CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- zscaler proxyInappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local...5.5 Medium
- grupposcai realgimmMultiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx...6.1 Medium
- grupposcai realgimmAn improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI...8.8 High
- grupposcai realgimmAn arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm...8.8 High
- grupposcai realgimmAn arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1...9.8 Critical
- grupposcai realgimmA SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1...9.8 Critical
- grupposcai realgimmA XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI...6.5 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the...4.9 Medium
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...7.1 High
- brocade fabric os, broadcom fabric operating system +1 morefirmwaredownload command could log servers passwords in clear text8.6 High
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.8 Medium
@apollo/servernpm,apollo-server-corenpm +1 morePrevent logging invalid header valuesNo scorehttps://github.com/pytorch/pytorch/.github/actions/filter-test-configsGitHub ActionsActions expression injection in `filter-test-configs` (`GHSL-2023-181`)No scorelinux-buildinfo-4.15.0-213-tuxcare.els1-genericTuxCare,linux-buildinfo-4.15.0-213-tuxcare.els1-lowlatencyTuxCare,linux-cloud-tools-4.15.0-213-tuxcare.els1TuxCare +31 more +33 moreUpdate of alt-phpNo scorelinux-buildinfo-4.15.0-213-tuxcare.els1-genericTuxCare,linux-buildinfo-4.15.0-213-tuxcare.els1-lowlatencyTuxCare,linux-cloud-tools-4.15.0-213-tuxcare.els1TuxCare +31 more +33 moreUpdate of alt-phpNo score- gitpython-developers gitpythonGitPython blind local file inclusion4.0 Medium
imagemagickTuxCare,imagemagick-6-commonTuxCare,imagemagick-6-docTuxCare +29 more +31 moreUpdate of alt-phpNo scoreimagemagickTuxCare,imagemagick-6.q16TuxCare,imagemagick-commonTuxCare +18 more +20 moreUpdate of alt-phpNo scoreamandaTuxCare,amanda-clientTuxCare,amanda-develTuxCare +1 more +3 moreUpdate of amandaNo score- neutrinolabs xrdpImproper handling of session establishment errors in xrdp2.6 Low
- find-exec project find-execCommand Injection Vulnerability in find-exec9.8 Critical
- borgbackup borgArchive spoofing vulnerability in borgbackup4.7 Medium
amandaTuxCare,amanda-clientTuxCare,amanda-develTuxCare +1 more +3 moreUpdate of amandaNo score- zope restrictedpythonSandbox escape via various forms of "format" in RestrictedPython8.3 High
- yugabyte yugabytedb, yugabytedb anywhere +1 moreSet Logging Level Without Authentication6.5 Medium
drupal/obfuscate_emailPackagistThis module enables you to hide email addresses from bots and site scrapers by using the rot13 strategy. The module doesn't sufficiently escape the data attribute under the scenario a user has access…No scoredrupal/unified_twig_extPackagistThis module makes PatternLab's custom Twig functions available to Drupal theming. The module's included examples don't sufficiently filter data. This vulnerability is mitigated by the fact that the in…No score- splunk, splunk enterprise, cloud +1 more +3 moreAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py7.8 High
- splunk, splunk enterprise +1 moreSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL7.0 High
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request6.3 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) via the ‘printf’ Search Function6.5 Medium
- splunk it service intelligence, itsi +1 moreUnauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)8.6 High
- splunk, splunk enterprise, cloud +1 more +3 moreReflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint8.4 High
- splunk, splunk enterprise, cloud +1 more +3 moreRemote Code Execution via Serialized Session Payload8.8 High
- splunk, splunk enterprise, cloud +1 more +3 moreCommand Injection in Splunk Enterprise Using External Lookups8.5 High
- cisco emergency responder, unified communications manager, unity connection +2 moreA vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM),...6.5 Medium
- mrdemonwolf livestream noticeWordPress Livestream Notice Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- davidsword mobile call now & map buttons, mobile call now \& map buttons +1 moreWordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- reservation reservation.studio, reservation.studio widget +1 moreWordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- webcodin wcp openweatherWordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- xootix side cart woocommerce (ajax), side cart woocommerce +1 moreWordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- kevon adonis wp abstractsWordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mahlamusa who hit the page – hit counter, who hit the page - hit counter +1 moreWordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- abhay yadav breadcrumb simpleWordPress breadcrumb simple Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- julien berthelot / mpembed wp matterport shortcodeWordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ian sadovy wordpress tablesWordPress WordPress Tables Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- didcode spamreferrerblockWordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- radical web design gdpr cookie consent notice boxWordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- woocommerce box officeWordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wedevs wp erpWordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…