medium
- mongodb c driver, node.js, php driver +4 more +6 moreSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application4.2 Medium
- cloudflare warp, warp client +1 moreSpoofing User's Activity Loads in WARP Mobile Client (Android)3.9 Low
- cloudflare warp, warp client +1 moreInjecting Activity Loads in WARP Mobile Client3.9 Low
ntopngOSS-FuzzHeap-buffer-overflow in ICMPinfo::dissectICMPNo scorelibredwgOSS-FuzzHeap-double-free in bit_TV_to_utf8No score- motorola ebts/mbts base radio, ebts mbts base radio, ebts site controller firmware +1 more +3 moreMotorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola...8.4 High
- motorola ebts/mbts base radio, ebts base radio firmware, ebts mbts base radio +1 more +3 moreMotorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio...7.2 High
- motorola mbts site controller, mbts site controller firmware +1 moreMotorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site...7.2 High
- motorola mbts base radio, mbts base radio firmware +1 moreMotorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man...8.4 High
- motorola mbts site controller, mbts site controller firmware +1 moreMotorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site...9.4 Critical
- dell powerscale onefsDell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management...7.5 High
- hitachi hirdb server, hirdb server with addtional function, hirdb structured data access facility +1 more +3 moreInsufficient Logging Vulnerability in HiRDB5.3 Medium
tryton-serverDebiantryton-server - security updateNo score- nokia service router operating system, service router linux +1 moreNokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update...7.5 High
- cerebrate-project cerebrateIn Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change...4.3 Medium
- mybbMyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling inte…7.2 High
- frrouting, debian linux +1 moreAn issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large...9.8 Critical
- frrouting, debian linux, fedoraproject fedora +2 moreAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte...9.1 Critical
- frrouting, fedoraproject fedora +1 moreAn issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in...9.1 Critical
- frrouting, debian linux, fedoraproject fedora +2 moreAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the...7.5 High
- qlik senseA path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023...8.2 High
- qlik senseAn HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions...9.6 Critical
- webmin userminA Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001...5.4 Medium
- zbar project zbarA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23...9.8 Critical
- zbar project zbarHeap-based buffer overflow in ZBar9.8 Critical
- bladex springbladeSpringBlade vulnerable to SQL injection9.8 Critical
- bdcom olt p3310d-2ac, p3310d-2ac firmware +1 moreA cross-site scripting (XSS) vulnerability in the device web interface (Log Query page) of BDCOM...6.1 Medium
- mathjaxMathJax Regular expression Denial of Service (ReDoS)7.5 High
- aomediaAOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the...7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreXmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...6.5 Medium
- web-audimex audimexeeAudimexEE 15.0 was discovered to contain a full path disclosure vulnerability.5.3 Medium
- web-audimex audimexeeAudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting (XSS)...6.1 Medium
- qdrant* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of...7.5 High
- uatech badasoCross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to...5.4 Medium
- Show moreLoading…