CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
libredwgOSS-FuzzHeap-buffer-overflow in dxf_fixup_stringNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_domain_classify_containsNo scorejavaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- zscaler zia admin portal, internet access admin portal +1 moreImproper SAML signature verification9.6 Critical
- ibm security verify information queueIBM Security Verify Information Queue information disclosure4.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure4.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure2.9 Low
- eclipse mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that...5.8 Medium
- eclipse mosquittoThe broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be...7.5 High
- eclipse mosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will...5.8 Medium
- synology router manager, router manager (srm) +1 moreExposure of sensitive information to an unauthorized actor vulnerability in cgi component in...5.3 Medium
- synology router manager, router manager (srm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...5.3 Medium
- synology router manager, router manager (srm) +1 moreUncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager ...4.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...7.2 High
- etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 moreOrder Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting6.1 Medium
- rednao woocommerce pdf invoice builder, edgarrojas pdf builder for woocommerce. create invoices,packing slips and more +1 moreWooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save4.3 Medium
- badgeosBadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion6.5 Medium
- suresh chand chp ads block detectorCHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action4.3 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id7.2 High
- etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 moreOrder Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.7 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display5.4 Medium
- plugin waiting, pluginbuilders waiting: one-click countdowns +1 moreWaiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery6.3 Medium
- badgeosBadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode5.4 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.0 - Hardcoded Encryption Key4.9 Medium
- suresh chand chp ads block detectorCHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting4.9 Medium
- mehulkaklotar woo custom emailsWoo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit6.1 Medium
- rednao woocommerce pdf invoice builder, edgarrojas pdf builder for woocommerce. create invoices,packing slips and more +1 moreWooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting4.4 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation8.8 High
- badgeosBadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries4.3 Medium
- badgeosBadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite4.3 Medium
- webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 moreStripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass9.8 Critical
- suresh chand chp ads block detectorCHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update4.3 Medium
- rednao woocommerce pdf invoice builder, edgarrojas pdf builder for woocommerce. create invoices,packing slips and more +1 moreWooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation4.3 Medium
- rednao woocommerce pdf invoice builder, edgarrojas pdf builder for woocommerce. create invoices,packing slips and more +1 moreWooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export8.8 High
- rahulsingh74388 quick post duplicator, wpspeedx rduplicator +1 moreQuick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id8.8 High
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode4.3 Medium
- rednao woocommerce pdf invoice builder, edgarrojas pdf builder for woocommerce. create invoices,packing slips and more +1 moreWooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure4.3 Medium
- plugin waiting, pluginbuilders waiting: one-click countdowns +1 moreWaiting: One-click countdowns <= 0.6.2 - Missing Authorization6.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeb authentication and authorization bypass8.1 High
- broadcom brocade sannav, brocade sannav +1 morePossible information exposure through log file vulnerability5.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreStorage of clear text password in Brocade SANnav5.4 Medium
- brocade fabric os, broadcom fabric operating system +1 moreSegmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.04.4 Medium
- brocade fabric os, broadcom fabric operating system +1 morePossible buffer overflow in portcfgfportbuffers in Brocade Fabric OS4.4 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms22.6 Low
- instantsoft instantsoft/icms2, instantcms +1 moreCross-site Scripting (XSS) - Reflected in instantsoft/icms24.3 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreCross-site Scripting (XSS) - Stored in instantsoft/icms25.9 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreCross-site Scripting (XSS) - Stored in instantsoft/icms26.8 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreServer-Side Request Forgery (SSRF) in instantsoft/icms26.4 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreImproper Access Control in instantsoft/icms24.7 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreSession Fixation in instantsoft/icms24.3 Medium
- Show moreLoading…