CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.24.6 - Unauthenticated Arbitrary File Upload9.8 Critical
- veronalabs slimstat analyticsSlimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
opendmarcDebianopendmarc - security updateNo score- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.28.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.28.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private Window7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreXLL file extensions were downloadable without warnings4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencrypted6.5 Medium
- mozilla firefoxPersisted search terms were formatted as URLs3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in JIT UpdateRegExpStatics6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC FilePickerShownCallback6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC ColorPickerShownCallback6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC CanvasTranslator6.5 Medium
- tenda ac5, ac9, ac5 firmware +1 more +3 moreTenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to...9.8 Critical
- tenda ac5, ac7, ac9 +3 more +5 moreTenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15...9.8 Critical
- tenda ac5, ac9, ac5 firmware +1 more +3 moreTenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to...9.8 Critical
- tenda ac9, ac9 firmware +1 moreTenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter...9.8 Critical
- tenda ac5, ac7, ac9 +3 more +5 moreTenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06...9.8 Critical
- tenda ac7, ac7 firmware +1 moreTenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at...9.8 Critical
- tenda ac5, ac7, ac5 firmware +1 more +3 moreTenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack...9.8 Critical
- tenda ac5, ac7, ac9 +3 more +5 moreTenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06...9.8 Critical
- tenda ac7, ac7 firmware +1 moreTenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g...9.8 Critical
- tenda ac9, ac9 firmware +1 moreTenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter...9.8 Critical
- tenda ac5, ac9, ac5 firmware +1 more +3 moreTenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to...9.8 Critical
- tenda ac7, ac9, ac7 firmware +1 more +3 moreTenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a...9.8 Critical
- phpjabbers business directory scriptphpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter.7.5 High
- phpjabbers php forum scriptphpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword...6.1 Medium
- phpjabbers business directory scriptphpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- webminA Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000...6.1 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function ...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function ...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function ...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function ...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function ...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command...9.8 Critical
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command...9.8 Critical
- archive project archivePath traversal in Archive7.8 High
- peakstep zipfoundationPath traversal in ZIPFoundation7.8 High
- archive project archiveFilename spoofing in archive7.8 High
- ziparchive project ziparchiveAn unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to...5.5 Medium
- marmelroy zipPath traversal in Zip Swift7.8 High
- uatech badasoBadaso vulnerable to cross-site scripting5.4 Medium
- waqaskanju chitor-cmsChitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.9.8 Critical
- adobe css-tools, not a product +1 moreDenial of Service of regular expression in package @adobe/css-tools5.3 Medium
- intland codebeamerPTC Codebeamer Cross site scripting8.8 High
- Show moreLoading…