CVE-2023 records published in August 2023
This page lists the 2,165 CVE-2023 records published in August 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 13 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 36817.0% of these records
- Listed in CISA KEV
- 130.6% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 763.5% of these records
- Exploit code
- 1004.6% of these records
- Actionable vendor fix
- 1,58173.0% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in August 2023 have had from about 38 months to about 39 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-41751 | Acronis Agent improper authentication | 6.3CNA v3.0 | 0.1% | 2023-08-31 | Fix |
| CVE-2023-41750 | Acronis Agent missing authorization | 3.3CNA v3.0 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-41749 | Acronis Agent information disclosure | 4.4CNA v3.0 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-41748 | Acronis Cloud Manager remote command execution | 8.0CNA v3.0 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-41747 | Acronis Cloud Manager path traversal | 6.5CNA v3.0 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-41746 | Acronis Cloud Manager remote command execution | 8.0CNA v3.0 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-41745 | Acronis Agent information disclosure | 6.1CNA v3.0 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-41744 | Acronis Agent improper signature verification | 7.8CNA v3.0 | 0.1% | 2023-08-31 | Fix |
| CVE-2023-41743 | Acronis Cyber Protect Home Office improper privilege management | 8.8CNA v3.0 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-41742 | Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. | 4.3CNA v3.0 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-41741 | Synology Router Manager (SRM) cgi component information disclosure | 5.3CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-41740 | Synology Router Manager (SRM) path traversal | 5.3CNA v3.1 | 0.8% | 2023-08-31 | Fix |
| CVE-2023-41739 | Synology Router Manager (SRM) File Functionality resource exhaustion | 4.9CNA v3.1 | 0.8% | 2023-08-31 | Fix |
| CVE-2023-41738 | Synology Router Manager (SRM) OS command improper neutralization | 7.2CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-41717 | Zscaler Proxy files accessible to external parties | 5.5v3.1 | 0.4% | 2023-08-31 | Exploit code |
| CVE-2023-41642 | Grupposcai Realgimm ErroreNonGestito.aspx component reflected cross-site scripting | 6.1v3.1 | 1.1% | 2023-08-31 | Nuclei |
| CVE-2023-41640 | Grupposcai Realgimm component ErroreNonGestito.aspx improper error handling | 8.8v3.1 | 1.0% | 2023-08-31 | |
| CVE-2023-41638 | Grupposcai Realgimm Gestione Documentale module arbitrary file upload | 8.8v3.1 | 1.1% | 2023-08-31 | |
| CVE-2023-41637 | Grupposcai Realgimm Carica immagine function arbitrary file upload | 9.8v3.1 | 1.2% | 2023-08-31 | |
| CVE-2023-41636 | Grupposcai Realgimm Data Richiesta dal parameter SQL injection | 9.8v3.1 | 1.1% | 2023-08-31 | |
| CVE-2023-41635 | Grupposcai Realgimm VerifichePeriodiche.aspx component XML external entity injection | 6.5v3.1 | 0.8% | 2023-08-31 | |
| CVE-2023-41045 | Insecure source port usage for DNS queries in Graylog | 3.7CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-41044 | Partial path traversal vulnerability in Support Bundle feature of Graylog | 3.3CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-41034 | DDFFileParser in eclipse leshan is vulnerable to XXE Attacks | 6.5CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-40589 | FreeRDP global-buffer-overflow in ncrush_decompress | 4.3CNA v3.1 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-40576 | Out-of-bounds read in FreeRDP | 5.3CNA v3.1 | 1.2% | 2023-08-31 | Fix |
| CVE-2023-40575 | Out-of-bounds read in FreeRDP | 5.3CNA v3.1 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-40574 | Out-of-bounds write in FreeRDP | 6.5CNA v3.1 | 1.2% | 2023-08-31 | Fix |
| CVE-2023-40569 | Out-of-bounds write in FreeRDP | 6.5CNA v3.1 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-40567 | Out-of-bounds write in FreeRDP | 6.5CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-40188 | Out-of-bounds read in FreeRDP | 5.3CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-40187 | FreeRDP avc420 and avc444 buffer handlers use-after-free | 7.3CNA v3.1 | 1.2% | 2023-08-31 | Fix |
| CVE-2023-40186 | IntegerOverflow leading to out-of-bound write vulnerability in FreeRDP | 6.5CNA v3.1 | 1.4% | 2023-08-31 | Fix |
| CVE-2023-40181 | Integer-underflow leading to out-of-bound read in FreeRDP | 5.3CNA v3.1 | 1.7% | 2023-08-31 | Fix |
| CVE-2023-39912 | Zoho ManageEngine ADManager Plus path traversal | 4.9v3.1 | 3.8% | 2023-08-31 | Fix |
| CVE-2023-39356 | Missing offset validation leading to out-of-bounds read in FreeRDP | 5.3CNA v3.1 | 1.8% | 2023-08-31 | Fix |
| CVE-2023-39355 | FreeRDP use-after-free in RDPGFX_CMDID_RESETGRAPHICS | 7.0CNA v3.1 | 1.3% | 2023-08-31 | Fix |
| CVE-2023-39354 | FreeRDP out-of-bounds read in nsc_rle_decompress_data | 5.9CNA v3.1 | 1.6% | 2023-08-31 | Fix |
| CVE-2023-39353 | Missing offset validation leading to out of bound read in FreeRDP | 5.3CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-39352 | Invalid offset validation leading to out of bound write in FreeRDP | 5.3CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-39351 | FreeRDP null pointer dereference leading denial of service | 5.3CNA v3.1 | 1.6% | 2023-08-31 | Fix |
| CVE-2023-39350 | Incorrect offset calculation leading to denial of service in FreeRDP | 5.9CNA v3.1 | 1.6% | 2023-08-31 | Fix |
| CVE-2023-34392 | Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator missing authentication | 8.2CNA v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-34391 | Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details. This issue affec | 7.4CNA v3.1 | 0.1% | 2023-08-31 | Fix |
| CVE-2023-33835 | IBM Security Verify Information Queue information disclosure | 4.3CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-33834 | IBM Security Verify Information Queue information disclosure | 4.3CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-33833 | IBM Security Verify Information Queue information disclosure | 2.9CNA v3.1 | 0.1% | 2023-08-31 | Fix |
| CVE-2023-31925 | Storage of clear text password in Brocade SANnav | 5.4CNA v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-31424 | Brocade SANnav web authentication and authorization bypass | 8.1CNA v3.1 | 0.9% | 2023-08-31 | Fix |
| CVE-2023-31423 | Brocade SANnav possible information exposure through log file | 5.7CNA v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-31175 | An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for mo | 8.8CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-31174 | Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator cross-site request forgery (CSRF) | 7.4CNA v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-31173 | Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator use of hard-coded credentials | 7.7CNA v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-31172 | Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software incomplete filtering | 5.9CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-31171 | Schweitzer Engineering Laboratories acSELerator QuickSet SQL injection | 5.9CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-31170 | Schweitzer Engineering Laboratories acSELerator QuickSet inclusion of untrusted functionality | 5.9CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-31169 | Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software improper Unicode handling | 4.8CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-31168 | Schweitzer Engineering Laboratories acSELerator QuickSet inclusion of untrusted functionality | 5.5CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-31167 | Schweitzer Engineering Laboratories acSELerator Bay Screen Builder path traversal | 5.0CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-28801 | Zscaler ZIA Admin Portal improper SAML signature verification | 9.6CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-20900 | VMware Tools authentication bypass by replay | 7.1CNA v3.1 | 1.5% | 2023-08-31 | Fix |
| CVE-2023-4688 | Acronis Agent sensitive information in log files | 4.4CNA v3.0 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4683 | Null pointer dereference in gpac/gpac | 5.5v3.1 | 0.3% | 2023-08-31 | Exploit codeFix |
| CVE-2023-4682 | Heap-based buffer overflow in gpac/gpac | 5.5v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4681 | Null pointer dereference in gpac/gpac | 5.5v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4678 | Divide by zero in gpac/gpac | 5.5v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4655 | Cross-site scripting (XSS) Reflected in instantsoft/icms2 | 6.1v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4654 | Sensitive Cookie in HTTPS Session without Secure attribute in instantsoft/icms2 | 3.5v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4653 | Cross-site scripting (XSS) Stored in instantsoft/icms2 | 4.8v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4652 | Cross-site scripting (XSS) Stored in instantsoft/icms2 | 5.4v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4651 | Server-side request forgery (SSRF) in instantsoft/icms2 | 5.4v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-4650 | Improper access control in instantsoft/icms2 | 4.7v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4649 | Session fixation in instantsoft/icms2 | 5.4v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-4500 | Order Tracking Pro WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4471 | Order Tracking Pro WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2023-08-31 | Fix |
| CVE-2023-4315 | Woo Custom Emails WordPress plugin reflected cross-site scripting via wcemails_edit | 6.1CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-4299 | Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication | 8.1NVD v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-4245 | RedNao PDF Invoice Builder for WooCommerce invoice detail lookup missing authorization | 4.3CNA v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4163 | Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS | 4.4CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4162 | Fabric OS passwdcfg command denial of service | 4.4CNA v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-4161 | WooCommerce PDF Invoice Builder WordPress plugin cross-site request forgery to Custom field creation | 4.3CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-4160 | WooCommerce PDF Invoice Builder WordPress plugin authenticated (Administrator+) cross-site scripting | 4.8v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-4000 | Waiting: One-click countdowns WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-08-31 | Fix |
| CVE-2023-3999 | Waiting: One-click countdowns WordPress plugin missing authorization | 4.3v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-3764 | WooCommerce PDF Invoice Builder WordPress plugin cross-site request forgery via Save | 4.3CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-3677 | WooCommerce PDF Invoice Builder WordPress plugin SQL injection | 8.8CNA v3.1 | 0.8% | 2023-08-31 | Fix |
| CVE-2023-3636 | WP Project Manager WordPress plugin arbitrary Usermeta update to authenticated privilege escalation | 8.8CNA v3.1 | 0.9% | 2023-08-31 | Fix |
| CVE-2023-3489 | Brocade Fabric OS firmwaredownload command could log servers passwords in clear text | 8.6CNA v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-3404 | ProfileGrid WordPress plugin hard-coded encryption key | 4.9CNA v3.1 | 0.7% | 2023-08-31 | Fix |
| CVE-2023-3162 | Stripe Payment Plugin for WooCommerce WordPress plugin authentication bypass | 9.8CNA v3.1 | 1.2% | 2023-08-31 | Fix |
| CVE-2023-2354 | CHP Ads Block Detector WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-2353 | CHP Ads Block Detector WordPress plugin missing authorization to plugin settings update | 4.3v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-2352 | CHP Ads Block Detector WordPress plugin cross-site request forgery via chp_abd_action | 4.3CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-2279 | WP Directory Kit WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.3% | 2023-08-31 | Fix |
| CVE-2023-2229 | Quick Post Duplicator WordPress plugin authenticated (Contributor+) SQL injection via post_id | 8.8CNA v3.1 | 0.7% | 2023-08-31 | |
| CVE-2023-2188 | Colibri Page Builder WordPress plugin authenticated (Administrator+) SQL injection via post_id | 4.9NVD v3.1 | 0.8% | 2023-08-31 | Fix |
| CVE-2023-2174 | BadgeOS WordPress plugin missing authorization in delete_badgeos_log_entries | 4.3v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-2173 | BadgeOS WordPress plugin insecure direct object reference to arbitrary post deletion | 4.3v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-2172 | BadgeOS WordPress plugin insecure direct object reference to arbitrary post Title Overwrite | 4.3CNA v3.1 | 0.5% | 2023-08-31 | Fix |
| CVE-2023-2171 | BadgeOS WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-08-31 | Fix |
| CVE-2023-0689 | Metform Elementor Contact Form Builder WordPress plugin information disclosure | 4.3CNA v3.1 | 0.6% | 2023-08-31 | Fix |
| CVE-2023-41563 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41562 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41561 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41560 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-30 | |
| CVE-2023-41559 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41558 | Tenda AC7 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41557 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41556 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-08-30 | Emerging Threats |
| CVE-2023-41555 | Tenda AC7 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41554 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41553 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41552 | Tenda AC7 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-30 | |
| CVE-2023-41539 | PHP Jabbers Business Directory Script SQL injection | 7.5v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-41538 | PHP Jabbers PHP Forum Script cross-site scripting | 6.1v3.1 | 1.1% | 2023-08-30 | Nuclei |
| CVE-2023-41537 | PHP Jabbers Business Directory Script cross-site scripting | 6.1v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-41163 | Webmin file manager tab in Usermin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-41041 | User session is still usable after logout in graylog2-server | 2.6CNA v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-41040 | GitPython blind local file inclusion | 4.0CNA v3.1 | 1.1% | 2023-08-30 | Fix |
| CVE-2023-41039 | Sandbox escape via various forms of format in RestrictedPython | 8.3CNA v3.1 | 0.7% | 2023-08-30 | Fix |
| CVE-2023-40848 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40847 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40845 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40844 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40843 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40842 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40841 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40840 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-40839 | Tenda AC6 OS command injection | 9.8v3.1 | 1.0% | 2023-08-30 | |
| CVE-2023-40838 | Tenda AC6 OS command injection | 9.8v3.1 | 1.1% | 2023-08-30 | |
| CVE-2023-40837 | Tenda AC6 OS command injection | 9.8v3.1 | 0.9% | 2023-08-30 | |
| CVE-2023-40598 | Command injection in Splunk Enterprise using External Lookups | 8.8v3.1 | 0.8% | 2023-08-30 | Fix |
| CVE-2023-40597 | Absolute path traversal in Splunk Enterprise using runshellscript.py | 8.8v3.1 | 0.2% | 2023-08-30 | Fix |
| CVE-2023-40596 | Splunk Enterprise DLL OPENSSLDIR path reference privilege escalation | 8.8v3.1 | 0.2% | 2023-08-30 | Fix |
| CVE-2023-40595 | Splunk Enterprise remote code execution via Serialized Session Payload | 8.8v3.1 | 0.9% | 2023-08-30 | Fix |
| CVE-2023-40594 | Splunk Enterprise denial of service (DoS) via the printf Search function | 7.5v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-40593 | Denial of service (DoS) in Splunk Enterprise using a Malformed SAML request | 7.5v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2023-40592 | Splunk Enterprise reflected cross-site scripting (XSS) on /app/search/table web endpoint | 6.1NVD v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2023-40582 | Command injection vulnerability in find-exec | 9.8CNA v3.1 | 1.8% | 2023-08-30 | Fix |
| CVE-2023-40184 | Improper handling of session establishment errors in xrdp | 2.6CNA v3.1 | 0.9% | 2023-08-30 | Fix |
| CVE-2023-39139 | Path traversal in Archive | 7.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-39138 | Path traversal in ZIPFoundation | 7.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-39137 | Filename spoofing in Archive | 7.8v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-39136 | Ziparchive denial of service | 5.5v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-39135 | Path traversal in ZIP Swift | 7.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-38970 | Badaso vulnerable to cross-site scripting | 5.4v3.1 | 0.7% | 2023-08-30 | |
| CVE-2023-36811 | Archive spoofing vulnerability in borgbackup | 4.7CNA v3.1 | 0.1% | 2023-08-30 | Fix |
| CVE-2023-35094 | WP Matterport Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-35092 | breadcrumb simple WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34372 | Download SpamReferrerBlock WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34187 | Alan Tien Call Now Icon Animate plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34184 | Woocommerce Order address Print WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34183 | Unite Gallery Lite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-34180 | Google Fonts For WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-34176 | Chilexpress woo oficial WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34175 | Login Configurator WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34174 | BBS e-Popup WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34173 | Yandex Metrica Counter WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34172 | WordPress Social Login plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34032 | bbPress Toolkit WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-08-30 | |
| CVE-2023-34023 | WordPress Social Login plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-34022 | Dynamic QR Code Generator WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-08-30 | |
| CVE-2023-34008 | WP ERP WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-34004 | WooCommerce Box Office WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-33929 | Easy Admin Menu WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-33325 | Leyka WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-33320 | WP-Hijri WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-33317 | WooCommerce Warranty Requests WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-33210 | nuajik CDN WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-33208 | Cookie Monster WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-32962 | WishSuite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32802 | WooCommerce Pre-Orders WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32801 | WooCommerce Composite Products WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32793 | WooCommerce Pre-Orders WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32746 | WooCommerce Brands WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32742 | WP SMS WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32740 | Custom 404 Pro WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-32597 | Video Gallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-32294 | GDPR Cookie Consent Notice Box WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-31714 | Waqaskanju Chitor-cms SQL injection | 9.8v3.1 | 5.8% | 2023-08-30 | Exploit codeFix |
| CVE-2023-28692 | WP Abstracts WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-28415 | Side Cart Woocommerce (Ajax) WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-27621 | Livestream Notice WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-27426 | NotifyVisitors WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-25471 | WCP OpenWeather WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-08-30 | |
| CVE-2023-25466 | Who Hit The Page Hit Counter WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-25462 | WP htaccess Control WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-25453 | WordPress Tables plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-08-30 | |
| CVE-2023-25019 | Chaty WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-24401 | Mobile Call Now and Map Buttons WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-24397 | Reservation.Studio widget WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-23765 | Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling | 4.8CNA v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2023-20266 | Cisco Emergency Responder improper signature verification | 6.5CNA v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-4640 | YugabyteDB Anywhere Set Logging Level without Authentication | 6.5CNA v3.1 | 0.4% | 2023-08-30 | |
| CVE-2023-4624 | Server-side request forgery (SSRF) in bookstackapp/BookStack | 2.4v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2023-4600 | AffiliateWP WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-4599 | Email Encoder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-4597 | Slimstat Analytics WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2023-08-30 | Fix |
| CVE-2023-4596 | Forminator WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 14.3% | 2023-08-30 | NucleiExploit codeFix |
| CVE-2023-4571 | Unauthenticated log injection in Splunk IT Service Intelligence (ITSI) | 8.6v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-4522 | Improper validation of specified type of input in GitLab | 4.3CNA v3.1 | 1.2% | 2023-08-30 | Fix |
| CVE-2023-4209 | POEditor WordPress plugin settings reset via CSRF | 4.3NVD v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-4150 | User Activity Tracking and Log WordPress plugin License Update/Deactivation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-4109 | Ninja Forms WordPress plugin Admin+ stored HTML injection | 4.8NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-4036 | Simple Blog Card WordPress plugin Subscriber+ arbitrary post access | 4.3NVD v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2023-4035 | Simple Blog Card WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-4023 | All Users Messenger WordPress plugin Subscriber+ Message deletion via IDOR | 4.3NVD v3.1 | 0.5% | 2023-08-30 | |
| CVE-2023-4013 | GDPR Cookie Compliance WordPress plugin License Update/Deactivation via CSRF | 6.5NVD v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-3992 | PostX - Gutenberg Post Grid Blocks WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-3720 | Upload Media By URL WordPress plugin stored XSS via CSRF | 6.5NVD v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-3501 | FormCraft WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-3356 | Subscribers Text Counter WordPress plugin settings update via CSRF to stored XSS | 4.3NVD v3.1 | 0.3% | 2023-08-30 | Fix |
| CVE-2023-3136 | MailArchiver WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-08-30 | Fix |
| CVE-2023-1982 | Front Editor WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-08-30 | Fix |
| CVE-2023-41376 | Nokia Service Router Operating System incorrect control flow | 7.5v3.1 | 0.9% | 2023-08-29 | |
| CVE-2023-41363 | Cerebrate user settings controller vulnerability | 4.3v3.1 | 0.4% | 2023-08-29 | |
| CVE-2023-41362 | MyBB Admin CP templates code injection | 7.2v3.1 | 2.0% | 2023-08-29 | Exploit codeFix |
| CVE-2023-41361 | FRRouting buffer overflow | 9.8v3.1 | 0.9% | 2023-08-29 | Fix |
| CVE-2023-41360 | FRRouting out-of-bounds read | 9.1v3.1 | 1.2% | 2023-08-29 | Fix |
| CVE-2023-41359 | FRRouting out-of-bounds read | 9.1v3.1 | 1.2% | 2023-08-29 | Fix |
| CVE-2023-41358 | FRRouting null pointer dereference | 7.5v3.1 | 1.3% | 2023-08-29 | Fix |
| CVE-2023-41266 | Qlik Sense path traversal | 6.5NVD v3.1 | 84.8% | 2023-08-29 | KEVNucleiEmerging ThreatsKCVFix |
| CVE-2023-41265 | Qlik Sense HTTP tunneling vulnerability | 9.9NVD v3.1 | 88.2% | 2023-08-29 | KEVNucleiEmerging ThreatsKCVFix |
| CVE-2023-41153 | Webmin Usermin SSH configuration tab stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-29 | Fix |
| CVE-2023-41037 | Cleartext Signed Message Signature spoofing in openpgpjs | 4.3CNA v3.1 | 0.4% | 2023-08-29 | Fix |
| CVE-2023-40890 | Zbar lookup_sequence function stack-based buffer overflow | 9.8v3.1 | 1.9% | 2023-08-29 | Fix |
| CVE-2023-40889 | Heap-based buffer overflow in ZBar | 9.8v3.1 | 1.7% | 2023-08-29 | Fix |
| CVE-2023-40787 | SpringBlade vulnerable to SQL injection | 9.8v3.1 | 18.2% | 2023-08-29 | |
| CVE-2023-39678 | BDCOM P3310d-2ac device web interface cross-site scripting | 6.1v3.1 | 0.4% | 2023-08-29 | |
| CVE-2023-39663 | MathJax regular expression denial of service (ReDoS) | 7.5v3.1 | 0.8% | 2023-08-29 | Fix |
| CVE-2023-39616 | Aomedia memory corruption | 7.5v3.1 | 0.7% | 2023-08-29 | Fix |
| CVE-2023-39615 | libxml2 out-of-bounds read | 6.5NVD v3.1 | 1.1% | 2023-08-29 | Fix |
| CVE-2023-39559 | Web-audimex Audimexee path traversal | 5.3v3.1 | 0.7% | 2023-08-29 | |
| CVE-2023-39558 | Web-audimex Audimexee cross-site scripting | 6.1v3.1 | 0.5% | 2023-08-29 | |
| CVE-2023-39522 | Username enumeration attack in goauthentik | 5.3CNA v3.1 | 0.6% | 2023-08-29 | Fix |
| CVE-2023-39268 | Memory corruption vulnerability in ArubaOS-Switch | 4.5CNA v3.1 | 0.8% | 2023-08-29 | Fix |
| CVE-2023-39267 | Authenticated denial of service vulnerability in ArubaOS-Switch Command Line interface | 6.6CNA v3.1 | 0.8% | 2023-08-29 | Fix |
| CVE-2023-39266 | Unauthenticated stored cross-site scripting in ArubaOS-Switch | 8.3CNA v3.1 | 0.5% | 2023-08-29 | Fix |
| CVE-2023-38975 | qdrant buffer overflow | 7.5v3.1 | 1.1% | 2023-08-29 | |
| CVE-2023-38971 | Uatech Badaso cross-site scripting | 5.4v3.1 | 0.7% | 2023-08-29 | |
| CVE-2023-38802 | FRRouting improper integrity check validation | 7.5v3.1 | 1.8% | 2023-08-29 | Fix |
| CVE-2023-38283 | Openbgpd improper check for exceptional conditions | 5.3v3.1 | 1.4% | 2023-08-29 | Fix |
| CVE-2023-34039 | Aria Operations for Networks weak cryptographic algorithm | 9.8CNA v3.1 | 67.2% | 2023-08-29 | NucleiExploit codeFix |
| CVE-2023-32457 | Dell PowerScale OneFS unsafe privilege definition | 7.5CNA v3.1 | 0.6% | 2023-08-29 | Fix |
| CVE-2023-32241 | Essential Addons for Elementor Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-29 | Fix |
| CVE-2023-24548 | Arista Networks EOS VXLAN tunnel packet forwarding buffer overflow | 5.3CNA v3.1 | 0.5% | 2023-08-29 | |
| CVE-2023-23774 | Motorola EBTS/MBTS Base Radio uncaught exception | 8.4NVD v3.1 | 0.2% | 2023-08-29 | |
| CVE-2023-23773 | Motorola EBTS/MBTS Base Radio improper signature verification | 8.8NVD v3.1 | 0.5% | 2023-08-29 | |
| CVE-2023-23772 | Motorola MBTS Site Controller improper signature verification | 8.8NVD v3.1 | 0.5% | 2023-08-29 | |
| CVE-2023-23771 | Motorola MBTS Base Radio hard-coded password | 8.4NVD v3.1 | 0.2% | 2023-08-29 | |
| CVE-2023-23770 | Motorola MBTS Site Controller hard-coded password | 9.8NVD v3.1 | 0.5% | 2023-08-29 | |
| CVE-2023-20890 | Aria Operations for Networks path traversal | 7.2CNA v3.1 | 20.2% | 2023-08-29 | Fix |
| CVE-2023-4611 | kernel use-after-free race between mbind and vma-locked page fault | 6.3NVD v3.1 | 0.3% | 2023-08-29 | Fix |
| CVE-2023-4572 | Google Chrome MediaStream use-after-free | 8.8v3.1 | 1.0% | 2023-08-29 | Fix |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 overly restrictive account lockout | 7.5v3.1 | 1.3% | 2023-08-29 | KEV |
| CVE-2023-4296 | PTC Codebeamer cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-08-29 | Fix |
| CVE-2023-3646 | Arista Networks EOS traffic mirroring out-of-bounds read | 5.9CNA v3.1 | 0.7% | 2023-08-29 | |
| CVE-2023-3253 | Improper authorization in Nessus | 4.3CNA v3.1 | 0.5% | 2023-08-29 | Fix |
| CVE-2023-3252 | Tenable Nessus arbitrary file write | 6.8CNA v3.1 | 0.8% | 2023-08-29 | Fix |
| CVE-2023-3251 | Tenable Nessus SMTP credential storage vulnerability | 4.1CNA v3.1 | 0.6% | 2023-08-29 | Fix |
| CVE-2023-1995 | Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 1 | 5.3CNA v3.1 | 0.5% | 2023-08-29 | Fix |
| CVE-2023-0654 | Spoofing User's Activity Loads in WARP Mobile Client (Android) | 3.9CNA v3.1 | 0.2% | 2023-08-29 | Fix |
| CVE-2023-0238 | Injecting Activity Loads in WARP Mobile Client | 3.9CNA v3.1 | 0.2% | 2023-08-29 | Fix |
| CVE-2023-41109 | Patton Smartnode SN200 OS command injection | 9.8v3.1 | 64.1% | 2023-08-28 | Nuclei |
| CVE-2023-41005 | Command injection in Pagekit | 7.8v3.1 | 0.6% | 2023-08-28 | |
| CVE-2023-40998 | O-RAN-SC Ric Message Router buffer overflow | 7.5v3.1 | 2.1% | 2023-08-28 | |
| CVE-2023-40997 | O-RAN-SC Ric Message Router buffer overflow | 7.5v3.1 | 2.2% | 2023-08-28 | |
| CVE-2023-40857 | Virustotal YARA buffer overflow | 8.8v3.1 | 1.1% | 2023-08-28 | |
| CVE-2023-40846 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-28 | |
| CVE-2023-40828 | PF4J vulnerable to remote code execution via expandIfZip method in the extract function | 7.5v3.1 | 1.5% | 2023-08-28 | Fix |
| CVE-2023-40827 | PF4J vulnerable to remote code execution via loadpluginPath parameter | 7.5v3.1 | 1.7% | 2023-08-28 | Fix |
| CVE-2023-40826 | PF4J vulnerable to remote code execution via the zippluginPath parameter | 7.5v3.1 | 1.4% | 2023-08-28 | Fix |
| CVE-2023-40825 | PerfreeBlog unrestricted file upload | 7.2v3.1 | 1.2% | 2023-08-28 | |
| CVE-2023-40781 | Libming buffer overflow | 6.5v3.1 | 0.7% | 2023-08-28 | |
| CVE-2023-40767 | PHP Jabbers Make An Offer Widget information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40766 | PHP Jabbers Ticket Support Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40765 | PHP Jabbers Event Booking Calendar information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40764 | PHP Jabbers Car Rental Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40763 | PHP Jabbers Taxi Booking Script information disclosure through error messages | 9.8v3.1 | 1.1% | 2023-08-28 | |
| CVE-2023-40762 | PHP Jabbers Fundraising Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40761 | PHP Jabbers Yacht Listing Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40760 | PHP Jabbers Hotel Booking System information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40759 | PHP Jabbers Restaurant Booking Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40758 | PHP Jabbers Document Creator information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40757 | PHP Jabbers Food Delivery Script information disclosure through error messages | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40756 | PHP Jabbers Callback Widget observable discrepancy | 9.8v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-40755 | PHP Jabbers Callback Widget cross-site scripting | 6.1v3.1 | 1.3% | 2023-08-28 | Nuclei |
| CVE-2023-40754 | PHP Jabbers Car Rental Script incorrect permission assignment | 8.8v3.1 | 1.0% | 2023-08-28 | |
| CVE-2023-40753 | PHP Jabbers Ticket Support Script message parameter of index.php in PHPJabbers cross-site scripting | 5.4v3.1 | 1.1% | 2023-08-28 | Nuclei |
| CVE-2023-40752 | PHP Jabbers Make An Offer Widget "action" parameter of index.php in PHPJabbers cross-site scripting | 6.1v3.1 | 1.0% | 2023-08-28 | Nuclei |
| CVE-2023-40751 | PHP Jabbers Fundraising Script cross-site scripting | 6.1v3.1 | 1.1% | 2023-08-28 | Nuclei |
| CVE-2023-40750 | PHP Jabbers Yacht Listing Script "action" parameter of index.php in PHPJabbers cross-site scripting | 6.1v3.1 | 1.0% | 2023-08-28 | Nuclei |
| CVE-2023-40749 | PHP Jabbers Food Delivery Script SQL injection | 9.8v3.1 | 3.7% | 2023-08-28 | Nuclei |
| CVE-2023-40748 | PHP Jabbers Food Delivery Script SQL injection | 9.8v3.1 | 3.3% | 2023-08-28 | Nuclei |
| CVE-2023-40590 | GitPython untrusted search path on Windows systems leading to arbitrary code execution | 7.8CNA v3.1 | 0.5% | 2023-08-28 | Fix |
| CVE-2023-40195 | Apache Airflow Spark Provider deserialization vulnerability RCE | 8.8v3.1 | 1.9% | 2023-08-28 | Fix |
| CVE-2023-40170 | Cross-site inclusion (XSSI) of files in jupyter-server | 4.6CNA v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-39968 | Open redirect vulnerability in jupyter-server | 4.3CNA v3.1 | 0.7% | 2023-08-28 | KCVFix |
| CVE-2023-39810 | BusyBox path traversal | 7.8v3.1 | 0.8% | 2023-08-28 | Fix |
| CVE-2023-39709 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section. | 6.1v3.1 | 0.6% | 2023-08-28 | Exploit code |
| CVE-2023-39708 | A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section. | 6.1v3.1 | 0.6% | 2023-08-28 | Exploit code |
| CVE-2023-39652 | Theme Volty Video Tab SQL injection | 9.8v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-39650 | Theme Volty Cms Blog SQL injection | 9.8v3.1 | 4.1% | 2023-08-28 | Nuclei |
| CVE-2023-39578 | Tribal Systems Zenario Create function stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-08-28 | Fix |
| CVE-2023-39562 | GPAC gf_bs_align bitstream parser use-after-free | 5.5v3.1 | 0.3% | 2023-08-28 | |
| CVE-2023-39560 | Ectouch SQL injection | 9.8v3.1 | 4.7% | 2023-08-28 | Nuclei |
| CVE-2023-39348 | Improper log output when using GitHub Status Notifications in spinnaker | 4.0CNA v3.1 | 0.4% | 2023-08-28 | Fix |
| CVE-2023-39062 | Spipu HTML2PDF vulnerable to cross-site scripting | 6.1v3.1 | 1.5% | 2023-08-28 | Exploit codeFix |
| CVE-2023-39059 | Code injection in Ansible Semaphore | 8.8v3.1 | 1.7% | 2023-08-28 | |
| CVE-2023-38969 | Uatech Badaso cross-site scripting | 5.4v3.1 | 0.7% | 2023-08-28 | |
| CVE-2023-38030 | Saho ADM100 missing authentication | 7.5CNA v3.1 | 0.8% | 2023-08-28 | |
| CVE-2023-38029 | Saho ADM100&ADM-100FP arbitrary file upload | 9.8CNA v3.1 | 1.0% | 2023-08-28 | |
| CVE-2023-38028 | Saho ADM100&ADM-100FP broken access control | 9.1CNA v3.1 | 0.9% | 2023-08-28 | |
| CVE-2023-38027 | SpotCam Co., Ltd. SpotCam Sense command injection | 9.8CNA v3.1 | 1.6% | 2023-08-28 | Fix |
| CVE-2023-38026 | SpotCam Co., Ltd. SpotCamFHD use of hard-coded cryptographic key -2 | 9.8CNA v3.1 | 0.8% | 2023-08-28 | Fix |
| CVE-2023-38025 | SpotCam Co., Ltd. SpotCamFHD command injection -1 | 9.8CNA v3.1 | 1.6% | 2023-08-28 | Fix |
| CVE-2023-38024 | SpotCam Co., Ltd. SpotCamFHD use of hard-coded cryptographic key -1 | 9.8CNA v3.1 | 0.8% | 2023-08-28 | Fix |
| CVE-2023-36481 | Samsung Exynos 1080 buffer overflow | 7.5v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-35785 | Zoho Manageengine AD360 improper authentication | 8.1v3.1 | 2.4% | 2023-08-28 | Fix |
| CVE-2023-34758 | BishopFox sliver weak cryptographic algorithm | 8.1v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-34725 | Jaycar LA5570 resource exposure | 6.8v3.1 | 0.5% | 2023-08-28 | |
| CVE-2023-34724 | Jaycar LA5570 incorrect authorization | 6.8v3.1 | 0.5% | 2023-08-28 | |
| CVE-2023-27604 | Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE | 8.8v3.1 | 1.7% | 2023-08-28 | Fix |
| CVE-2023-26272 | IBM Security Guardium Data Encryption information disclosure | 5.3CNA v3.1 | 0.5% | 2023-08-28 | Fix |
| CVE-2023-26271 | IBM Security Guardium Data Encryption information disclosure | 5.3CNA v3.1 | 0.5% | 2023-08-28 | Fix |
| CVE-2023-26270 | IBM Security Guardium Data Encryption code execution | 6.5CNA v3.1 | 0.7% | 2023-08-28 | Fix |
| CVE-2023-26095 | Stormshield Network Security crash | 7.5v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-24959 | IBM InfoSphere Information Server information disclosure | 5.3CNA v3.1 | 0.6% | 2023-08-28 | Fix |
| CVE-2023-23473 | IBM InfoSphere Information Server cross-site request forgery | 5.3CNA v3.1 | 0.3% | 2023-08-28 | Fix |
| CVE-2023-22877 | IBM InfoSphere Information Server CSV injection | 7.0CNA v3.1 | 0.7% | 2023-08-28 | Fix |
| CVE-2023-4569 | Kernel: Information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c | 5.5NVD v3.1 | 0.3% | 2023-08-28 | Fix |
| CVE-2023-4561 | Cross-site scripting (XSS) Stored in omeka/omeka-s | 4.8NVD v3.1 | 0.5% | 2023-08-28 | Fix |
| CVE-2023-4560 | Improper authorization of Index Containing Sensitive Information in omeka/omeka-s | 6.5v3.1 | 0.7% | 2023-08-28 | Fix |
| CVE-2023-1997 | OS command injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x | 8.8CNA v3.1 | 1.9% | 2023-08-28 | |
| CVE-2023-38730 | IBM Spectrum Copy Data Management information disclosure | 5.9CNA v3.1 | 0.4% | 2023-08-27 | Fix |
| CVE-2023-33852 | IBM Security Guardium SQL injection | 7.6CNA v3.1 | 0.6% | 2023-08-27 | Fix |
| CVE-2023-30437 | IBM Security Guardium information disclosure | 5.3CNA v3.1 | 0.6% | 2023-08-27 | Fix |
| CVE-2023-30436 | IBM Security Guardium cross-site scripting | 5.5CNA v3.1 | 0.3% | 2023-08-27 | Fix |
| CVE-2023-30435 | IBM Security Guardium cross-site scripting | 8.9CNA v3.1 | 0.4% | 2023-08-27 | Fix |
| CVE-2023-4559 | Bettershop LaikeTui POST request unrestricted upload | 9.8v3.1 | 0.6% | 2023-08-27 | |
| CVE-2023-4558 | SourceCodester Inventory Management System staff_data.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-27 | |
| CVE-2023-4557 | SourceCodester Inventory Management System search_purchase_paymen_report.php SQL injection | 9.8v3.1 | 0.6% | 2023-08-27 | |
| CVE-2023-4556 | SourceCodester Online Graduate Tracer System sexit.php mysqli_query SQL injection | 9.8v3.1 | 0.7% | 2023-08-27 | |
| CVE-2023-4555 | SourceCodester Inventory Management System suppliar_data.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-08-27 | |
| CVE-2023-36741 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 2.1% | 2023-08-26 | Fix |
| CVE-2023-4548 | SPA-Cart eCommerce CMS GET parameter search SQL injection | 9.8v3.1 | 28.9% | 2023-08-26 | Exploit code |
| CVE-2023-4547 | SPA-Cart eCommerce CMS search cross-site scripting | 6.1v3.1 | 60.3% | 2023-08-26 | NucleiExploit code |
| CVE-2023-4546 | Byzoro Smart S85F Management Platform licence.php access control | 6.5v3.1 | 1.3% | 2023-08-26 | |
| CVE-2023-4545 | IBOS OA export&checkids=x SQL injection | 9.8v3.1 | 0.8% | 2023-08-26 | |
| CVE-2023-4544 | Byzoro Smart S85F Management Platform php.ini direct request | 4.3v3.1 | 1.2% | 2023-08-26 | |
| CVE-2023-41250 | JetBrains TeamCity cross-site scripting | 3.5CNA v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-41249 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 55.5% | 2023-08-25 | Fix |
| CVE-2023-41248 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-41173 | Adguard DNS denial of service | 7.5v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-41167 | @Webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content | 4.8v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-41121 | Array Networks vxAG denial of service | 7.5v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-41080 | Apache Tomcat: Open redirect with FORM authentication | 6.1v3.1 | 6.0% | 2023-08-25 | Exploit codeFix |
| CVE-2023-40915 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 0.7% | 2023-08-25 | |
| CVE-2023-40802 | Tenda AC23 out-of-bounds write | 6.5v3.1 | 0.8% | 2023-08-25 | |
| CVE-2023-40801 | Tenda AC23 stack-based buffer overflow | 8.8v3.1 | 0.9% | 2023-08-25 | |
| CVE-2023-40800 | Tenda AC23 stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-08-25 | |
| CVE-2023-40799 | Tenda AC23 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-25 | |
| CVE-2023-40798 | Tenda AC23 stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-08-25 | |
| CVE-2023-40797 | Tenda AC23 stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-08-25 | |
| CVE-2023-40796 | Phicomm K2 command injection | 7.8v3.1 | 0.9% | 2023-08-25 | |
| CVE-2023-40599 | SYNCK GRAPHICA Mailform Pro CGI multiple add-ons denial of service | 7.5v3.1 | 0.9% | 2023-08-25 | Fix |
| CVE-2023-40587 | Pyramid static view path traversal up one directory | 4.3CNA v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-40586 | Go package github.com/corazawaf/Coraza is vulnerable to denial of service | 7.5CNA v3.1 | 0.7% | 2023-08-25 | Fix |
| CVE-2023-40585 | metal3-io ironic-image unauthenticated access to Ironic API | 7.3CNA v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-40583 | LIBP2P nodes vulnerable to OOM attack | 7.5CNA v3.1 | 1.0% | 2023-08-25 | Fix |
| CVE-2023-40580 | Freighter mnemonic phrase may be accessed by Javascript through a private API | 8.1CNA v3.1 | 0.7% | 2023-08-25 | Fix |
| CVE-2023-40579 | OpenFGA authorization bypass | 6.5CNA v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-40577 | Alertmanager UI is vulnerable to stored XSS via the /API/v1/alerts endpoint | 7.5CNA v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-40571 | weblogic-framework deserialization of untrusted data | 9.8CNA v3.1 | 1.4% | 2023-08-25 | Fix |
| CVE-2023-40570 | Datasette alpha series leaks names of databases and tables to unauthenticated users | 5.3CNA v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-40530 | SKYLARK HOLDINGS 'Skylark' App handler for custom URL scheme issue improper authorization | 4.7v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-40217 | An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is clo | 5.3v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-40182 | Silverware Games password recovery form timing side channel | 3.7CNA v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-40179 | Silverware Games password recovery form vulnerability | 5.3CNA v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-40166 | Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining | 5.5NVD v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-40164 | Notepad++ global buffer read overflow in nsCodingStateMachine::NextState | 5.5NVD v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-40036 | Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar | 5.5NVD v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-40031 | Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert | 7.8NVD v3.1 | 0.5% | 2023-08-25 | Exploit codeFix |
| CVE-2023-39742 | giflib buffer overflow | 5.5v3.1 | 0.3% | 2023-08-25 | Fix |
| CVE-2023-39707 | A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section. | 5.4v3.1 | 0.7% | 2023-08-25 | Exploit code |
| CVE-2023-39700 | IceWarp mail-server cross-site scripting | 6.1v3.1 | 1.5% | 2023-08-25 | Nuclei |
| CVE-2023-39699 | IceWarp mail-server path traversal | 9.8v3.1 | 1.4% | 2023-08-25 | |
| CVE-2023-39600 | IceWarp cross-site scripting | 6.1v3.1 | 1.2% | 2023-08-25 | Nuclei |
| CVE-2023-39291 | Mitel MiVoice Connect information disclosure | 4.9v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-39290 | Mitel MiVoice Connect information disclosure | 4.9v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-39289 | Mitel MiVoice Connect information disclosure | 7.5v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-39288 | Mitel MiVoice Connect argument injection | 5.5v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-39287 | Mitel MiVoice Connect argument injection | 5.5v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-38974 | Uatech Badaso Edit Category function stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-25 | |
| CVE-2023-38973 | Uatech Badaso Add Tag function stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-38712 | libreswan null pointer dereference | 6.5v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-38711 | libreswan null pointer dereference | 6.5v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-38710 | Libreswan pluto IKEv2 daemon denial of service | 6.5v3.1 | 0.8% | 2023-08-25 | Fix |
| CVE-2023-38201 | Keylime: Challenge-response protocol bypass during agent registration | 6.5CNA v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-37249 | Infoblox NIOS OS command injection | 8.8v3.1 | 0.7% | 2023-08-25 | |
| CVE-2023-36199 | Skale Sgxwallet null pointer dereference | 7.5v3.1 | 0.7% | 2023-08-25 | |
| CVE-2023-36198 | Skale Sgxwallet skalenetwork buffer overflow | 7.5v3.1 | 1.0% | 2023-08-25 | |
| CVE-2023-34723 | Jaycar LA5570 link following | 7.5v3.1 | 5.3% | 2023-08-25 | Exploit code |
| CVE-2023-32797 | video carousel slider with lightbox WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-32757 | e-Excellence U-Office Force arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2023-08-25 | Fix |
| CVE-2023-32756 | e-Excellence U-Office Force path traversal | 7.5CNA v3.1 | 1.2% | 2023-08-25 | Fix |
| CVE-2023-32755 | e-Excellence U-Office Force Error Message Leakage | 5.3v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-32678 | Zulip Server private stream message permissions improper authorization | 6.5CNA v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-32603 | Donations Made Easy Smart Donations WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-32598 | Featured Image Pro Post Grid WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-32596 | weebotLite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-32595 | Sunny Search WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-32591 | DBargain WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-32584 | eBecas WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-32577 | DevBuddy Twitter Feed WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-32576 | Locatoraid Store Locator WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-32575 | Product page shipping calculator for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-32518 | WP Chinese Conversion WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-25981 | ThemeKraft Post Form plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2023-25848 | Bug-000158039 There is an information disclosure issue in ArcGIS Server | 5.3CNA v3.1 | 0.3% | 2023-08-25 | Fix |
| CVE-2023-25649 | OS command injection vulnerability in a Mobile Internet Product of ZTE | 6.8CNA v3.1 | 1.9% | 2023-08-25 | Fix |
| CVE-2023-24621 | Esoteric YamlBeans unsafe deserialization | 7.8v3.1 | 0.5% | 2023-08-25 | |
| CVE-2023-24620 | Esoteric YamlBeans XML entity expansion | 5.5v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-24394 | iframe popup WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-25 | |
| CVE-2023-4543 | IBOS OA export&contactids=x SQL injection | 9.8v3.1 | 0.9% | 2023-08-25 | |
| CVE-2023-4542 | D-Link DAR-8000-10 sys1.php os command injection | 9.8v3.1 | 85.4% | 2023-08-25 | NucleiExploit code |
| CVE-2023-4534 | NeoMind Fusion Platform Link cross-site scripting | 6.1v3.1 | 0.6% | 2023-08-25 | |
| CVE-2023-4520 | FV Flowplayer Video Player WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.6% | 2023-08-25 | Fix |
| CVE-2023-4478 | Mattermost parameter tampering in the registration resulting in blocked accounts to be created | 4.3CNA v3.1 | 0.5% | 2023-08-25 | Fix |
| CVE-2023-3425 | M-Files Server Out-of-Bounds memory read | 6.5CNA v3.1 | 0.7% | 2023-08-25 | Fix |
| CVE-2023-3406 | Path traversal issue in M-Files Classic Web | 7.7CNA v3.1 | 0.7% | 2023-08-25 | Fix |
| CVE-2023-2906 | Wireshark CP2179 divide by zero | 6.5v3.1 | 2.8% | 2023-08-25 | Fix |
| CVE-2023-40904 | Tenda AC10V4 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-24 | |
| CVE-2023-40902 | Tenda AC10V4 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-08-24 | Emerging Threats |
| CVE-2023-40901 | Tenda AC10V4 out-of-bounds write | 9.8v3.1 | 1.3% | 2023-08-24 | |
| CVE-2023-40900 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-24 | |
| CVE-2023-40899 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-24 | |
| CVE-2023-40898 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-40897 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-40896 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-08-24 | Emerging Threats |
| CVE-2023-40895 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-24 | |
| CVE-2023-40894 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-40893 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-08-24 | |
| CVE-2023-40892 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-40891 | Tenda AC8V4 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-40877 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-40876 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-40875 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-40874 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-40710 | Opto 22 SNAP PAC S1 resource exhaustion | 7.5NVD v3.1 | 0.6% | 2023-08-24 | |
| CVE-2023-40709 | Uncontrolled resource consumption in Opto 22 SNAP PAC S1 Built-In Web Server | 7.5NVD v3.1 | 0.6% | 2023-08-24 | |
| CVE-2023-40708 | Improper access control in Opto 22 SNAP PAC S1 | 5.3NVD v3.1 | 0.5% | 2023-08-24 | |
| CVE-2023-40707 | Weak password requirements in Opto 22 SNAP PAC S1 Built-in Web Server | 7.5NVD v3.1 | 0.6% | 2023-08-24 | |
| CVE-2023-40706 | Improper restriction of excessive authentication attempts in Opto 22 SNAP PAC S1 Built-in Web Server | 9.8NVD v3.1 | 0.7% | 2023-08-24 | |
| CVE-2023-40573 | XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution | 9.1CNA v3.1 | 1.1% | 2023-08-24 | Fix |
| CVE-2023-40572 | XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action | 9.1CNA v3.1 | 0.6% | 2023-08-24 | Fix |
| CVE-2023-40371 | IBM AIX information disclosure | 6.2CNA v3.1 | 0.1% | 2023-08-24 | Fix |
| CVE-2023-40030 | Rust Cargo build timings report cross-site scripting | 6.1CNA v3.1 | 0.9% | 2023-08-24 | Fix |
| CVE-2023-40022 | Rizin vulnerable to integer overflow in C++ demangler logic | 7.8CNA v3.1 | 0.3% | 2023-08-24 | Fix |
| CVE-2023-40017 | GeoNode server side request forgery | 7.5CNA v3.1 | 0.8% | 2023-08-24 | Fix |
| CVE-2023-39834 | PbootCMS command injection | 9.8v3.1 | 2.1% | 2023-08-24 | |
| CVE-2023-39801 | Renault Easy Link improper exception handling | 4.6v3.1 | 0.5% | 2023-08-24 | |
| CVE-2023-39521 | Tuleap vulnerable to cross-site scripting on the success message of a kanban deletion | 4.8CNA v3.1 | 0.6% | 2023-08-24 | Fix |
| CVE-2023-39519 | CloudExplorer-Dev CloudExplorer-Lite CloudExplorer Lite sensitive information leakage | 7.5CNA v3.1 | 0.8% | 2023-08-24 | Fix |
| CVE-2023-38508 | Tuleap allows preview of a linked artifact with a type does not respect permissions | 6.5CNA v3.1 | 0.7% | 2023-08-24 | Fix |
| CVE-2023-37469 | CasaOS command injection | 8.8NVD v3.1 | 1.6% | 2023-08-24 | Fix |
| CVE-2023-34973 | QNAP QTS and QuTS hero insufficient entropy | 3.1CNA v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2023-34972 | QNAP QTS and QuTS hero cleartext transmission of sensitive information | 3.5CNA v3.1 | 0.2% | 2023-08-24 | Fix |
| CVE-2023-34971 | QNAP QTS and QuTS hero inadequate encryption strength | 7.1CNA v3.1 | 0.1% | 2023-08-24 | Fix |
| CVE-2023-34040 | VMware Spring for Apache Kafka deserialization of untrusted data | 5.3CNA v3.1 | 2.1% | 2023-08-24 | Exploit codeFix |
| CVE-2023-32559 | Node.js Node A privilege escalation | 7.5v3.1 | 1.8% | 2023-08-24 | Fix |
| CVE-2023-32516 | Restaurant Menu Food Ordering System Table Reservation WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-24 | Fix |
| CVE-2023-32511 | Booking Ultra Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-24 | Fix |
| CVE-2023-32510 | Order Your Posts Manually WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-32079 | Netmaker vulnerable to privilege escalation from Non Admin to Admin User | 8.8CNA v3.1 | 0.9% | 2023-08-24 | Fix |
| CVE-2023-32078 | Netmaker IDOR vulnerability allows User to Update other User's Password | 7.5CNA v3.1 | 0.7% | 2023-08-24 | Fix |
| CVE-2023-32077 | Netmaker has Hard-coded DNS Secret Key | 7.5CNA v3.1 | 3.5% | 2023-08-24 | NucleiFix |
| CVE-2023-31412 | SICK LMS5xx weak password hash | 7.5CNA v3.1 | 0.4% | 2023-08-24 | |
| CVE-2023-4513 | Missing release of memory after effective lifetime in Wireshark | 5.3CNA v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2023-4512 | Uncontrolled recursion in Wireshark | 5.3CNA v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2023-4511 | Loop with unreachable exit condition (infinite loop) in Wireshark | 5.3CNA v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2023-4508 | Denial of service in Gerbv | 5.5NVD v3.1 | 0.3% | 2023-08-24 | Fix |
| CVE-2023-4420 | SICK LMS5xx missing encryption | 9.8CNA v3.1 | 0.3% | 2023-08-24 | |
| CVE-2023-4419 | SICK LMS5xx hard-coded credentials | 9.8CNA v3.1 | 0.9% | 2023-08-24 | Fix |
| CVE-2023-4418 | SICK LMS5xx denial of service | 7.5CNA v3.1 | 0.8% | 2023-08-24 | |
| CVE-2023-4230 | ioLogik 4000 Series: Server Banner information disclosure | 5.3CNA v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2023-4229 | ioLogik 4000 Series: Session headers not Implemented | 4.3CNA v3.1 | 0.4% | 2023-08-24 | Fix |
| CVE-2023-4228 | ioLogik 4000 Series: Session Cookies attribute not Set properly | 3.1CNA v3.1 | 0.3% | 2023-08-24 | Fix |
| CVE-2023-4227 | ioLogik 4000 Series: Existence of an Unauthorized service | 5.3CNA v3.1 | 0.4% | 2023-08-24 | Fix |
| CVE-2023-3705 | Aditya Infotech CP-VNR-3104 information disclosure vulnerability in CP-Plus Network Video Recorder | 7.5v3.1 | 1.1% | 2023-08-24 | Fix |
| CVE-2023-3704 | Aditya Infotech CP-UVR-1601E1-HC improper input validation | 5.3v3.1 | 0.7% | 2023-08-24 | Fix |
| CVE-2023-41105 | Python untrusted search path | 7.5v3.1 | 2.6% | 2023-08-23 | Fix |
| CVE-2023-41104 | varnish-software Varnish Enterprise out-of-bounds access | 6.5v3.1 | 0.6% | 2023-08-23 | Fix |
| CVE-2023-41100 | HCaptcha for EXT:form broken access control | 5.3v3.1 | 0.7% | 2023-08-23 | Fix |
| CVE-2023-41098 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-08-23 | |
| CVE-2023-41028 | Juplink RX4-1500 stack-based buffer overflow | 8.8NVD v3.1 | 0.9% | 2023-08-23 | |
| CVE-2023-40612 | The OpenNMS Group Horizon authenticated XXE injection via The File Editor | 5.3CNA v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-40282 | Rakuten Mobile Rakuten WiFi Pocket improper authentication | 5.4v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-40273 | Session fixation in Apache Airflow web interface | 8.0v3.1 | 1.8% | 2023-08-23 | Fix |
| CVE-2023-40185 | Shescape on Windows escaping may be bypassed in threaded context | 6.5CNA v3.1 | 0.7% | 2023-08-23 | Fix |
| CVE-2023-40178 | @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError | 5.3CNA v3.1 | 0.5% | 2023-08-23 | Fix |
| CVE-2023-40177 | XWiki Platform privilege escalation (PR) from account through AWM content fields | 9.9CNA v3.1 | 1.1% | 2023-08-23 | Fix |
| CVE-2023-40176 | xwiki-platform SXSS in the user profile via the timezone displayer | 9.1CNA v3.1 | 80.0% | 2023-08-23 | Fix |
| CVE-2023-40158 | CBC NR4H hidden functionality | 8.8v3.1 | 1.3% | 2023-08-23 | Fix |
| CVE-2023-40144 | CBC NR4H OS command injection | 8.8v3.1 | 2.1% | 2023-08-23 | Fix |
| CVE-2023-40035 | Craft CMS vulnerable to remote code execution via validatePath bypass | 7.2CNA v3.1 | 2.3% | 2023-08-23 | Fix |
| CVE-2023-40025 | argoproj argo-cd argo CD web terminal session doesn't expire | 4.7CNA v3.1 | 0.6% | 2023-08-23 | Fix |
| CVE-2023-39986 | Out-of-bounds read vulnerability in Hitachi EH-VIEW (Designer) | 7.8CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-39985 | Out-of-bounds write vulnerability in Hitachi EH-VIEW (Designer) | 7.8CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-39984 | Hitachi EH-VIEW KeypadDesigner out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-39441 | Apache Airflow missing certificate validation | 5.9v3.1 | 0.8% | 2023-08-23 | Fix |
| CVE-2023-38831 | RARLAB WinRAR code execution | 7.8NVD v3.1 | 99.8% | 2023-08-23 | KEVExploit codeKCVFix |
| CVE-2023-38585 | CBC NR4H improper authentication | 8.8v3.1 | 1.1% | 2023-08-23 | Fix |
| CVE-2023-38422 | Walchem Intuition missing authentication for critical function | 7.5v3.1 | 0.6% | 2023-08-23 | Fix |
| CVE-2023-37379 | Apache Airflow denial of service | 8.1v3.1 | 2.0% | 2023-08-23 | Fix |
| CVE-2023-36317 | oretnom23 Student Study Center Desk Management System sourcecodester cross-site scripting | 4.8v3.1 | 0.6% | 2023-08-23 | |
| CVE-2023-32509 | Order Your Posts Manually WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-23 | |
| CVE-2023-32505 | Easy Hide Login WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32499 | Radio Station WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32498 | Easy Form by AYS WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32497 | Block Referer Spam WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-32496 | StopBadBots WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32300 | Yoast SEO: Local WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32236 | Booking Ultra Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-32202 | Walchem Intuition improper authentication | 8.8v3.1 | 0.6% | 2023-08-23 | Fix |
| CVE-2023-32119 | WPO365 Mail Integration for Office 365 / Outlook WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-28994 | Flatsome WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-20234 | Cisco Adaptive Security Appliance (ASA) Software external control of a file path | 4.4CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-20230 | Cisco Application Policy Infrastructure Controller (APIC) improper access control | 5.4CNA v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-20200 | Cisco Unified Computing System infinite loop | 7.7CNA v3.1 | 0.7% | 2023-08-23 | Fix |
| CVE-2023-20169 | Cisco NX-OS Software out-of-bounds access | 7.4CNA v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-20168 | Cisco NX-OS Software buffer overflow | 7.1CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-20115 | Cisco NX-OS Software logic flaw | 5.4CNA v3.1 | 0.6% | 2023-08-23 | Fix |
| CVE-2023-4431 | Google Chrome Fonts out-of-bounds access | 8.1v3.1 | 0.9% | 2023-08-23 | Fix |
| CVE-2023-4430 | Google Chrome Vulkan use-after-free | 8.8v3.1 | 8.8% | 2023-08-23 | Fix |
| CVE-2023-4429 | Google Chrome Loader use-after-free | 8.8v3.1 | 0.9% | 2023-08-23 | Fix |
| CVE-2023-4428 | Google Chrome CSS out-of-bounds access | 8.1v3.1 | 10.9% | 2023-08-23 | Fix |
| CVE-2023-4427 | Google Chrome V8 out-of-bounds access | 8.1v3.1 | 48.5% | 2023-08-23 | Exploit codeFix |
| CVE-2023-4404 | Donation Forms by Charitable WordPress plugin unauthenticated privilege escalation | 9.8v3.1 | 0.9% | 2023-08-23 | Fix |
| CVE-2023-4042 | Artifex Ghostscript out-of-bounds read | 5.5NVD v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-4041 | Second Stage Gecko Bootloader GBL parser buffer overrun | 9.8CNA v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-3899 | Red Hat subscription-manager D-Bus configuration interface privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-3495 | Out-of-bounds write vulnerability in Hitachi EH-VIEW (KeypadDesigner) | 7.8CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2023-3453 | ETIC Telecom insecure default initialization of Resource | 8.1v3.1 | 0.3% | 2023-08-23 | Fix |
| CVE-2023-1409 | Certificate validation issue in MongoDB Server running on Windows or macOS | 5.3CNA v3.1 | 0.4% | 2023-08-23 | Fix |
| CVE-2023-40370 | IBM Robotic Process Automation information disclosure | 3.7CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-39599 | CSZ CMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-22 | |
| CVE-2023-39141 | Webui-aria2 path traversal | 7.5v3.1 | 3.4% | 2023-08-22 | NucleiExploit code |
| CVE-2023-39026 | Filemage path traversal | 7.5v3.1 | 17.9% | 2023-08-22 | NucleiExploit codeFix |
| CVE-2023-38996 | Douran Dsgate arbitrary code execution | 6.7v3.1 | 0.4% | 2023-08-22 | |
| CVE-2023-38909 | TP-Link Tapo information disclosure | 6.5v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-38908 | TP-Link Tapo information disclosure | 6.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-38906 | TP-Link Tapo information disclosure | 6.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-38734 | IBM Robotic Process Automation privilege escalation | 6.6CNA v3.1 | 0.7% | 2023-08-22 | Fix |
| CVE-2023-38733 | IBM Robotic Process Automation information disclosure | 4.3CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-38732 | IBM Robotic Process Automation information disclosure | 4.3CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-38668 | NASM Netwide Assembler disasm buffer over-read | 5.5v3.1 | 0.3% | 2023-08-22 | |
| CVE-2023-38667 | NASM Netwide Assembler function disasm buffer over-read | 5.5v3.1 | 0.3% | 2023-08-22 | |
| CVE-2023-38666 | Axiosys Bento4 out-of-bounds read | 5.5v3.1 | 0.3% | 2023-08-22 | |
| CVE-2023-38665 | NASM Netwide Assembler ieee_write_file null pointer dereference | 5.5v3.1 | 0.3% | 2023-08-22 | Fix |
| CVE-2023-37440 | HPE EdgeConnect SD-WAN Orchestrator management interface server-side request forgery | 5.5CNA v3.1 | 0.6% | 2023-08-22 | Fix |
| CVE-2023-37439 | Reflected cross-site scripting in EdgeConnect SD-WAN Orchestrator Web Management interface | 6.1CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-37438 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37437 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37436 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37435 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37434 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2023-37433 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37432 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37431 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37430 | HPE EdgeConnect SD-WAN Orchestrator management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37429 | HPE EdgeConnect SD-WAN Orchestrator web management interface SQL injection | 6.5CNA v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2023-37428 | HPE EdgeConnect SD-WAN Orchestrator web management interface path traversal | 7.2CNA v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2023-37427 | HPE EdgeConnect SD-WAN Orchestrator web management interface remote command execution | 7.2CNA v3.1 | 1.3% | 2023-08-22 | Fix |
| CVE-2023-37426 | Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator | 7.4CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-37425 | HPE EdgeConnect SD-WAN Orchestrator web management interface stored cross-site scripting | 8.0CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-37424 | HPE EdgeConnect SD-WAN Orchestrator web management interface remote command execution | 8.1CNA v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2023-37423 | HPE EdgeConnect SD-WAN Orchestrator web administration interface stored cross-site scripting | 8.1CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-37422 | HPE EdgeConnect SD-WAN Orchestrator web administration interface stored cross-site scripting | 8.1CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-37421 | HPE EdgeConnect SD-WAN Orchestrator web administration interface stored cross-site scripting | 8.1CNA v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2023-36281 | langchain vulnerable to arbitrary code execution | 9.8v3.1 | 3.4% | 2023-08-22 | Exploit codeFix |
| CVE-2023-34853 | Supermicro H11dsi-nt buffer overflow | 7.8v3.1 | 0.4% | 2023-08-22 | Exploit codeFix |
| CVE-2023-33850 | IBM GSKit-Crypto information disclosure | 7.5CNA v3.1 | 1.2% | 2023-08-22 | Fix |
| CVE-2023-24517 | Artica PFMS Pandora FMS remote code execution via unrestricted file upload | 7.2v3.1 | 1.0% | 2023-08-22 | Exploit codeFix |
| CVE-2023-24516 | Artica PFMS Pandora FMS stored cross-site scripting Special Days module | 5.4v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2023-24515 | Artica PFMS Pandora FMS server side request forgery in API checker | 6.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2023-24514 | Artica PFMS Pandora FMS stored cross-site scripting vulnerability in Visual console module | 6.1v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2023-23565 | Geomatika Isigeo Web remote file inclusion | 4.9v3.1 | 1.4% | 2023-08-22 | |
| CVE-2023-23564 | Geomatika Isigeo Web command injection | 8.8v3.1 | 2.5% | 2023-08-22 | |
| CVE-2023-23563 | Geomatika Isigeo Web SQL injection | 6.5v3.1 | 1.3% | 2023-08-22 | |
| CVE-2023-4475 | An Arbitrary File Movement vulnerability was found on the ADM | 5.5NVD v3.1 | 0.2% | 2023-08-22 | Fix |
| CVE-2023-4212 | Trane Thermostats injection | 6.8v3.1 | 1.3% | 2023-08-22 | Fix |
| CVE-2023-3699 | An improper privilege management vulnerability was found on the ADM | 5.5NVD v3.1 | 0.2% | 2023-08-22 | Fix |
| CVE-2023-40735 | Butterfly Button Project sensitive information disclosure | 7.5v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-40352 | McAfee Safe Connect uncontrolled search path | 7.2v3.1 | 0.7% | 2023-08-21 | Fix |
| CVE-2023-40068 | WP Engine Advanced Custom Fields cross-site scripting | 5.4v3.1 | 2.0% | 2023-08-21 | Fix |
| CVE-2023-39939 | LuxSoft LuxCal Web Calendar SQL injection | 9.1v3.1 | 1.0% | 2023-08-21 | Fix |
| CVE-2023-39809 | Nvki Intelligent Broadband Subscriber Gateway command injection | 9.8v3.1 | 1.5% | 2023-08-21 | |
| CVE-2023-39808 | Nvki Intelligent Broadband Subscriber Gateway hard-coded credentials | 9.8v3.1 | 0.6% | 2023-08-21 | |
| CVE-2023-39807 | Nvki Intelligent Broadband Subscriber Gateway SQL injection | 9.8v3.1 | 0.6% | 2023-08-21 | |
| CVE-2023-39786 | Tenda AC8V4 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-39785 | Tenda AC8V4 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-39784 | Tenda AC8V4 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-39751 | TP-Link Tl-wr941nd V6 out-of-bounds write | 9.8v3.1 | 7.8% | 2023-08-21 | |
| CVE-2023-39750 | D-Link Dap-2660 buffer overflow | 9.8NVD v3.1 | 14.1% | 2023-08-21 | Fix |
| CVE-2023-39749 | D-Link Dap-2660 buffer overflow | 9.8NVD v3.1 | 1.2% | 2023-08-21 | Fix |
| CVE-2023-39748 | TP-Link Tl-wr1041n V2 denial of service | 7.5v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-39747 | TP-Link Tl-wr941nd V5 buffer overflow | 9.8v3.1 | 7.8% | 2023-08-21 | |
| CVE-2023-39745 | TP-Link Tl-wr941nd V5 buffer overflow | 7.5v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-39660 | PandasAI vulnerable to prompt injection | 9.8v3.1 | 1.5% | 2023-08-21 | Fix |
| CVE-2023-39618 | TOTOLINK X5000R command injection | 9.8v3.1 | 1.7% | 2023-08-21 | |
| CVE-2023-39617 | TOTOLINK X5000R command injection | 9.8v3.1 | 1.7% | 2023-08-21 | |
| CVE-2023-39543 | LuxSoft LuxCal Web Calendar cross-site scripting | 6.1v3.1 | 0.7% | 2023-08-21 | Fix |
| CVE-2023-39106 | Nacos Spring vulnerable to unsafe deserialization | 8.8v3.1 | 1.3% | 2023-08-21 | |
| CVE-2023-39094 | ZeroWdd studentmanager cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-21 | |
| CVE-2023-39061 | Chamilo cross-site request forgery | 3.5v3.1 | 0.3% | 2023-08-21 | Fix |
| CVE-2023-38976 | Weaviate denial of service | 7.5v3.1 | 2.1% | 2023-08-21 | Fix |
| CVE-2023-38961 | JerryScript out-of-bounds write | 9.8v3.1 | 1.4% | 2023-08-21 | |
| CVE-2023-38899 | Berkaygediz OBlog SQL injection | 7.8v3.1 | 0.4% | 2023-08-21 | |
| CVE-2023-38836 | BoidCMS unrestricted file upload | 8.8v3.1 | 76.3% | 2023-08-21 | MetasploitExploit code |
| CVE-2023-38158 | Microsoft Edge (Chromium-based) information disclosure | 3.1CNA v3.1 | 1.3% | 2023-08-21 | Fix |
| CVE-2023-38035 | Ivanti Sentry authentication bypass | 9.8v3.1 | 100.0% | 2023-08-21 | KEVNucleiMetasploitExploit codeKCVFix |
| CVE-2023-36787 | Microsoft Edge (Chromium-based) elevation of privilege | 8.8CNA v3.1 | 2.0% | 2023-08-21 | Fix |
| CVE-2023-32002 | Node.js Node authentication bypass | 9.8v3.1 | 1.6% | 2023-08-21 | Fix |
| CVE-2023-31447 | DrayTek Vigor2620 code injection | 9.8v3.1 | 0.9% | 2023-08-21 | Fix |
| CVE-2023-25915 | Authenticated remote command execution in Danfoss AK-SM800A | 8.8NVD v3.1 | 1.0% | 2023-08-21 | Fix |
| CVE-2023-25914 | Authneticated path traversal in Danfoss AK-SM800A | 8.8v3.1 | 0.8% | 2023-08-21 | Fix |
| CVE-2023-25913 | Authentication bypass in Danfoss AK-SM800A | 7.5v3.1 | 0.6% | 2023-08-21 | Fix |
| CVE-2023-4459 | Kernel: Vmxnet3: Null pointer dereference in vmxnet3_rq_cleanup | 5.5NVD v3.1 | 0.2% | 2023-08-21 | Fix |
| CVE-2023-4456 | Red Hat RHOL-5.5-RHEL-8 Openshift-logging: Lokistack authorisation is cached too broadly | 5.7CNA v3.1 | 0.6% | 2023-08-21 | Fix |
| CVE-2023-4455 | Cross-site request forgery (CSRF) in wallabag/wallabag | 6.5v3.1 | 0.3% | 2023-08-21 | Fix |
| CVE-2023-4454 | Cross-site request forgery (CSRF) in wallabag/wallabag | 5.7v3.1 | 0.3% | 2023-08-21 | Fix |
| CVE-2023-4453 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.6% | 2023-08-21 | Fix |
| CVE-2023-4450 | jeecgboot JimuReport template injection | 9.8v3.1 | 11.4% | 2023-08-21 | NucleiExploit code |
| CVE-2023-4449 | SourceCodester Free and Open Source Inventory Management System SQL injection | 8.8v3.1 | 0.8% | 2023-08-21 | |
| CVE-2023-4448 | OpenRapid RapidCMS run-movepass.php password recovery | 9.8v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-4447 | OpenRapid RapidCMS article-chat.php SQL injection | 9.8v3.1 | 0.6% | 2023-08-21 | |
| CVE-2023-4446 | OpenRapid RapidCMS category.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-4445 | Mini-Tmall SQL injection | 9.8v3.1 | 0.6% | 2023-08-21 | |
| CVE-2023-4444 | SourceCodester Free Hospital Management System for Small Practices edit-user.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-4443 | SourceCodester Free Hospital Management System for Small Practices edit-doc.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-4442 | SourceCodester Free Hospital Management System for Small Practices SQL injection | 9.8v3.1 | 0.7% | 2023-08-21 | |
| CVE-2023-4441 | SourceCodester Free Hospital Management System for Small Practices appointment.php SQL injection | 9.8v3.1 | 0.5% | 2023-08-21 | |
| CVE-2023-4417 | Devolutions Remote Desktop Manager entry duplication improper access control | 6.5v3.1 | 0.5% | 2023-08-21 | Fix |
| CVE-2023-4373 | Devolutions Remote Desktop Manager improper authentication | 9.8v3.1 | 0.7% | 2023-08-21 | Fix |
| CVE-2023-4303 | HTML injection vulnerability in Fortify Plugin | 4.3CNA v3.1 | 0.5% | 2023-08-21 | Fix |
| CVE-2023-4302 | Missing permission checks in Fortify Plugin allow capturing credentials | 4.2CNA v3.1 | 0.3% | 2023-08-21 | Fix |
| CVE-2023-4301 | CSRF vulnerability in Fortify Plugin allow capturing credentials | 4.2CNA v3.1 | 0.2% | 2023-08-21 | Fix |
| CVE-2023-3954 | MultiParcels Shipping For WooCommerce reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-08-21 | Fix |
| CVE-2023-3936 | Blog2Social WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-08-21 | NucleiFix |
| CVE-2023-3667 | Bit Assist WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-08-21 | Fix |
| CVE-2023-3604 | Change WP Admin WordPress plugin Secret login page disclosure | 7.5NVD v3.1 | 0.8% | 2023-08-21 | Fix |
| CVE-2023-3481 | XSS in Chrome Lab Critters | 5.7CNA v3.1 | 0.2% | 2023-08-21 | Fix |
| CVE-2023-3366 | MultiParcels Shipping For WooCommerce WordPress plugin arbitrary Shipment deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2023-08-21 | Fix |
| CVE-2023-40711 | Veilid out-of-bounds write | 7.5v3.1 | 1.0% | 2023-08-20 | Fix |
| CVE-2023-37369 | Qt QXmlStreamReader crash | 7.5v3.1 | 1.6% | 2023-08-20 | Fix |
| CVE-2023-37250 | Unity Parsec time-of-check time-of-use race condition | 7.0v3.1 | 0.3% | 2023-08-20 | Exploit codeFix |
| CVE-2023-36674 | mediawiki improper input validation | 5.3v3.1 | 0.7% | 2023-08-20 | Fix |
| CVE-2023-4451 | Cross-site scripting (XSS) Reflected in cockpit-hq/cockpit | 6.1v3.1 | 2.5% | 2023-08-20 | NucleiFix |
| CVE-2023-4440 | SourceCodester Free Hospital Management System for Small Practices appointment.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-20 | |
| CVE-2023-4439 | SourceCodester Card Holder Management System Minus Value unknown vulnerability | 5.3v3.1 | 0.5% | 2023-08-20 | |
| CVE-2023-4438 | SourceCodester Inventory Management System search_sales_report.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-20 | |
| CVE-2023-4437 | SourceCodester Inventory Management System search_sell_paymen_report.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-20 | |
| CVE-2023-4436 | SourceCodester Inventory Management System edit_update.php SQL injection | 9.8v3.1 | 0.7% | 2023-08-20 | |
| CVE-2023-4435 | Improper input validation in hamza417/Inure | 5.5NVD v3.1 | 0.4% | 2023-08-20 | Fix |
| CVE-2023-4434 | Missing authorization in hamza417/Inure | 6.1v3.1 | 0.3% | 2023-08-20 | Fix |
| CVE-2023-4433 | Cross-site scripting (XSS) Stored in cockpit-hq/cockpit | 5.4NVD v3.1 | 0.6% | 2023-08-19 | Fix |
| CVE-2023-4432 | Cross-site scripting (XSS) Reflected in cockpit-hq/cockpit | 6.1NVD v3.1 | 0.6% | 2023-08-19 | Fix |
| CVE-2023-2971 | Typora Local File Disclosure | 6.5v3.1 | 0.5% | 2023-08-19 | Fix |
| CVE-2023-2318 | MarkText DOM-based cross-site scripting leading to remote code execution | 9.6v3.1 | 0.5% | 2023-08-19 | |
| CVE-2023-2317 | Typora DOM-based cross-site scripting leading to remote code execution | 9.6v3.1 | 2.4% | 2023-08-19 | Fix |
| CVE-2023-2316 | Typora Local File Disclosure | 7.4v3.1 | 0.7% | 2023-08-19 | Fix |
| CVE-2023-2110 | Obsidian Local File Disclosure | 7.1v3.1 | 0.4% | 2023-08-19 | Fix |
| CVE-2023-40175 | Inconsistent interpretation of HTTP requests in puma | 7.3CNA v3.1 | 0.8% | 2023-08-18 | Fix |
| CVE-2023-40174 | Insufficient session expiration in fobybus/social-media-skeleton | 6.8CNA v3.1 | 0.5% | 2023-08-18 | Fix |
| CVE-2023-40173 | social-media-skeleton password storage insufficiently protected credentials | 7.5CNA v3.1 | 0.7% | 2023-08-18 | Fix |
| CVE-2023-40172 | Cross-site request forgery (CSRF) in fobybus/social-media-skeleton | 6.5CNA v3.1 | 0.3% | 2023-08-18 | Fix |
| CVE-2023-40072 | ELECOM WAB-S600-PS OS command injection | 8.8v3.1 | 1.9% | 2023-08-18 | Fix |
| CVE-2023-40069 | ELECOM WRC-F1167ACF OS command injection | 9.8v3.1 | 1.5% | 2023-08-18 | Fix |
| CVE-2023-40037 | Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs | 6.5NVD v3.1 | 2.1% | 2023-08-18 | Fix |
| CVE-2023-39944 | ELECOM WRC-F1167ACF OS command injection | 8.8v3.1 | 1.5% | 2023-08-18 | Fix |
| CVE-2023-39674 | D-Link Dir-880l A1 buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39673 | Tenda AC15 buffer overflow | 9.8v3.1 | 0.8% | 2023-08-18 | |
| CVE-2023-39672 | Tenda WH450A buffer overflow | 9.8v3.1 | 0.8% | 2023-08-18 | |
| CVE-2023-39671 | D-Link Dir-880l A1 buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39670 | Tenda AC6 buffer overflow | 9.8v3.1 | 0.8% | 2023-08-18 | |
| CVE-2023-39669 | D-Link Dir-880l A1 null pointer dereference | 7.5v3.1 | 1.3% | 2023-08-18 | |
| CVE-2023-39668 | D-Link DIR-868L buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39667 | D-Link DIR-868L buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39666 | D-Link DIR-842 buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39665 | D-Link DIR-868L buffer overflow | 9.8v3.1 | 1.4% | 2023-08-18 | |
| CVE-2023-39455 | ELECOM WRC-600GHBK-A OS command injection | 8.8v3.1 | 1.5% | 2023-08-18 | Fix |
| CVE-2023-39454 | ELECOM WRC-X1800GS-B buffer overflow | 9.8v3.1 | 0.9% | 2023-08-18 | Fix |
| CVE-2023-39445 | LOGITEC LAN-WH300N/RE hidden functionality | 8.8v3.1 | 0.6% | 2023-08-18 | Fix |
| CVE-2023-39416 | North Grid Proself Enterprise/Standard Edition OS command injection | 7.2v3.1 | 1.2% | 2023-08-18 | Fix |
| CVE-2023-39415 | North Grid Proself Enterprise/Standard Edition improper authentication | 7.5v3.1 | 1.0% | 2023-08-18 | Fix |
| CVE-2023-39125 | Ntsc-crt integer overflow | 7.5v3.1 | 0.7% | 2023-08-18 | |
| CVE-2023-38911 | CSZ CMS A cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-18 | |
| CVE-2023-38910 | CSZ CMS cross-site scripting | 6.1v3.1 | 0.5% | 2023-08-18 | |
| CVE-2023-38890 | PHPGurukul Online Shopping Portal SQL injection | 8.8v3.1 | 1.4% | 2023-08-18 | Exploit code |
| CVE-2023-38839 | Kidus Minimati SQL injection | 7.5v3.1 | 0.9% | 2023-08-18 | |
| CVE-2023-38576 | LOGITEC LAN-WH300N/RE hidden functionality | 8.0v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-38132 | LOGITEC LAN-W451NGR improper access control | 8.8v3.1 | 0.3% | 2023-08-18 | Fix |
| CVE-2023-35991 | LOGITEC LAN-W300N/DR hidden functionality | 9.8v3.1 | 0.7% | 2023-08-18 | Fix |
| CVE-2023-32626 | LOGITEC LAN-W300N/RS hidden functionality | 9.8v3.1 | 0.8% | 2023-08-18 | Fix |
| CVE-2023-32130 | Multi Rating WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-18 | |
| CVE-2023-32122 | Spiffy Calendar WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-08-18 | Fix |
| CVE-2023-32109 | Albo Pretorio Online WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-32108 | Albo Pretorio Online WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-32107 | Photo Gallery by Ays WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-32106 | WP Docs WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-32105 | WPPizza WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-32103 | TP Education WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-31232 | Plugins List WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-31228 | CM On Demand Search And Replace WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-31218 | WOLF WordPress plugin CSRF leading to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2023-08-18 | Fix |
| CVE-2023-31094 | Stock Sync for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-30875 | Logo Scheduler WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-30499 | FV Flowplayer Video Player WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-29387 | Manager for Icomoon WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-18 | Fix |
| CVE-2023-27576 | phpList insecure direct object reference | 6.7v3.1 | 0.3% | 2023-08-18 | |
| CVE-2023-27471 | InsydeH2O denial of service | 5.5v3.1 | 0.2% | 2023-08-18 | Fix |
| CVE-2023-20212 | Cisco Secure Endpoint expired pointer dereference | 7.5CNA v3.1 | 3.4% | 2023-08-18 | Fix |
| CVE-2023-4422 | Cross-site scripting (XSS) Stored in cockpit-hq/cockpit | 4.8v3.1 | 0.6% | 2023-08-18 | Fix |
| CVE-2023-4415 | Ruijie RG-EW1200G login improper authentication | 8.8v3.1 | 58.3% | 2023-08-18 | NucleiKCV |
| CVE-2023-4414 | Byzoro Smart S85F Management Platform decodmail.php command injection | 9.8v3.1 | 9.1% | 2023-08-18 | |
| CVE-2023-4412 | TOTOLINK EX1200L setWanCfg os command injection | 9.8v3.1 | 3.7% | 2023-08-18 | |
| CVE-2023-4411 | TOTOLINK EX1200L setTracerouteCfg os command injection | 9.8v3.1 | 5.2% | 2023-08-18 | |
| CVE-2023-4410 | TOTOLINK EX1200L setDiagnosisCfg os command injection | 9.8v3.1 | 3.7% | 2023-08-18 | |
| CVE-2023-4409 | NBS&HappySoftWeChat unrestricted upload | 8.8v3.1 | 0.9% | 2023-08-18 | |
| CVE-2023-4407 | CodeCanyon Credit Lite POST request account_statement SQL injection | 9.8v3.1 | 2.0% | 2023-08-18 | Exploit code |
| CVE-2023-4040 | Stripe Payment Plugin for WooCommerce WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2023-08-18 | Fix |
| CVE-2023-40315 | The OpenNMS Group Horizon ROLE_FILESYSTEM_EDITOR can be Used to Escalate to ROLE_ADMIN | 5.3CNA v3.1 | 2.9% | 2023-08-17 | MetasploitExploit codeFix |
| CVE-2023-40313 | The OpenNMS Group Horizon Disable BeanShell Interpreter Remote Server Mode | 7.1CNA v3.1 | 0.8% | 2023-08-17 | Fix |
| CVE-2023-40281 | EC-CUBE 2 series cross-site scripting | 4.8v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-40272 | Apache Airflow Spark Provider arbitrary file read via JDBC | 7.5v3.1 | 2.1% | 2023-08-17 | Fix |
| CVE-2023-40252 | Genians Genian NAC code injection | 9.8v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-40251 | Genians Genian NAC missing encryption | 5.9v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-40171 | Dispatch writes JWT tokens in error message | 9.1CNA v3.1 | 0.9% | 2023-08-17 | Fix |
| CVE-2023-40168 | Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop | 7.4CNA v3.1 | 0.7% | 2023-08-17 | Fix |
| CVE-2023-40165 | Unauthorized gem replacement for full names ending in numbers on rubygems.org | 7.4CNA v3.1 | 0.5% | 2023-08-17 | Fix |
| CVE-2023-39974 | acymailing.com AcyMailing Enterprise component for Joomla information disclosure | 5.3NVD v3.1 | 0.5% | 2023-08-17 | Fix |
| CVE-2023-39973 | Extension AcyMailing.com improper access control in AcyMailing Enterprise component for Joomla | 4.3NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-39972 | Extension AcyMailing.com improper access control in AcyMailing Enterprise component for Joomla | 4.3NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-39971 | Extension AcyMailing.com XSS in AcyMailing Enterprise component for Joomla | 6.1NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-39970 | Extension acymailing.com RCE in AcyMailing component for Joomla | 9.8NVD v3.1 | 1.1% | 2023-08-17 | |
| CVE-2023-39743 | PETE4ABW Lzma Software Development Kit improper access control | 5.3v3.1 | 0.8% | 2023-08-17 | Fix |
| CVE-2023-39741 | Long Range ZIP out-of-bounds write | 5.5v3.1 | 0.3% | 2023-08-17 | Fix |
| CVE-2023-38905 | JeecgBoot Jeecg-boot SQL injection | 5.5v3.1 | 0.3% | 2023-08-17 | |
| CVE-2023-38902 | Ruijie Rg-eap101 command injection | 8.8v3.1 | 2.6% | 2023-08-17 | |
| CVE-2023-38843 | Atlos incident description field CSV injection | 8.0v3.1 | 0.7% | 2023-08-17 | |
| CVE-2023-38838 | Kiduswb Minimati SQL injection | 7.5v3.1 | 0.9% | 2023-08-17 | |
| CVE-2023-37914 | xwiki-platform privilege escalation (PR)/RCE from account through Invitation subject/message | 9.9CNA v3.1 | 1.9% | 2023-08-17 | Fix |
| CVE-2023-36847 | Juniper Junos OS EX Series missing authentication for critical function | 5.3CNA v3.1 | 83.5% | 2023-08-17 | KEVEmerging ThreatsKCVFix |
| CVE-2023-36846 | Juniper Junos OS SRX Series missing authentication for critical function | 5.3CNA v3.1 | 93.5% | 2023-08-17 | KEVEmerging ThreatsExploit codeKCVFix |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP external variable modification | 9.8CNA v3.1 | 95.1% | 2023-08-17 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-36844 | Juniper Junos OS EX Series PHP external variable modification | 5.3CNA v3.1 | 90.0% | 2023-08-17 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2023-36106 | PowerJob incorrect access control vulnerability | 7.5v3.1 | 0.9% | 2023-08-17 | |
| CVE-2023-34419 | Lenovo Notebook SetupUtility driver in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-34412 | Stored XXS vulnerability in mbNET, mbNET.rokey, REX 200 and REX 250 | 5.4NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-34217 | Moxa TN-5900 Series Second Order command-injection vulnerability in the Certificate-delete function | 8.1CNA v3.1 | 0.5% | 2023-08-17 | Fix |
| CVE-2023-34216 | Moxa TN-5900 Series Second Order command-injection vulnerability in the Key-delete function | 8.1CNA v3.1 | 0.7% | 2023-08-17 | Fix |
| CVE-2023-34215 | Moxa TN-5900 Series certificate generation function command injection | 7.2CNA v3.1 | 0.7% | 2023-08-17 | Fix |
| CVE-2023-34214 | Moxa TN-4900 and TN-5900 Series certificate generation function command injection | 7.2CNA v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-34213 | Moxa TN-5900 Series Second Order command-injection vulnerability in the Key-generation function | 8.8CNA v3.1 | 0.8% | 2023-08-17 | Fix |
| CVE-2023-33239 | Moxa TN-5900 Series Second Order command-injection vulnerability in the Key-generation function | 8.8CNA v3.1 | 1.3% | 2023-08-17 | Fix |
| CVE-2023-33238 | Moxa TN-5900 Series command-injection vulnerability in Certificate Management | 7.2CNA v3.1 | 0.8% | 2023-08-17 | Fix |
| CVE-2023-33237 | Moxa TN-5900 Series authentication bypass without Administrator Privilege | 8.8CNA v3.1 | 0.6% | 2023-08-17 | Fix |
| CVE-2023-31946 | Online Travel Agency System file upload | 7.2v3.1 | 1.5% | 2023-08-17 | |
| CVE-2023-31945 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31944 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31943 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31942 | Online Travel Agency System cross-site scripting | 4.8v3.1 | 0.6% | 2023-08-17 | |
| CVE-2023-31941 | Online Travel Agency System file upload | 7.2v3.1 | 1.5% | 2023-08-17 | |
| CVE-2023-31940 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31939 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31938 | Online Travel Agency System SQL injection | 7.2v3.1 | 1.3% | 2023-08-17 | |
| CVE-2023-31492 | Zoho ManageEngine ADManager Plus insufficiently protected credentials | 6.5v3.1 | 7.8% | 2023-08-17 | Fix |
| CVE-2023-31091 | Dynamically Register Sidebars WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-31079 | Tippy WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-31076 | Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-31074 | Extensions for Leaflet Map WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-31072 | Advanced Category Template WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-31071 | Modal Dialog WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-30877 | XML for Google Merchant Center WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-30876 | Dave's WordPress Live Search plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-30874 | GPS Plotter WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-29182 | Fortinet FortiOS stack-based buffer overflow | 6.4CNA v3.1 | 0.3% | 2023-08-17 | Fix |
| CVE-2023-28783 | Woocommerce Tip/Donation WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-28693 | Advanced Youtube Channel Pagination WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-28690 | WP BrowserUpdate WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-28622 | Easy Slider Revolution WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-28533 | Cab Grid WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-17 | Fix |
| CVE-2023-26530 | Updraft WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-17 | |
| CVE-2023-26469 | Jorani path traversal | 9.8v3.1 | 83.3% | 2023-08-17 | NucleiMetasploitExploit code |
| CVE-2023-25647 | Permission and access control vulnerability in Some ZTE Mobile Phones | 4.7CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-4395 | Cross-site scripting (XSS) Stored in cockpit-hq/cockpit | 5.4NVD v3.1 | 0.6% | 2023-08-17 | Fix |
| CVE-2023-4394 | kernel memory leak in btrfs_get_dev_args_from_path | 6.0NVD v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-4392 | Control iD Gerencia Web Cookie cleartext storage | 5.3v3.1 | 0.6% | 2023-08-17 | |
| CVE-2023-4030 | Lenovo ThinkPad fail-open behavior | 8.4CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-4029 | Lenovo ThinkPad BoardUpdateAcpiDxe driver in some Lenovo buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-4028 | Lenovo Notebook SystemUserMasterHddPwdDxe driver in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-3698 | A command injection vulnerability was found on Printer service of ADM | 8.1v3.1 | 0.6% | 2023-08-17 | Fix |
| CVE-2023-3697 | A command injection vulnerability was found on Printer service of ADM | 8.8v3.1 | 0.7% | 2023-08-17 | Fix |
| CVE-2023-3244 | Comments Like Dislike WordPress plugin missing authorization authenticated plugin setting reset | 4.3v3.1 | 0.9% | 2023-08-17 | Exploit codeFix |
| CVE-2023-3078 | Lenovo Universal Device Client (UDC) uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2023-08-17 | Fix |
| CVE-2023-2917 | Rockwell Automation ThinManager Thinserver software vulnerable to input validation vulnerability | 9.8CNA v3.1 | 72.2% | 2023-08-17 | MetasploitFix |
| CVE-2023-2915 | Rockwell Automation ThinManager Thinserver software vulnerable to input validation vulnerability | 7.5CNA v3.1 | 81.8% | 2023-08-17 | MetasploitFix |
| CVE-2023-2914 | Rockwell Automation ThinManager Thinserver software vulnerable to Input Validation Vulnerabilitiy | 7.5CNA v3.1 | 39.9% | 2023-08-17 | Fix |
| CVE-2023-2910 | A command injection vulnerability was found on Printer service of ADM | 8.8v3.1 | 1.6% | 2023-08-17 | Fix |
| CVE-2023-40351 | Jenkins Favorite View Plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-08-16 | Fix |
| CVE-2023-40350 | Jenkins Docker Swarm Plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40349 | Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure | 5.3v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-40348 | Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure | 5.3v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-40347 | Jenkins Maven Artifact ChoiceListProvider Plugin vulnerable to exposure of system-scoped credentials | 6.5v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-40346 | Jenkins Shortcut Job Plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-40345 | Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials | 6.5v3.1 | 1.0% | 2023-08-16 | Fix |
| CVE-2023-40344 | Jenkins Delphix Plugin missing permission check | 4.3v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-40343 | Jenkins Tuleap Authentication Plugin non-constant time token comparison | 5.9v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40342 | Jenkins Flaky Test Handler Plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40341 | Jenkins Blue Ocean Plugin cross-site request forgery | 8.8v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40340 | Jenkins NodeJS Plugin improper credential masking vulnerability | 7.5v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40339 | Jenkins Config File Provider Plugin improper credential masking vulnerability | 7.5v3.1 | 0.8% | 2023-08-16 | Fix |
| CVE-2023-40338 | Jenkins Folders Plugin information disclosure | 4.3v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-40337 | Jenkins Folders Plugin cross-site request forgery | 4.3v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-40336 | Jenkins Folders Plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-40034 | Repositoty takeover in woodpecker-ci | 8.1CNA v3.1 | 0.9% | 2023-08-16 | Fix |
| CVE-2023-40033 | Server-side request forgery via Avatar upload in Flarum | 7.1CNA v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-40021 | Timing Attack Reveals CSRF Tokens in oppia | 5.3CNA v3.1 | 0.8% | 2023-08-16 | Fix |
| CVE-2023-39975 | MIT Kerberos 5 double free | 8.8v3.1 | 1.5% | 2023-08-16 | Fix |
| CVE-2023-39846 | Pantsel Konga improper authentication | 9.8v3.1 | 1.1% | 2023-08-16 | |
| CVE-2023-39507 | Recruit "Rikunabi NEXT" App custom URL scheme handler improper authorization | 6.1v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-39250 | Dell Storage Integration Tools for VMware (DSITV) sensitive information in source code | 7.8CNA v3.1 | 0.1% | 2023-08-16 | Fix |
| CVE-2023-39115 | Campcodes Complete Online Matrimonial Website System Script unrestricted file upload | 9.8v3.1 | 7.8% | 2023-08-16 | Exploit code |
| CVE-2023-38904 | Decapcms Netlify Cms cross-site scripting | 5.4v3.1 | 0.7% | 2023-08-16 | |
| CVE-2023-38894 | tree-kit prototype pollution | 9.8v3.1 | 1.7% | 2023-08-16 | Fix |
| CVE-2023-38737 | IBM WebSphere Application Server Liberty denial of service | 5.9CNA v3.1 | 1.0% | 2023-08-16 | Fix |
| CVE-2023-35893 | IBM Security Guardium command execution | 9.9CNA v3.1 | 1.4% | 2023-08-16 | Fix |
| CVE-2023-35011 | IBM Cognos Analytics server-side request forgey | 5.4CNA v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-35009 | IBM Cognos Analytics information disclosure | 5.3CNA v3.1 | 1.0% | 2023-08-16 | Fix |
| CVE-2023-33663 | Ai-dev Aicustomfee SQL injection | 9.8v3.1 | 0.6% | 2023-08-16 | |
| CVE-2023-32495 | Dell PowerScale OneFS information disclosure | 7.8CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32494 | Dell PowerScale OneFS improper handling of insufficient privileges | 6.7CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32493 | Dell PowerScale OneFS denial of service | 7.3CNA v3.1 | 0.8% | 2023-08-16 | Fix |
| CVE-2023-32492 | Dell PowerScale OneFS incorrect default permissions | 5.3CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32491 | Dell PowerScale OneFS sensitive information in log files | 6.3CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-32490 | Dell PowerScale OneFS improper privilege management | 6.7CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32489 | Dell PowerScale OneFS improper handling of insufficient permissions | 6.7CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32488 | Dell PowerScale OneFS information disclosure | 5.3CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-32487 | Dell PowerScale OneFS improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32486 | Dell PowerScale OneFS execution with unnecessary privileges | 6.7CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-32453 | Dell CPG BIOS improper authentication | 4.6CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-30871 | Stock Exporter for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30786 | Captcha Them All WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30785 | Video Grid WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30784 | Kaya QR Code Generator WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30782 | Church Admin WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30779 | Query Wrangler WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-30473 | YML for Yandex Market WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-28075 | Dell CPG BIOS time-of-check time-of-use race condition | 6.9CNA v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-26140 | @excalidraw/excalidraw cross-site scripting | 6.1v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-20242 | Cisco Unified Communications Manager cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-20237 | Cisco Intersight Virtual Appliance improper access control | 4.3CNA v3.1 | 0.3% | 2023-08-16 | Fix |
| CVE-2023-20232 | Cisco Unified Contact Center Express cache poisoning | 5.3CNA v3.1 | 0.6% | 2023-08-16 | Fix |
| CVE-2023-20229 | Cisco Duo Device Health Application path traversal | 7.1CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-20228 | Cisco Identity Services Engine Software cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-20224 | Cisco ThousandEyes Recorder Application improper input validation | 7.8CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-20222 | Cisco Prime Infrastructure cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-20221 | Cisco IP Phones with Multiplatform Firmware cross-site request forgery | 6.5CNA v3.1 | 0.3% | 2023-08-16 | Fix |
| CVE-2023-20217 | Cisco ThousandEyes Recorder Application execution with unnecessary privileges | 5.5CNA v3.1 | 0.3% | 2023-08-16 | Fix |
| CVE-2023-20211 | Cisco Unified Communications Manager SQL injection | 8.1CNA v3.1 | 0.8% | 2023-08-16 | Fix |
| CVE-2023-20209 | Cisco TelePresence Video Communication Server (VCS) Expressway code injection | 6.5CNA v3.1 | 40.8% | 2023-08-16 | Exploit codeFix |
| CVE-2023-20205 | Cisco Prime Infrastructure cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-20203 | Cisco Prime Infrastructure cross-site scripting | 5.4v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-20201 | Cisco Prime Infrastructure cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-20197 | Cisco Secure Endpoint infinite loop | 7.5CNA v3.1 | 1.2% | 2023-08-16 | Fix |
| CVE-2023-20111 | Cisco Identity Services Engine Software system information disclosure | 6.5CNA v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-20017 | Cisco Intersight Virtual Appliance OS command injection | 6.5CNA v3.1 | 1.0% | 2023-08-16 | Fix |
| CVE-2023-20013 | Cisco Intersight Virtual Appliance OS command injection | 6.5CNA v3.1 | 1.0% | 2023-08-16 | Fix |
| CVE-2023-4389 | Kernel: Btrfs: Double free in btrfs_get_root_ref | 7.1NVD v3.1 | 0.3% | 2023-08-16 | Fix |
| CVE-2023-4387 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-4385 | Kernel: Jfs: Null pointer dereference in dbfree | 5.5NVD v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2023-4384 | MaximaTech Portal Executivo Cookie missing encryption | 5.9v3.1 | 0.4% | 2023-08-16 | |
| CVE-2023-4383 | MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions | 7.8v3.1 | 0.3% | 2023-08-16 | |
| CVE-2023-4382 | tdevs Hyip Rio Profile settings settings cross-site scripting | 5.4v3.1 | 2.4% | 2023-08-16 | Exploit code |
| CVE-2023-4381 | Unverified password change in instantsoft/icms2 | 4.3v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-4374 | WP Remote Users Sync WordPress plugin missing authorization to authenticated (Subscriber+) Log View | 4.3CNA v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-4241 | lol-html panics on certain HTML inputs | 7.5CNA v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-4204 | NPort IAW5000A-I/O Series hard-coded credential | 5.4CNA v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-3958 | WP Remote Users Sync WordPress plugin authenticated (Subscriber+) server side request forgery | 5.4NVD v3.1 | 0.7% | 2023-08-16 | Fix |
| CVE-2023-2737 | Improper securing of log directory may allow a denial of service | 5.7CNA v3.1 | 0.1% | 2023-08-16 | Fix |
| CVE-2023-2272 | Tiempo.com WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-08-16 | Nuclei |
| CVE-2023-2271 | Tiempo.com WordPress plugin shortcode deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2023-08-16 | |
| CVE-2023-2254 | Ko-fi Button WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-08-16 | Fix |
| CVE-2023-2225 | SEO ALert WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-08-16 | |
| CVE-2023-2123 | WP Inventory Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.2% | 2023-08-16 | Exploit codeFix |
| CVE-2023-2122 | Image Optimizer by 10web WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2023-08-16 | NucleiFix |
| CVE-2023-1977 | Booking Manager WordPress plugin Subscriber+ SSRF | 8.8NVD v3.1 | 0.8% | 2023-08-16 | Fix |
| CVE-2023-1465 | WP EasyPay WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-1110 | Yellow Yard WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-0579 | YARPP - Yet Another Related Posts WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-08-16 | Fix |
| CVE-2023-0551 | REST API TO MiniProgram WordPress plugin Subscriber+ Attachment deletion | 5.4NVD v3.1 | 0.3% | 2023-08-16 | |
| CVE-2023-0274 | URL Params WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-08-16 | Fix |
| CVE-2023-0058 | Tiempo.com WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2023-08-16 | |
| CVE-2023-40028 | Arbitrary file read via symlinks in Ghost | 4.9CNA v3.1 | 69.0% | 2023-08-15 | Exploit codeFix |
| CVE-2023-40027 | keystonejs keystone conditionally missing authorization in @keystone-6/core | 3.7CNA v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-39852 | Doctor Appointment System SQL injection | 9.8v3.1 | 1.0% | 2023-08-15 | |
| CVE-2023-39851 | Webchess SQL injection | 9.8v3.1 | 0.8% | 2023-08-15 | |
| CVE-2023-39850 | Schoolmate SQL injection | 9.8v3.1 | 0.8% | 2023-08-15 | |
| CVE-2023-39843 | Sulimet 5-in-1 Smart Door Lock RFID tag of Suleve missing encryption | 2.4v3.1 | 0.1% | 2023-08-15 | |
| CVE-2023-39842 | Mydigoo Dg-hamb Smart Home Security System RFID tag of Digoo missing encryption | 2.4v3.1 | 0.1% | 2023-08-15 | |
| CVE-2023-39841 | Etekcity 3-in-1 Smart Door Lock RFID tag missing encryption | 4.6v3.1 | 0.1% | 2023-08-15 | |
| CVE-2023-39662 | llama_index llama-index vulnerable to arbitrary code execution | 9.8v3.1 | 1.5% | 2023-08-15 | Fix |
| CVE-2023-39661 | PandasAI vulnerable to arbitrary code execution | 9.8v3.1 | 1.4% | 2023-08-15 | Fix |
| CVE-2023-39659 | LangChain vulnerable to arbitrary code execution | 9.8v3.1 | 1.5% | 2023-08-15 | Fix |
| CVE-2023-39438 | Missing authorization check allows certain operations on CLA Assistant data | 8.1CNA v3.1 | 0.5% | 2023-08-15 | Fix |
| CVE-2023-38916 | Mohammad-ajazuddin Evotingsystem-php SQL injection | 8.8v3.1 | 1.0% | 2023-08-15 | |
| CVE-2023-38915 | WOLF18 EasyAdmin8 Wolf-leo file upload | 9.8v3.1 | 1.0% | 2023-08-15 | |
| CVE-2023-38898 | Python information disclosure | 5.3v3.1 | 1.7% | 2023-08-15 | |
| CVE-2023-38896 | LangChain vulnerable to arbitrary code execution | 9.8v3.1 | 1.8% | 2023-08-15 | Fix |
| CVE-2023-38889 | Alluxio vulnerable to arbitrary code execution | 9.8v3.1 | 1.1% | 2023-08-15 | |
| CVE-2023-38866 | Comfast Cf-xr11 command injection | 9.8v3.1 | 2.4% | 2023-08-15 | |
| CVE-2023-38865 | Comfast Cf-xr11 command injection | 9.8v3.1 | 2.4% | 2023-08-15 | |
| CVE-2023-38864 | Comfast Cf-xr11 command injection | 9.8v3.1 | 1.2% | 2023-08-15 | |
| CVE-2023-38863 | Comfast Cf-xr11 command injection | 9.8v3.1 | 1.2% | 2023-08-15 | |
| CVE-2023-38862 | Comfast Cf-xr11 command injection | 9.8v3.1 | 1.2% | 2023-08-15 | |
| CVE-2023-38861 | WAVLINK Wl-wn575a3 command injection | 9.8v3.1 | 1.6% | 2023-08-15 | |
| CVE-2023-38860 | LangChain vulnerable to arbitrary code execution | 9.8v3.1 | 1.4% | 2023-08-15 | Fix |
| CVE-2023-38858 | faad2 out-of-bounds write | 6.5v3.1 | 1.0% | 2023-08-15 | Fix |
| CVE-2023-38857 | faad2 out-of-bounds write | 5.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-38856 | libxls buffer overflow | 6.5v3.1 | 0.9% | 2023-08-15 | |
| CVE-2023-38855 | libxls buffer overflow | 6.5v3.1 | 0.9% | 2023-08-15 | |
| CVE-2023-38854 | libxls buffer overflow | 6.5v3.1 | 0.9% | 2023-08-15 | |
| CVE-2023-38853 | libxls buffer overflow | 6.5v3.1 | 0.9% | 2023-08-15 | |
| CVE-2023-38852 | libxls buffer overflow | 6.5v3.1 | 1.3% | 2023-08-15 | Fix |
| CVE-2023-38851 | libxls buffer overflow | 6.5v3.1 | 0.9% | 2023-08-15 | |
| CVE-2023-38850 | Msweet Codedoc Michaelrsweet buffer overflow | 5.5v3.1 | 0.3% | 2023-08-15 | |
| CVE-2023-38840 | Bitwarden information disclosure | 5.5v3.1 | 0.5% | 2023-08-15 | Exploit code |
| CVE-2023-38402 | Arbitrary file overwrite in HPE Aruba Networking Virtual Intranet Access Microsoft Windows client | 7.1CNA v3.1 | 0.2% | 2023-08-15 | Fix |
| CVE-2023-38401 | Local privilege escalation in HPE Aruba Networking Virtual Intranet Access Microsoft Windows client | 7.8CNA v3.1 | 0.2% | 2023-08-15 | Fix |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core authentication bypass | 9.8v3.1 | 100.0% | 2023-08-15 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2023-32006 | Node.js Node protection mechanism failure | 8.8v3.1 | 1.5% | 2023-08-15 | Fix |
| CVE-2023-32004 | Node.js Node path traversal | 8.8v3.1 | 2.1% | 2023-08-15 | Fix |
| CVE-2023-32003 | Node.js Node path traversal | 5.3v3.1 | 1.2% | 2023-08-15 | Fix |
| CVE-2023-30778 | PowerPress Podcasting WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-08-15 | Fix |
| CVE-2023-30747 | WooCommerce Easy Duplicate Product WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-30498 | Vimeotheque WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-28479 | TigerGraph Enterprise development toolchain vulnerability | 8.8v3.1 | 0.8% | 2023-08-15 | |
| CVE-2023-24478 | Intel Quartus Prime Pro Edition Agilex device software insufficient randomness | 5.5CNA v3.1 | 0.2% | 2023-08-15 | Fix |
| CVE-2023-20564 | AMD Ryzen™ Master improper input validation | 6.7v3.1 | 0.3% | 2023-08-15 | Exploit codeFix |
| CVE-2023-20560 | AMD Ryzen™ Master crash | 4.4v3.1 | 0.2% | 2023-08-15 | Fix |
| CVE-2023-4371 | phpRecDB index.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-08-15 | |
| CVE-2023-4369 | Google Chrome Systems extensions improper input validation | 8.8v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-4368 | Google Chrome Extensions API insufficient policy enforcement | 8.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4367 | Google Chrome Extensions API insufficient policy enforcement | 6.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4366 | Google Chrome extensions use-after-free | 8.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4365 | Google Chrome Fullscreen inappropriate implementation | 4.3v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4364 | Google Chrome Permission Prompts inappropriate implementation | 4.3v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4363 | Google Chrome WebShare inappropriate implementation | 4.3v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4362 | Google Chrome Mojom IDL heap-based buffer overflow | 8.8v3.1 | 18.5% | 2023-08-15 | Fix |
| CVE-2023-4361 | Google Chrome Autofill inappropriate implementation | 5.3v3.1 | 0.8% | 2023-08-15 | Fix |
| CVE-2023-4360 | Google Chrome Color inappropriate implementation | 4.3v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4359 | Google Chrome App Launcher inappropriate implementation | 5.3v3.1 | 0.8% | 2023-08-15 | Fix |
| CVE-2023-4358 | Google Chrome DNS use-after-free | 8.8v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-4357 | Google Chrome improper input validation | 8.8v3.1 | 47.1% | 2023-08-15 | Exploit codeFix |
| CVE-2023-4356 | Google Chrome Audio use-after-free | 8.8v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-4355 | Google Chrome V8 out-of-bounds access | 8.8v3.1 | 26.8% | 2023-08-15 | Fix |
| CVE-2023-4354 | Google Chrome Skia heap-based buffer overflow | 8.8v3.1 | 1.7% | 2023-08-15 | Fix |
| CVE-2023-4353 | Google Chrome ANGLE heap-based buffer overflow | 8.8v3.1 | 1.0% | 2023-08-15 | Fix |
| CVE-2023-4352 | Google Chrome V8 type confusion | 8.8v3.1 | 1.8% | 2023-08-15 | Fix |
| CVE-2023-4351 | Google Chrome Network use-after-free | 8.8v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-4350 | Google Chrome Fullscreen inappropriate implementation | 6.5v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-4349 | Google Chrome Device Trust Connectors use-after-free | 8.8v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-4347 | Cross-site scripting (XSS) Reflected in librenms/librenms | 5.4NVD v3.1 | 69.7% | 2023-08-15 | Fix |
| CVE-2023-4345 | Broadcom RAID Controller web interface is vulnerable client-side control bypass | 6.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4344 | Broadcom RAID Controller web interface CIM connection random number generation insufficient entropy | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4343 | Broadcom RAID Controller web interface information disclosure | 7.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4342 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4341 | Broadcom RAID Controller Web GUI privilege escalation | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4340 | Broadcom RAID Controller log file privilege escalation | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4339 | Broadcom RAID Controller web interface CIM private key storage insecure file permissions | 7.5v3.1 | 0.8% | 2023-08-15 | Fix |
| CVE-2023-4338 | Broadcom LSI Storage Authority (LSA) insecure default configuration | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4337 | Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4336 | Broadcom LSI Storage Authority (LSA) insecure default configuration | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4335 | Broadcom RAID Controller web interface nginx web server missing authentication | 7.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4334 | Broadcom RAID Controller Web server (nginx) is serving private files without any authentication | 7.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4333 | Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server | 5.5v3.1 | 0.1% | 2023-08-15 | Fix |
| CVE-2023-4332 | Broadcom RAID Controller web interface is vulnerable due to improper permissions on the log file | 7.5v3.1 | 0.6% | 2023-08-15 | Fix |
| CVE-2023-4331 | Broadcom RAID Controller web interface weak cryptographic algorithm | 7.5v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-4329 | Broadcom RAID Controller web interface session cookie vulnerability | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4328 | Broadcom RAID Controller web interface insufficiently protected credentials | 5.5v3.1 | 0.1% | 2023-08-15 | Fix |
| CVE-2023-4327 | Broadcom RAID Controller web interface insufficiently protected credentials | 5.5v3.1 | 0.1% | 2023-08-15 | |
| CVE-2023-4326 | Broadcom RAID Controller web interface TLS configuration weak cryptographic algorithm | 7.5v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-4325 | Broadcom LSI Storage Authority Libcurl vulnerability | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4324 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4323 | Broadcom RAID Controller web interface Gateway setup vulnerability | 9.8v3.1 | 0.7% | 2023-08-15 | Fix |
| CVE-2023-4308 | User Submitted Posts WordPress plugin unauthenticated stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-08-15 | Fix |
| CVE-2023-2916 | InfiniteWP Client WordPress plugin authenticated (Subscriber+) sensitive information exposure | 5.3NVD v3.1 | 24.0% | 2023-08-15 | Exploit codeFix |
| CVE-2023-2312 | Google Chrome Offline use-after-free | 8.8v3.1 | 0.9% | 2023-08-15 | Fix |
| CVE-2023-40518 | OpenLiteSpeed HTTP request header validation vulnerability | 7.5v3.1 | 0.7% | 2023-08-14 | Fix |