CVE-2023 list

CVE-2023 records published in August 2023

Page two of three: records 1,001 to 2,000 of the 2,165 published in August 2023, newest first. The first page carries the figures for August 2023.

CVE-2023 records published in August 2023, newest first: records 1,001 to 2,000 of 2,165
CVE Summary CVSS EPSS Published Signals
CVE-2023-40360QEMU null pointer dereference5.5v3.10.4%2023-08-14Fix
CVE-2023-40359xterm ReGIS character-set reporting vulnerability9.8v3.10.9%2023-08-14Fix
CVE-2023-40354MariaDB Maxscale cleartext storage of sensitive information6.5v3.10.3%2023-08-14Fix
CVE-2023-40312Reflected XSS in multiple JSP files in OpenNMS/OpenNMS6.7CNA v3.10.6%2023-08-14Fix
CVE-2023-40311Stored XSS in multiple JSP files in OpenNMS/OpenNMS6.7CNA v3.10.7%2023-08-14Fix
CVE-2023-40305GNU Indent out-of-bounds write5.5v3.10.4%2023-08-14Fix
CVE-2023-40303GNU InetUtils unchecked return value7.8v3.10.4%2023-08-14Fix
CVE-2023-40296Eminfedar Async-sockets-cpp out-of-bounds write7.5v3.10.9%2023-08-14Exploit code
CVE-2023-402950branch Boron out-of-bounds write8.8v3.10.9%2023-08-14
CVE-2023-402940branch Boron out-of-bounds write6.5v3.10.8%2023-08-14Exploit code
CVE-2023-40293Samsung Harman Infotainment command injection6.8v3.11.8%2023-08-14
CVE-2023-40292Samsung Harman Infotainment CarPlay vulnerability4.3v3.10.5%2023-08-14
CVE-2023-40291Samsung Harman Infotainment SSH service vulnerability6.8v3.10.5%2023-08-14
CVE-2023-40283Linux kernel use-after-free7.8NVD v3.10.6%2023-08-14Fix
CVE-2023-40274Getzola Zola path traversal7.5v3.11.1%2023-08-14
CVE-2023-40024Reflected cross-site scripting (XSS) in scancode.io license endpoint5.4CNA v3.10.5%2023-08-14Fix
CVE-2023-40023Yaklang Plugin's Fuzztag component allows Unauthorized Local File Reading6.5CNA v3.11.0%2023-08-14Fix
CVE-2023-40020Improper authentication in PrivateUploader9.9CNA v3.10.5%2023-08-14Fix
CVE-2023-40013shubhamjain svg-loader external-svg-loader cross-site scripting7.1CNA v3.10.6%2023-08-14Fix
CVE-2023-39950Insufficient input validation in efibootguard6.1CNA v3.10.4%2023-08-14Fix
CVE-2023-39908Yubico Yubihsm 2 SDK out-of-bounds read7.5v3.10.6%2023-08-14Fix
CVE-2023-39829Tenda A18 out-of-bounds write7.5v3.10.8%2023-08-14
CVE-2023-39828Tenda A18 out-of-bounds write7.5v3.10.8%2023-08-14
CVE-2023-39827Tenda A18 out-of-bounds write7.5v3.10.8%2023-08-14
CVE-2023-39293Mitel Mivoice Office 400 SMB Controller command injection9.8v3.11.7%2023-08-14Fix
CVE-2023-39292Mitel Mivoice Office 400 SMB Controller SQL injection9.8v3.10.6%2023-08-14Fix
CVE-2023-38741IBM TXSeries for Multiplatforms denial of service7.5CNA v3.11.0%2023-08-14Fix
CVE-2023-38721IBM i privilege escalation8.4CNA v3.10.2%2023-08-14Fix
CVE-2023-38687Execution of arbitrary JavaScript from Svelecte item names5.4CNA v3.10.5%2023-08-14Fix
CVE-2023-37847xxyopen Novel-Plus SQL injection9.8v3.10.7%2023-08-14Fix
CVE-2023-37070code-projects Hospital Information System cross-site scripting4.8v3.10.6%2023-08-14
CVE-2023-35689Google Android DeviceVersionFragment.java privilege escalation7.8v3.10.1%2023-08-14Fix
CVE-2023-33013Zyxel NBG6604 firmware NTP feature command injection8.8CNA v3.11.7%2023-08-14Fix
CVE-2023-32748Mitel MiVoice Connect incorrect authorization9.8v3.10.9%2023-08-14Fix
CVE-2023-32358Apple macOS type confusion8.8v3.10.6%2023-08-14Fix
CVE-2023-31041InsydeH2O cleartext storage of sensitive information7.5v3.10.4%2023-08-14Fix
CVE-2023-30754AdFoxly Ad Manager, AdSense Ads and Ads.txt WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-14
CVE-2023-30752External Videos WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-14
CVE-2023-30751Article Directory Redux WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-14
CVE-2023-30749Optima Express + MarketBoost IDX WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-14Fix
CVE-2023-30489Email Subscription Popup WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-14Fix
CVE-2023-30483Watu Quiz WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-14Fix
CVE-2023-30477AFFILIATE Solution WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-14
CVE-2023-30475WooCommerce Affiliate Plugin WordPress plugin cross-site scripting6.1NVD v3.10.4%2023-08-14Fix
CVE-2023-30188ONLYOFFICE Document Server resource exhaustion7.5v3.12.2%2023-08-14
CVE-2023-30187ONLYOFFICE Document Server An out-of-bounds access9.8v3.12.4%2023-08-14
CVE-2023-30186ONLYOFFICE Document Server A use-after-free9.8v3.12.3%2023-08-14
CVE-2023-29468Ti Wilink8-wifi-mcp8 buffer overflow9.8v3.110.1%2023-08-14Fix
CVE-2023-29097a3 Portfolio WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-14Fix
CVE-2023-28768Zyxel XGS2220-30 firmware improper exception handling6.5CNA v3.10.3%2023-08-14Fix
CVE-2023-28535Paytm Payment Donation WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-14Fix
CVE-2023-28483TigerGraph Enterprise GSQL file output policy vulnerability8.8v3.10.9%2023-08-14
CVE-2023-28482Tigergraph unrestricted file upload6.5v3.10.7%2023-08-14
CVE-2023-28481Tigergraph insecure direct object reference8.8v3.10.7%2023-08-14
CVE-2023-28480Tigergraph unrestricted file upload6.5v3.10.6%2023-08-14
CVE-2023-28199Apple macOS out-of-bounds read5.5v3.10.2%2023-08-14Fix
CVE-2023-28198Apple macOS use-after-free8.8v3.10.9%2023-08-14Fix
CVE-2023-28179Apple macOS AppleScript processing information disclosure7.1v3.10.2%2023-08-14Fix
CVE-2023-27948Apple macOS out-of-bounds read5.5v3.10.2%2023-08-14Fix
CVE-2023-27947Apple macOS out-of-bounds read5.5v3.10.2%2023-08-14Fix
CVE-2023-27939Apple macOS out-of-bounds read5.5v3.10.2%2023-08-14Fix
CVE-2023-21292Google Android ActivityManagerService.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21290Google Android MmsProvider.java denial of service5.5v3.10.1%2023-08-14Fix
CVE-2023-21289Google Android multiple locations information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21288Google Android Notification.java information disclosure5.5v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21287Google Android multiple locations code execution9.8v3.10.5%2023-08-14Fix
CVE-2023-21286Google Android RemoteViews.java privilege escalation7.8v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21285Google Android MediaSessionRecord.java information disclosure5.5v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21284Google Android DevicePolicyManager.java denial of service5.5v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21283Google Android StatusHints.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21282Google Android lpp_tran.h out-of-bounds write8.8v3.11.2%2023-08-14Exploit codeFix
CVE-2023-21281Google Android KeyguardViewMediator.java privilege escalation7.8v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21280Google Android MediaSessionRecord.java denial of service5.5v3.10.1%2023-08-14Fix
CVE-2023-21279Google Android RemoteViews.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21278Google Android multiple locations privilege escalation3.3v3.10.1%2023-08-14Fix
CVE-2023-21277Google Android RemoteViews.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21276Google Android CursorWindow.cpp information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21275Google Android AdminIntegratedFlowPrepareActivity.java privilege escalation7.8v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21274Google Android ShimConverter.cpp out-of-bounds read5.5v3.10.1%2023-08-14Fix
CVE-2023-21273Google Android sdp_db.cc out-of-bounds write8.8v3.10.2%2023-08-14Fix
CVE-2023-21272Google Android Uri.java privilege escalation7.8v3.10.2%2023-08-14Exploit codeFix
CVE-2023-21271Google Android ShimPreparedModel.cpp out-of-bounds read5.5v3.10.1%2023-08-14Fix
CVE-2023-21269Google Android ActivityStarter.java privilege escalation7.8v3.10.1%2023-08-14Fix
CVE-2023-21268Google Android MmsProvider.java denial of service5.5v3.10.1%2023-08-14Fix
CVE-2023-21267Google Android KeyguardViewMediator.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21265Google Android improper certificate validation7.5v3.10.3%2023-08-14Fix
CVE-2023-21264Google Android mem_protect.c privilege escalation6.7v3.10.1%2023-08-14Fix
CVE-2023-21242Google Android InsecureEapNetworkHandler.java privilege escalation9.8v3.10.5%2023-08-14Fix
CVE-2023-21235Google Android LockSettingsActivity.java privilege escalation7.8v3.10.1%2023-08-14Fix
CVE-2023-21234Google Android ChooseLockSettingsHelper.java privilege escalation5.5v3.10.1%2023-08-14Fix
CVE-2023-21233Google Android avrc information disclosure7.5v3.10.4%2023-08-14Fix
CVE-2023-21232Google Android multiple locations information disclosure3.3v3.10.1%2023-08-14Fix
CVE-2023-21231Google Android ButtonManager.java privilege escalation7.8v3.10.1%2023-08-14Fix
CVE-2023-21230Google Android AccessPointPreference.java information disclosure5.5v3.10.1%2023-08-14Fix
CVE-2023-21229Google Android ManagedServices.java privilege escalation7.8v3.10.1%2023-08-14Fix
CVE-2023-21140Google Android ManagePermissionsActivity.java privilege escalation6.8v3.10.1%2023-08-14Fix
CVE-2023-21134Google Android ManagePermissionsActivity.java privilege escalation6.8v3.10.1%2023-08-14Fix
CVE-2023-21133Google Android ManagePermissionsActivity.java privilege escalation6.8v3.10.1%2023-08-14Fix
CVE-2023-21132Google Android ManagePermissionsActivity.java privilege escalation6.8v3.10.1%2023-08-14Fix
CVE-2023-20965Google Android ClientModeImpl.java information disclosure9.8v3.10.6%2023-08-14Fix
CVE-2023-4322Heap-based buffer overflow in radareorg/radare29.8v3.10.9%2023-08-14Fix
CVE-2023-4321Cross-site scripting (XSS) Stored in cockpit-hq/cockpit6.1NVD v3.10.6%2023-08-14Fix
CVE-2023-3721WP-EMail WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-08-14Fix
CVE-2023-3645Contact Form Builder by Bit Form WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-08-14Fix
CVE-2023-3601Simple Author Box WordPress plugin Contributor+ arbitrary user information disclosure via IDOR4.3NVD v3.10.5%2023-08-14Fix
CVE-2023-3435User Activity Log WordPress plugin unauthenticated SQLi9.8NVD v3.11.0%2023-08-14Fix
CVE-2023-3328Custom Field For WP Job Manager WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-08-14Fix
CVE-2023-3267CyberPower PowerPanel Enterprise OS command injection8.8NVD v3.11.8%2023-08-14Fix
CVE-2023-3266CyberPower PowerPanel Enterprise improperly implemented security check9.8NVD v3.10.9%2023-08-14Fix
CVE-2023-3265CyberPower PowerPanel Enterprise escape sequence injection9.8NVD v3.11.6%2023-08-14Fix
CVE-2023-3264Dataprobe iBoot PDU hard-coded credentials9.8NVD v3.10.5%2023-08-14Fix
CVE-2023-3263Dataprobe iBoot PDU authentication bypass7.5NVD v3.10.7%2023-08-14Fix
CVE-2023-3262Dataprobe iBoot PDU hard-coded credentials6.7NVD v3.10.3%2023-08-14Fix
CVE-2023-3261Dataprobe iBoot PDU buffer overflow7.2NVD v3.10.8%2023-08-14Fix
CVE-2023-3260Dataprobe iBoot PDU OS command injection8.8NVD v3.11.3%2023-08-14Fix
CVE-2023-3259Dataprobe iBoot PDU deserialization of untrusted data9.8NVD v3.11.0%2023-08-14Fix
CVE-2023-3160Local privilege escalation in security products for Windows7.8CNA v3.10.2%2023-08-14Fix
CVE-2023-2803Ultimate Addons for Contact Form 7 WordPress plugin reflected XSS6.1NVD v3.10.5%2023-08-14Fix
CVE-2023-2802Ultimate Addons for Contact Form 7 WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-08-14Fix
CVE-2023-2606wpbrutalai WordPress plugin stored cross-site scripting4.8NVD v3.12.2%2023-08-14Fix
CVE-2023-0872The OpenNMS Group Horizon ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users8.2CNA v3.13.3%2023-08-14MetasploitExploit codeFix
CVE-2023-39406Huawei HarmonyOS permission control vulnerability in the XLayout component7.5v3.10.4%2023-08-13Fix
CVE-2023-39405Huawei HarmonyOS vulnerability of out-of-bounds parameter read/write in the Wi-Fi module9.8v3.10.5%2023-08-13Fix
CVE-2023-39404Huawei HarmonyOS improper input validation7.5v3.10.4%2023-08-13Fix
CVE-2023-39403Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.4%2023-08-13Fix
CVE-2023-39402Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.5%2023-08-13Fix
CVE-2023-39401Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.5%2023-08-13Fix
CVE-2023-39400Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.5%2023-08-13Fix
CVE-2023-39399Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.4%2023-08-13Fix
CVE-2023-39398Huawei HarmonyOS parameter verification vulnerability in the installd module9.1v3.10.4%2023-08-13Fix
CVE-2023-39397Huawei HarmonyOS input parameter verification vulnerability in the communication system7.5v3.10.4%2023-08-13Fix
CVE-2023-39396Huawei HarmonyOS deserialization vulnerability in the input module7.5v3.10.5%2023-08-13Fix
CVE-2023-39395Huawei HarmonyOS mismatch vulnerability in the serialization process in the communication system7.5v3.10.4%2023-08-13Fix
CVE-2023-39394Huawei HarmonyOS vulnerability of API privilege escalation in the wifienhance module7.5v3.10.3%2023-08-13Fix
CVE-2023-39393Huawei HarmonyOS vulnerability of insecure signatures in the ServiceWifiResources module7.5v3.10.2%2023-08-13Fix
CVE-2023-39392Huawei HarmonyOS vulnerability of insecure signatures in the OsuLogin module7.5v3.10.2%2023-08-13Fix
CVE-2023-39391Huawei HarmonyOS vulnerability of system file information leakage in the USB service module7.5v3.10.4%2023-08-13Fix
CVE-2023-39390Huawei HarmonyOS improper input validation7.5v3.10.4%2023-08-13Fix
CVE-2023-39389Huawei HarmonyOS vulnerability of input parameters being not strictly verified in the PMS module7.5v3.10.4%2023-08-13Fix
CVE-2023-39388Huawei HarmonyOS vulnerability of input parameters being not strictly verified in the PMS module7.5v3.10.4%2023-08-13Fix
CVE-2023-39387Huawei HarmonyOS vulnerability of permission control in the window management module5.3v3.10.3%2023-08-13Fix
CVE-2023-39386Huawei HarmonyOS vulnerability of input parameters being not strictly verified in the PMS module7.5v3.10.4%2023-08-13Fix
CVE-2023-39385Huawei HarmonyOS vulnerability of configuration defects in the media module of certain products9.1v3.10.4%2023-08-13Fix
CVE-2023-39384Huawei HarmonyOS vulnerability of incomplete permission verification in the input method module7.5v3.10.4%2023-08-13Fix
CVE-2023-39383Huawei HarmonyOS vulnerability of input parameters being not strictly verified in the AMS module7.5v3.10.4%2023-08-13Fix
CVE-2023-39382Huawei HarmonyOS input verification vulnerability in the audio module7.5v3.10.4%2023-08-13Fix
CVE-2023-39381Huawei HarmonyOS input verification vulnerability in the storage module7.5v3.10.4%2023-08-13Fix
CVE-2023-39380Huawei HarmonyOS permission control vulnerability in the audio module7.5v3.10.4%2023-08-13Fix
CVE-2023-23208Genesys Administrator Extension cross-site scripting6.1v3.10.4%2023-08-13Fix
CVE-2023-4293Premium Packages WordPress plugin privilege escalation6.5NVD v3.11.0%2023-08-12Fix
CVE-2023-4265Buffer overflow in Zephyr USB6.4CNA v3.10.8%2023-08-12
CVE-2023-3452Canto WordPress plugin unauthenticated remote file inclusion9.8CNA v3.17.0%2023-08-12NucleiExploit codeFix
CVE-2023-40267GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments9.8v3.11.2%2023-08-11Fix
CVE-2023-40260EmpowerID improper authentication9.1v3.10.6%2023-08-11
CVE-2023-40256Veritas Netbackup Snapshot Manager improper certificate validation9.8v3.10.4%2023-08-11Fix
CVE-2023-40254Genians Genian NAC download without integrity check9.8v3.10.2%2023-08-11Fix
CVE-2023-40253Genians Genian NAC improper authentication9.8v3.10.4%2023-08-11Fix
CVE-2023-39949eProsima Fast DDS sequence number validation reachable assertion7.5CNA v3.11.0%2023-08-11Fix
CVE-2023-39948eProsima Fast-DDS uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds7.5CNA v3.11.0%2023-08-11Fix
CVE-2023-39947eProsima Fast-DDS another heap overflow in push_back_helper8.2CNA v3.11.0%2023-08-11Fix
CVE-2023-39946eProsima Fast-DDS heap overflow in push_back_helper due to a CDR message8.2CNA v3.10.9%2023-08-11Fix
CVE-2023-39945eProsima Fast-DDS malformed serialized data in a data submessage leads to unhandled exception8.2CNA v3.10.9%2023-08-11Fix
CVE-2023-39553Apache Airflow Drill Provider arbitrary file read7.5v3.12.3%2023-08-11Fix
CVE-2023-39534eProsima Fast-DDS malformed GAP submessage triggers assertion failure7.5CNA v3.11.0%2023-08-11Fix
CVE-2023-39418PostgreSQL: Merge fails to enforce update or select row security policies4.3NVD v3.11.1%2023-08-11Fix
CVE-2023-39417PostgreSQL: Extension script @substitutions@ within quoting allow SQL injection8.8NVD v3.11.7%2023-08-11Fix
CVE-2023-37513HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher3.3CNA v3.10.2%2023-08-11Fix
CVE-2023-37512HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher3.3CNA v3.10.2%2023-08-11Fix
CVE-2023-37511HCL Traveler To Do App Transport Security vulnerability3.5CNA v3.10.4%2023-08-11Fix
CVE-2023-35179SolarWinds Serv-U multi-factor authentication authentication bypass7.2CNA v3.11.1%2023-08-11Fix
CVE-2023-34438Intel(R) NUC BIOS firmware some race condition7.5CNA v3.10.1%2023-08-11Fix
CVE-2023-34427Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA protection mechanism failure5.3CNA v3.10.2%2023-08-11Fix
CVE-2023-34355Intel(R) Server Board M10JNP2SB integrated BMC video drivers uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-34349Intel(R) NUC BIOS firmware some race condition4.6CNA v3.10.1%2023-08-11Fix
CVE-2023-34086Intel(R) NUC BIOS firmware some improper input validation8.2CNA v3.10.2%2023-08-11Fix
CVE-2023-33877Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA some out-of-bounds write3.3CNA v3.10.2%2023-08-11Fix
CVE-2023-33867Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA privilege escalation4.4CNA v3.10.2%2023-08-11Fix
CVE-2023-32663Intel(R) RealSense(TM) SDKs in some incorrect default permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-32656Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA privilege escalation5.3CNA v3.10.2%2023-08-11Fix
CVE-2023-32617Intel NUC Rugged Kit BIOS firmware privilege escalation8.2CNA v3.10.2%2023-08-11Fix
CVE-2023-32609Intel Unite(R) android application improper access control5.0CNA v3.10.2%2023-08-11Fix
CVE-2023-32547MAVinci Desktop Software for Intel(R) Falcon 8+ incorrect default permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-32543Intel(R) ITS sofware incorrect default permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-32285Intel(R) NUC BIOS firmware some improper access control6.0CNA v3.10.2%2023-08-11Fix
CVE-2023-32267OpenText / Micro Focus ArcSight Management Center Remote vulnerability6.4CNA v3.10.5%2023-08-11Fix
CVE-2023-31246Intel(R) SDP Tool software some incorrect default permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-30760Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA some out-of-bounds read3.3CNA v3.10.2%2023-08-11Fix
CVE-2023-29500Intel(R) NUCs BIOS firmware for some information disclosure5.3CNA v3.10.2%2023-08-11Fix
CVE-2023-29494Intel(R) NUCs BIOS firmware for some improper input validation7.5CNA v3.10.2%2023-08-11Fix
CVE-2023-29243Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA some unchecked return value4.4CNA v3.10.2%2023-08-11Fix
CVE-2023-29151Intel(R) PSR SDK some uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-28938Intel(R) SSD Tools software some resource exhaustion3.4CNA v3.10.2%2023-08-11Fix
CVE-2023-28823Intel(R) oneAPI Toolkit and component software installers some uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-28736Intel(R) SSD Tools software some buffer overflow5.7CNA v3.10.2%2023-08-11Fix
CVE-2023-28714Intel(R) PROSet/Wireless WiFi Software firmware for some improper access control8.2CNA v3.10.2%2023-08-11Fix
CVE-2023-28711Hyperscan Library maintained by Intel(R) insufficient control flow management5.5CNA v3.10.2%2023-08-11Fix
CVE-2023-28658Intel(R) oneMKL software some insecure inherited permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-28405Intel(R) Distribution of OpenVINO(TM) Toolkit uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-28385Intel(R) NUC Pro Software Suite improper authorization8.2CNA v3.10.2%2023-08-11Fix
CVE-2023-28380Intel(R) AI Hackathon software uncontrolled search path8.8CNA v3.10.6%2023-08-11Fix
CVE-2023-27887Intel(R) NUCs BIOS firmware for some improper initialization6.1CNA v3.10.2%2023-08-11Fix
CVE-2023-27515Intel(R) DSA software cross-site scripting8.1CNA v3.10.6%2023-08-11Fix
CVE-2023-27509Intel(R) ISPC software installers some improper access control6.6CNA v3.10.2%2023-08-11Fix
CVE-2023-27506Authenticated local privilege escalation vulnerability in Intel Optimization For Tensorflow5.5CNA v3.10.2%2023-08-11Fix
CVE-2023-27505Intel(R) Advanced Link Analyzer Standard Edition software installers incorrect default permissions6.7CNA v3.10.1%2023-08-11Fix
CVE-2023-27392Intel(R) Support Android application incorrect default permissions4.4CNA v3.10.2%2023-08-11Fix
CVE-2023-27391Intel(R) oneAPI Toolkit and component software installers some improper access control6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-26587Intel(R) Easy Streaming Wizard software improper input validation7.8CNA v3.10.2%2023-08-11Fix
CVE-2023-25944Intel(R) VCUST Tool software some uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-25775Intel Ethernet Controller Rdma Driver For Linux Intel(R) improper access control5.6CNA v3.11.1%2023-08-11Fix
CVE-2023-25773Intel(R) Unite(R) Hub software installer improper access control7.5CNA v3.10.1%2023-08-11Fix
CVE-2023-25757Intel(R) Unison(TM) software some improper access control7.3CNA v3.10.4%2023-08-11Fix
CVE-2023-25182Intel(R) Unite(R) Client software uncontrolled search path4.2CNA v3.10.2%2023-08-11Fix
CVE-2023-24016Intel(R) Quartus(R) Prime Pro and Standard edition software some uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-239083rd Generation Intel(R) Xeon(R) Scalable Processors some improper access control6.0CNA v3.10.2%2023-08-11Fix
CVE-2023-23577ITE Tech consumer infrared drivers for Intel(R) NUC uncontrolled search path6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-22957AudioCodes 405hd hard-coded credentials7.5v3.11.4%2023-08-11
CVE-2023-22956AudioCodes 405hd hard-coded credentials7.5v3.11.4%2023-08-11
CVE-2023-22955AudioCodes 405hd insufficient verification of data authenticity7.8v3.10.3%2023-08-11
CVE-2023-22841Intel Server Firmware Update Utility installer search path privilege escalation6.7CNA v3.10.2%2023-08-11Fix
CVE-2023-22840Intel(R) oneVPL GPU software software for the improper neutralization3.3CNA v3.10.4%2023-08-11Fix
CVE-2023-22449Intel(R) NUC BIOS firmware some improper input validation7.5CNA v3.10.2%2023-08-11Fix
CVE-2023-22444Intel(R) NUC 13 Extreme Compute Element some improper initialization6.0CNA v3.10.2%2023-08-11Fix
CVE-2023-22356Intel(R) NUC BIOS firmware some improper initialization6.0CNA v3.10.2%2023-08-11Fix
CVE-2023-22338Intel(R) oneVPL GPU software some out-of-bounds read4.4CNA v3.10.3%2023-08-11Fix
CVE-2023-22330Intel(R) NUC BIOS firmware some uninitialized resource use6.0CNA v3.10.2%2023-08-11Fix
CVE-2023-22276Intel(R) Ethernet Controllers and Adapters E810 Series firmware for some race condition6.5CNA v3.10.1%2023-08-11Fix
CVE-2023-4304Business Logic Errors in froxlor/froxlor2.7v3.10.6%2023-08-11Fix
CVE-2023-4108Mattermost audit logging fails to sanitize post metadata4.5CNA v3.10.6%2023-08-11Fix
CVE-2023-4107Mattermost incorrect authorization allows a user manager to update a system admin6.7CNA v3.10.5%2023-08-11Fix
CVE-2023-4106Mattermost A guest user can perform various actions on public playbooks6.3CNA v3.10.4%2023-08-11Fix
CVE-2023-4105Mattermost attachment of deleted message in a thread remains accessible and downloadable3.1CNA v3.10.4%2023-08-11Fix
CVE-2023-3937Cross-site scripting vulnerabilities in Snow License Manager4.8CNA v3.10.3%2023-08-11Fix
CVE-2023-3864SQL injection vulnerability in Snow License Manager7.2CNA v3.10.6%2023-08-11Fix
CVE-2023-3824PHP buffer overflow and overread in phar_dir_read9.4CNA v3.121.8%2023-08-11Fix
CVE-2023-3823PHP security issue with external entity loading in XML without enabling it8.6CNA v3.11.6%2023-08-11Fix
CVE-2023-0871The OpenNMS Group Horizon an XML external entity injection5.4CNA v3.10.5%2023-08-11Fix
CVE-2023-40235Opengroup Archi NTLM information disclosure6.5v3.10.8%2023-08-10
CVE-2023-40225HAProxy HTTP request smuggling7.2v3.12.1%2023-08-10Fix
CVE-2023-40224MISP cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-40216OpenBSD missing authorization5.5v3.10.1%2023-08-10Fix
CVE-2023-40014OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender5.3CNA v3.10.7%2023-08-10Fix
CVE-2023-399661Panel arbitrary file write vulnerability exists in the background7.5CNA v3.10.8%2023-08-10Fix
CVE-2023-399651Panel unauthorized access in Backend6.5CNA v3.10.4%2023-08-10Fix
CVE-2023-399641Panel O&M management panel has a background arbitrary file reading7.5CNA v3.11.0%2023-08-10Fix
CVE-2023-39963Nextcloud security-advisories missing password confirmation when creating app passwords8.1CNA v3.10.3%2023-08-10Fix
CVE-2023-39962Nextcloud security-advisories users can delete external storage mount points7.7CNA v3.11.0%2023-08-10Fix
CVE-2023-39961Nextcloud security-advisories text does not respect Allow download permissions3.5CNA v3.10.6%2023-08-10Fix
CVE-2023-39959Nextcloud Server DAV request handler vulnerability3.5CNA v3.10.6%2023-08-10Fix
CVE-2023-39958Nextcloud Server OAuth2 password reset token controller vulnerability5.8CNA v3.10.7%2023-08-10Fix
CVE-2023-39957Path traversal allows tricking the Talk Android app into writing files into it's root directory7.2CNA v3.00.4%2023-08-10Fix
CVE-2023-39955Notes attachment render HTML in preview mode3.5CNA v3.10.6%2023-08-10Fix
CVE-2023-39954Nextcloud security-advisories user_oidc app stores client secret unencrypted in database3.8CNA v3.10.4%2023-08-10Fix
CVE-2023-39953Nextcloud security-advisories issuer not verified from obtained token in user_oidc4.8CNA v3.10.5%2023-08-10Fix
CVE-2023-39952Nextcloud security-advisories advanced permissions not respected when copying entire group folders6.5CNA v3.10.8%2023-08-10Fix
CVE-2023-39806Idreamsoft iCMS SQL injection9.8v3.10.6%2023-08-10
CVE-2023-39805Idreamsoft iCMS SQL injection9.8v3.10.6%2023-08-10
CVE-2023-39776PHP Jabbers Ticket Support Script file upload9.8v3.11.0%2023-08-10
CVE-2023-39314Leyka WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-10Fix
CVE-2023-38830PHP Jabbers Yacht Listing Script information disclosure7.5v3.10.7%2023-08-10
CVE-2023-38397Gestion-Pymes WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-10
CVE-2023-38333Zoho ManageEngine Applications Manager cross-site scripting6.1v3.12.3%2023-08-10Fix
CVE-2023-38248Adobe Acrobat Reader DC PDF Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38247Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38246Adobe Acrobat Reader DC ActiveX Control stack-based stale pointer vulnerability7.8CNA v3.10.5%2023-08-10Fix
CVE-2023-38245Adobe Acrobat Reader DC ActiveX Control src NTLMv2 SSO Hash Theft vulnerability5.5CNA v3.10.4%2023-08-10Fix
CVE-2023-38244Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38243Adobe Acrobat Reader DC JBIG2 File Parsing use-after-free information disclosure5.5CNA v3.12.8%2023-08-10Fix
CVE-2023-38242Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38241Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38240Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38239Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38238Adobe Acrobat Reader DC Font Parsing use-after-free information disclosure5.5CNA v3.12.5%2023-08-10Fix
CVE-2023-38237Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38236Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.6%2023-08-10Fix
CVE-2023-38235Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.3%2023-08-10Fix
CVE-2023-38234Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution7.8CNA v3.12.6%2023-08-10Fix
CVE-2023-38233Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution7.8CNA v3.12.8%2023-08-10Fix
CVE-2023-38232Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.8%2023-08-10Fix
CVE-2023-38231Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution7.8CNA v3.12.8%2023-08-10Fix
CVE-2023-38230Adobe Acrobat Reader DC Font Parsing use-after-free information disclosure5.5CNA v3.13.0%2023-08-10Fix
CVE-2023-38229Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure7.8CNA v3.13.1%2023-08-10Fix
CVE-2023-38228Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.13.3%2023-08-10Fix
CVE-2023-38227Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.13.3%2023-08-10Fix
CVE-2023-38226Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution7.8CNA v3.13.1%2023-08-10Fix
CVE-2023-38225Adobe Acrobat Reader DC AcroForm use-after-free remote code execution7.8CNA v3.13.5%2023-08-10Fix
CVE-2023-38224Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.13.6%2023-08-10Fix
CVE-2023-38223Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution7.8CNA v3.13.1%2023-08-10Fix
CVE-2023-38222Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate use-after-free remote code execution7.8CNA v3.13.2%2023-08-10Fix
CVE-2023-38210Adobe XMP Toolkit other uncontrolled resource consumption5.5CNA v3.10.4%2023-08-10Fix
CVE-2023-38034Ubiquiti UniFi Access Points DHCP client function of all command injection9.8v3.11.2%2023-08-10Fix
CVE-2023-37988Contact Form Generator WordPress plugin cross-site scripting (XSS)6.1NVD v3.11.3%2023-08-10NucleiFix
CVE-2023-37983Art Direction WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-10
CVE-2023-37734Ezsoftmagic MP3 Audio Converter buffer overflow9.8v3.11.3%2023-08-10
CVE-2023-37625NetBox A stored cross-site scripting5.4v3.10.7%2023-08-10Exploit code
CVE-2023-37543cacti insecure direct object reference7.5v3.10.9%2023-08-10Fix
CVE-2023-37388Simple Light Weight Social Share WordPress plugin cross-site scripting4.8v3.10.4%2023-08-10
CVE-2023-37069Online Hospital Management System SQL injection9.8v3.11.0%2023-08-10
CVE-2023-36530SP Project and Document Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-10Fix
CVE-2023-36315PHP Jabbers Callback Widget "action" parameter of index.php in PHPJabbers cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-36314PHP Jabbers Callback Widget cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-36313PHP Jabbers Document Creator cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-36312PHP Jabbers Callback Widget cross-site scripting5.4v3.10.4%2023-08-10
CVE-2023-36311PHP Jabbers Document Creator "column" parameter of index.php in PHPJabbers SQL injection9.8v3.10.8%2023-08-10
CVE-2023-36310PHP Jabbers Document Creator "column" parameter of index.php in PHPJabbers cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-36309PHP Jabbers Document Creator "action" parameter of index.php in PHPJabbers cross-site scripting6.1v3.10.4%2023-08-10
CVE-2023-35085Ubiquiti UniFi Access Points all integer overflow9.8v3.11.0%2023-08-10Exploit codeFix
CVE-2023-34374AnsPress Question and answer WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-08-10Fix
CVE-2023-32567Ivanti Wavelink XML external entity injection9.8v3.12.5%2023-08-10Fix
CVE-2023-32566Ivanti Avalanche denial of service9.1v3.12.4%2023-08-10Fix
CVE-2023-32565Ivanti Avalanche denial of service9.1v3.12.2%2023-08-10Fix
CVE-2023-32564Ivanti Avalanche unrestricted file upload9.8v3.144.4%2023-08-10Fix
CVE-2023-32563Ivanti Avalanche path traversal9.8v3.189.1%2023-08-10NucleiFix
CVE-2023-32562Ivanti Avalanche unrestricted file upload9.8v3.145.6%2023-08-10Fix
CVE-2023-32561Ivanti Avalanche authentication bypass7.5v3.12.4%2023-08-10Fix
CVE-2023-32560Ivanti Avalanche out-of-bounds write9.8v3.198.9%2023-08-10MetasploitExploit codeFix
CVE-2023-31209Checkmk command injection via active checks and REST API8.8v3.11.1%2023-08-10Fix
CVE-2023-30705Samsung Mobile Galaxy Store improper neutralization6.8CNA v3.10.2%2023-08-10Fix
CVE-2023-30704Samsung Mobile Samsung Internet improper authorization3.8CNA v3.10.2%2023-08-10Fix
CVE-2023-30703Samsung Mobile Samsung Members information disclosure3.3CNA v3.10.3%2023-08-10Fix
CVE-2023-30702Samsung Mobile Galaxy book Go SSHDCPAPP TA stack-based buffer overflow6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30701Samsung Android WifiGeofenceManager vulnerability4.7CNA v3.10.1%2023-08-10Fix
CVE-2023-30700Samsung Android SemWifiApTimeOutImpl vulnerability5.3CNA v3.10.1%2023-08-10Fix
CVE-2023-30699Samsung Mobile Devices parser_hvcC function of libsimba library out-of-bounds write7.5CNA v3.10.7%2023-08-10Fix
CVE-2023-30698Samsung Mobile Devices TelephonyUI improper access control5.5CNA v3.10.1%2023-08-10Fix
CVE-2023-30697Samsung Mobile Devices IpcTxCfgSetSimlockPayload in libsec-ril improper input validation4.4CNA v3.10.2%2023-08-10Fix
CVE-2023-30696Samsung Mobile Devices IpcTxGetVerifyAkey in libsec-ril improper input validation4.4CNA v3.10.2%2023-08-10Fix
CVE-2023-30695Samsung Mobile Galaxy book Go SSHDCPAPP TA out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30694Samsung Mobile Devices IpcTxPcscTransmitApdu of libsec-ril out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30693Samsung Mobile Devices out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30691Samsung Mobile Devices incorrect privilege assignment8.4CNA v3.10.2%2023-08-10Fix
CVE-2023-30689Samsung Mobile Devices out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30688Samsung Mobile Devices MakeUiccAuthForOem of libsec-ril out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30687Samsung Mobile Devices RmtUimApdu of libsec-ril out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30686Samsung Mobile Devices ReqDataRaw of libsec-ril out-of-bounds write6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30685Samsung Mobile Devices Telecom improper access control4.3CNA v3.10.2%2023-08-10Fix
CVE-2023-30684Samsung Mobile Devices improper access control4.3CNA v3.10.1%2023-08-10Fix
CVE-2023-30683Samsung Mobile Devices Telecom improper access control4.3CNA v3.10.1%2023-08-10Fix
CVE-2023-30682Samsung Mobile Devices Telecom improper access control4.3CNA v3.10.1%2023-08-10Fix
CVE-2023-30681Samsung Mobile Devices out-of-bounds write4.4CNA v3.10.2%2023-08-10Fix
CVE-2023-30680Samsung Mobile Devices MMIGroup improper privilege management8.4CNA v3.10.2%2023-08-10Fix
CVE-2023-30679Samsung Mobile Devices HDCP trustlet improper access control7.8CNA v3.10.1%2023-08-10Fix
CVE-2023-30654Samsung Mobile Devices SLocationService improper access control6.7CNA v3.10.2%2023-08-10Fix
CVE-2023-30481AGP Font Awesome Collection WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-10
CVE-2023-29320Adobe Acrobat Blacklist Bypass Design flaw7.8CNA v3.16.0%2023-08-10Fix
CVE-2023-29303Adobe Acrobat Reader DC AcroForm Annotation use-after-free information disclosure5.5CNA v3.13.7%2023-08-10Fix
CVE-2023-29299Adobe Acrobat Reader untrusted search path application denial of service4.7CNA v3.10.4%2023-08-10Fix
CVE-2023-28779Terms descriptions WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-10Fix
CVE-2023-28129Ivanti Desktop and Server Management (DSM) arbitrary command execution7.8v3.10.3%2023-08-10Fix
CVE-2023-26311A remote code execution vulnerability in the webview component of OPPO Store app7.4CNA v3.10.8%2023-08-10Fix
CVE-2023-26309OPPO OnePlus Store A remote code execution vulnerability in the webview component7.4CNA v3.10.8%2023-08-10Fix
CVE-2023-24393Animated Number Counters WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-10Fix
CVE-2023-24391ApplyOnline Application Form Builder and Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-10Fix
CVE-2023-24389Social Proof (Testimonial) Slider WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-10Fix
CVE-2023-24009Upfrontwp WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-08-10
CVE-2023-23900Easy Forms for Mailchimp WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-08-10Fix
CVE-2023-23871Button WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-10Fix
CVE-2023-23828WP Category Post List Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-10
CVE-2023-23826Arsham Mirshah Add Posts to Pages stored cross-site scripting5.4v3.10.4%2023-08-10
CVE-2023-23798Layer Slider WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-10
CVE-2023-23342HCL Nomad for web local data cryptographic validation vulnerability6.6CNA v3.10.2%2023-08-10Fix
CVE-2023-4283EmbedPress WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-08-10Fix
CVE-2023-4282EmbedPress WordPress plugin missing authorization authenticated plugin settings delete4.3v3.10.5%2023-08-10Fix
CVE-2023-4277Realia WordPress plugin cross-site request forgery to user email Change6.5NVD v3.10.3%2023-08-10Fix
CVE-2023-4276Absolute Privacy WordPress plugin cross-site request forgery to user Email/Password Change8.8CNA v3.10.3%2023-08-10Fix
CVE-2023-40012uthenticode EKU validation bypass5.9CNA v3.10.2%2023-08-09Fix
CVE-2023-39969uthenticode signature validation bypass9.1CNA v3.10.6%2023-08-09Fix
CVE-2023-39910Libbitcoin Explorer weak random number generator7.5NVD v3.11.8%2023-08-09Exploit code
CVE-2023-39531Sentry vulnerable to incorrect credential validation on OAuth token requests6.5CNA v3.10.4%2023-08-09Fix
CVE-2023-39341FFRI yarai improper exception handling3.3v3.10.3%2023-08-09Fix
CVE-2023-39008OPNsense component /api/cron/settings/setJob/ command injection9.8v3.13.1%2023-08-09
CVE-2023-39007OPNsense cross-site scripting9.6v3.12.6%2023-08-09Nuclei
CVE-2023-39006OPNsense cross-site scripting5.4v3.10.5%2023-08-09
CVE-2023-39005OPNsense incorrect permission assignment7.5v3.10.7%2023-08-09
CVE-2023-39004OPNsense configuration directory insecure permissions9.8v3.11.0%2023-08-09
CVE-2023-39003OPNsense incorrect permission assignment7.5v3.10.8%2023-08-09
CVE-2023-39002OPNsense act parameter of system_certmanager.php cross-site scripting6.1v3.11.2%2023-08-09Nuclei
CVE-2023-39001OPNsense component diag_backup.php command injection9.8v3.13.6%2023-08-09
CVE-2023-39000OPNsense component /ui/diagnostics/log/core/ reflected cross-site scripting6.1v3.10.6%2023-08-09
CVE-2023-38999OPNsense System Halt API cross-site request forgery6.5v3.10.4%2023-08-09
CVE-2023-38998OPNsense Login page open redirect6.1v3.10.6%2023-08-09
CVE-2023-38997OPNsense Captive portal templates path traversal7.2v3.11.4%2023-08-09
CVE-2023-38752JPCERT/CC Special Interest Group Network for Analysis and Liaison improper authorization4.3v3.10.5%2023-08-09Fix
CVE-2023-38751JPCERT/CC Special Interest Group Network for Analysis and Liaison improper authorization4.3v3.10.5%2023-08-09Fix
CVE-2023-38348Lw-systems Benno Mailarchiv cross-site request forgery8.8v3.10.3%2023-08-09Fix
CVE-2023-38347Lw-systems Benno Mailarchiv cross-site scripting6.1v3.10.4%2023-08-09Fix
CVE-2023-38213Adobe Dimension GLB File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-08-09Fix
CVE-2023-38212Adobe Dimension GLB File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-08-09Fix
CVE-2023-38211Adobe Dimension GLB File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-08-09Fix
CVE-2023-38209Adobe Commerce incorrect authorization security feature bypass6.5CNA v3.10.9%2023-08-09Fix
CVE-2023-38208Adobe Magento Open Source allows improper neutralization of Special Elements Used9.1CNA v3.12.5%2023-08-09Fix
CVE-2023-38207Adobe Commerce XML injection (aka blind XPath injection) arbitrary file system read7.5CNA v3.11.0%2023-08-09Fix
CVE-2023-37864Phoenix Contact: WP 6xxx Web panels prone to download code without integrity check7.2CNA v3.10.4%2023-08-09Fix
CVE-2023-37863Phoenix Contact: OS command injection in WP 6xxx Web panels7.2CNA v3.10.9%2023-08-09Fix
CVE-2023-37862Phoenix Contact: Missing authorization in WP 6xxx Web panels8.2CNA v3.10.5%2023-08-09Fix
CVE-2023-37861Phoenix Contact: OS command injection in WP 6xxx Web panels8.8CNA v3.10.9%2023-08-09Fix
CVE-2023-37860Phoenix Contact: Missing authorization in WP 6xxx Web panels7.5v3.10.8%2023-08-09Fix
CVE-2023-37859Phoenix Contact: Improper privilege management in WP 6xxx Web panels7.2v3.10.9%2023-08-09Fix
CVE-2023-37858Phoenix Contact: Use of hard-coded credentials in WP 6xxx Web panels4.9v3.10.5%2023-08-09Fix
CVE-2023-37857Phoenix Contact: Use of hard-coded credentials in WP 6xxx Web panels7.2v3.10.6%2023-08-09Fix
CVE-2023-37856Phoenix Contact: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3v3.10.6%2023-08-09Fix
CVE-2023-37855Phoenix Contact: Unauthorized read-access of root filesystem in WP 6xxx Web panels4.3CNA v3.10.6%2023-08-09Fix
CVE-2023-37068Sherlock Gym Management System SQL injection9.8v3.11.2%2023-08-09Exploit code
CVE-2023-36673AVIRA Phantom VPN cleartext transmission of sensitive information7.3v3.10.5%2023-08-09Fix
CVE-2023-36672Clario VPN cleartext transmission of sensitive information5.7v3.10.5%2023-08-09Fix
CVE-2023-36671Clario VPN cleartext transmission of sensitive information6.3v3.10.3%2023-08-09
CVE-2023-35838Wireguard externally controlled resource reference5.7v3.10.7%2023-08-09
CVE-2023-34545Cskaza CSZ CMS SQL injection9.8v3.10.8%2023-08-09
CVE-2023-33953Google denial of service in gRPC7.5CNA v3.10.5%2023-08-09Fix
CVE-2023-33934Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies9.1v3.11.6%2023-08-09Fix
CVE-2023-33469Kramerav Via Connect2 code injection7.8v3.10.3%2023-08-09KCV
CVE-2023-33468Kramerav Via Connect2 incorrect authorization9.1v3.10.8%2023-08-09KCV
CVE-2023-33242Lindell TSS Implementations Wallet injection8.1NVD v3.11.5%2023-08-09Exploit code
CVE-2023-33241GG TSS Implementations Wallet injection9.1v3.11.2%2023-08-09
CVE-2023-32782Paessler PRTG Network Monitor command injection7.2v3.156.2%2023-08-09Fix
CVE-2023-32781Paessler PRTG Network Monitor command injection7.2v3.114.3%2023-08-09MetasploitExploit codeFix
CVE-2023-31452Paessler PRTG Network Monitor cross-site request forgery8.8v3.10.7%2023-08-09Fix
CVE-2023-31450Paessler PRTG Network Monitor path traversal4.7v3.10.5%2023-08-09Fix
CVE-2023-31449Paessler PRTG Network Monitor path traversal4.7v3.10.5%2023-08-09Fix
CVE-2023-31448Paessler PRTG Network Monitor path traversal4.7v3.10.5%2023-08-09Fix
CVE-2023-26310Command injection in OPPO service7.4CNA v3.11.1%2023-08-09Fix
CVE-2023-24477Session fixation in Guardian/CMC5.4CNA v4.00.1%2023-08-09Fix
CVE-2023-24471Information disclosure via the debug function in assertions in Guardian/CMC7.1CNA v4.00.5%2023-08-09Fix
CVE-2023-24015Partial DoS on Reports section due to null report name in Guardian/CMC5.3CNA v4.00.5%2023-08-09Fix
CVE-2023-23903DoS via SAML configuration in Guardian/CMC6.9CNA v4.00.6%2023-08-09Fix
CVE-2023-23574Authenticated blind SQL injection on alerts count in Guardian/CMC8.7CNA v4.00.6%2023-08-09Fix
CVE-2023-23347HCL DRYiCE iAutomate weak cryptographic algorithm6.4CNA v3.10.1%2023-08-09Fix
CVE-2023-23346HCL DRYiCE MyCloud weak cryptographic algorithm6.4CNA v3.10.1%2023-08-09Fix
CVE-2023-22843Stored cross-site scripting (XSS) in Threat Intelligence rules in Guardian/CMC7.3CNA v4.00.3%2023-08-09Fix
CVE-2023-22378Authenticated blind SQL injection on sorting in Guardian/CMC8.7CNA v4.00.6%2023-08-09Fix
CVE-2023-4273Kernel: Exfat: Stack overflow in exfat_get_uniname_from_ext_entry6.7NVD v3.10.7%2023-08-09Fix
CVE-2023-4243FULL WordPress plugin arbitrary file upload8.8CNA v3.10.9%2023-08-09Fix
CVE-2023-4242FULL WordPress plugin information disclosure4.3CNA v3.10.5%2023-08-09Fix
CVE-2023-4239Real Estate Manager WordPress plugin arbitrary Usermeta update to authenticated privilege escalation6.5NVD v3.10.8%2023-08-09
CVE-2023-3953Schneider Electric GP-Pro EX WinGP for iPC memory corruption5.3CNA v3.10.2%2023-08-09Fix
CVE-2023-3632Hard-coded cryptographic key in Kunduz Homework Helper App9.8v3.10.8%2023-08-09Fix
CVE-2023-3518Consul JWT Auth in L7 Intentions allow for Mismatched Service Identity and JWT Providers7.4CNA v3.10.4%2023-08-09Fix
CVE-2023-2905Cesanta Mongoose MQTT Message Parsing heap overflow8.8v3.11.0%2023-08-09Fix
CVE-2023-40042TOTOLINK T10 V2 out-of-bounds write9.8v3.11.5%2023-08-08
CVE-2023-40041TOTOLINK T10 V2 out-of-bounds write9.8v3.11.0%2023-08-08
CVE-2023-39978ImageMagick memory leak3.3v3.10.4%2023-08-08Fix
CVE-2023-39976ClusterLabs Libqb buffer overflow9.8v3.11.2%2023-08-08Fix
CVE-2023-39951OpenTelemetry Java Instrumentation AWS SDK SES instrumentation information disclosure6.5CNA v3.10.8%2023-08-08Fix
CVE-2023-39549Siemens Solid Edge SE2023 use-after-free7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39533libp2p nodes vulnerable to attack using large RSA keys7.5CNA v3.11.5%2023-08-08Fix
CVE-2023-39532Agoric SES dynamic import and spread operator improper input validation9.8CNA v3.11.3%2023-08-08Fix
CVE-2023-39518social-media-skeleton stored cross-site scripting5.4CNA v3.10.5%2023-08-08Fix
CVE-2023-39440Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform4.4CNA v3.10.1%2023-08-08Fix
CVE-2023-39439SAP Commerce accepts empty passphrases8.8CNA v3.10.7%2023-08-08Fix
CVE-2023-39437Cross-site scripting (XSS) vulnerability in SAP Business One7.6CNA v3.10.4%2023-08-08Fix
CVE-2023-39436Information disclosure in SAP Supplier Relationship Management5.8CNA v3.10.4%2023-08-08Fix
CVE-2023-39419Siemens Solid Edge SE2023 out-of-bounds write7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39342Dangerzone CLI does not sanitize ANSI escape characters3.6CNA v3.10.3%2023-08-08Fix
CVE-2023-39269Siemens RUGGEDCOM i800 resource exhaustion7.5CNA v3.10.6%2023-08-08Fix
CVE-2023-39218Zoom Video Communications Zoom Clients client-side enforcement of server-side security6.1CNA v3.11.1%2023-08-08
CVE-2023-39217Zoom Video Communications Zoom SDK's improper input validation5.3CNA v3.11.6%2023-08-08
CVE-2023-39216Zoom Video Communications Zoom Desktop Client improper input validation9.6CNA v3.11.2%2023-08-08
CVE-2023-39214Zoom Video Communications Zoom SDK's information disclosure7.6CNA v3.11.0%2023-08-08
CVE-2023-39213Zoom Video Communications Zoom Desktop Client improper neutralization9.6CNA v3.11.4%2023-08-08
CVE-2023-39212Zoom Video Communications Zoom Rooms untrusted search path7.9CNA v3.10.2%2023-08-08
CVE-2023-39211Zoom Video Communications Zoom Desktop Client improper privilege management8.8CNA v3.10.2%2023-08-08
CVE-2023-39210Zoom Video Communications Zoom Client SDK cleartext storage of sensitive information5.5CNA v3.10.1%2023-08-08
CVE-2023-39209Zoom Video Communications Zoom Desktop Client improper input validation5.9CNA v3.11.0%2023-08-08
CVE-2023-39188Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39187Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39186Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39185Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39184Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39183Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39182Siemens Solid Edge SE2023 out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39181Siemens Solid Edge SE2023 out-of-bounds write7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-39086ASUS Rt-ac66u B1 cleartext transmission of sensitive information7.5v3.10.4%2023-08-08
CVE-2023-38773ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38771ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38770ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38769ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38768ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38767ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38766ChurchCRM cross-site scripting5.4v3.10.7%2023-08-08
CVE-2023-38765ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38764ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38763ChurchCRM SQL injection6.5v3.10.9%2023-08-08
CVE-2023-38762ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38761ChurchCRM cross-site scripting6.1v3.10.7%2023-08-08
CVE-2023-38760ChurchCRM SQL injection7.5v3.11.0%2023-08-08
CVE-2023-38759Wger Workout Manager cross-site request forgery8.8v3.10.4%2023-08-08
CVE-2023-38758Wger Workout Manager cross-site scripting5.4v3.10.6%2023-08-08
CVE-2023-38683Siemens JT2Go out-of-bounds write7.8CNA v3.10.3%2023-08-08Fix
CVE-2023-38682Siemens JT2Go out-of-bounds read7.8CNA v3.10.3%2023-08-08Fix
CVE-2023-38681Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-38680Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-38679Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-38641Siemens SICAM TOOLBOX II execution with unnecessary privileges7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-38532Siemens Parasolid resource exhaustion4.8CNA v4.00.2%2023-08-08Fix
CVE-2023-38531Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38530Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38529Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38528Siemens Parasolid out-of-bounds write7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38527Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38526Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38525Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2023-08-08Fix
CVE-2023-38524Siemens Parasolid null pointer dereference2.0CNA v4.00.2%2023-08-08Fix
CVE-2023-38384eaSYNC WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08Fix
CVE-2023-38254Microsoft Message Queuing (MSMQ) denial of service6.5CNA v3.11.6%2023-08-08Fix
CVE-2023-38188Microsoft Azure Apache Hadoop spoofing4.5CNA v3.11.0%2023-08-08Fix
CVE-2023-38186Microsoft Windows Mobile Device Management elevation of privilege8.8CNA v3.11.3%2023-08-08Fix
CVE-2023-38185Microsoft Exchange Server remote code execution8.8CNA v3.12.7%2023-08-08Fix
CVE-2023-38184Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution7.5CNA v3.11.5%2023-08-08Fix
CVE-2023-38182Microsoft Exchange Server remote code execution8.0CNA v3.15.9%2023-08-08Fix
CVE-2023-38181Microsoft Exchange Server spoofing8.8CNA v3.110.8%2023-08-08Fix
CVE-2023-38180Microsoft .NET Core and Visual Studio denial of service7.5CNA v3.114.0%2023-08-08KEVFix
CVE-2023-38178Microsoft .NET Core and Visual Studio denial of service7.5CNA v3.12.6%2023-08-08Fix
CVE-2023-38176Microsoft Azure Arc-Enabled Servers elevation of privilege7.0CNA v3.10.4%2023-08-08Fix
CVE-2023-38175Microsoft Windows Defender elevation of privilege7.8CNA v3.10.5%2023-08-08Fix
CVE-2023-38172Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.0%2023-08-08Fix
CVE-2023-38170Microsoft HEVC Video Extensions remote code execution7.8CNA v3.10.7%2023-08-08Fix
CVE-2023-38169Microsoft SQL OLE DB remote code execution8.8CNA v3.11.3%2023-08-08Fix
CVE-2023-38167Microsoft Dynamics 365 Business Central elevation of privilege7.2CNA v3.11.4%2023-08-08Fix
CVE-2023-38154Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.8%2023-08-08Fix
CVE-2023-37690PHPGurukul Maid Hiring Management System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37689PHPGurukul Maid Hiring Management System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37688PHPGurukul Maid Hiring Management System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37687PHPGurukul Online Nurse Hiring System SQL injection7.2v3.11.0%2023-08-08
CVE-2023-37686PHPGurukul Online Nurse Hiring System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37685PHPGurukul Online Nurse Hiring System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37684PHPGurukul Online Nurse Hiring System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37683PHPGurukul Online Nurse Hiring System cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-37682Judging Management System SQL injection9.8v3.10.7%2023-08-08
CVE-2023-37646Bitberry File Opener path traversal7.8v3.10.4%2023-08-08
CVE-2023-37570Insufficient session expiration vulnerability in Emagic DATA Center Management Suite8.8v3.10.7%2023-08-08Fix
CVE-2023-37569OS command injection vulnerability in Emagic DATA Center Management Suite8.8v3.133.9%2023-08-08Exploit codeFix
CVE-2023-37492Missing authorization check in SAP NetWeaver AS ABAP and ABAP Platform4.9CNA v3.10.5%2023-08-08Fix
CVE-2023-37491Improper authorization check vulnerability in SAP Message Server7.5CNA v3.10.5%2023-08-08Fix
CVE-2023-37490SAP BusinessObjects Business Intelligence installer uncontrolled search path7.6CNA v3.10.3%2023-08-08Fix
CVE-2023-37488Cross-site scripting (XSS) vulnerability in SAP NetWeaver Process Integration6.1CNA v3.10.4%2023-08-08Fix
CVE-2023-37487SAP Business One Service Layer information disclosure5.3CNA v3.10.5%2023-08-08Fix
CVE-2023-37486Information disclosure vulnerability in SAP Commerce (OCC API)5.9CNA v3.10.5%2023-08-08Fix
CVE-2023-37484Information disclosure vulnerabilities in SAP PowerDesigner5.3CNA v3.12.0%2023-08-08Fix
CVE-2023-37483Improper access control vulnerabilities in SAP PowerDesigner9.8CNA v3.14.8%2023-08-08Fix
CVE-2023-37373Siemens RUGGEDCOM CROSSBOW missing authentication5.3CNA v3.10.5%2023-08-08Fix
CVE-2023-37372Siemens RUGGEDCOM CROSSBOW SQL injection9.8CNA v3.10.9%2023-08-08Fix
CVE-2023-36926Information disclosure vulnerability in SAP Host Agent3.7CNA v3.10.5%2023-08-08Fix
CVE-2023-36923Code injection vulnerability in SAP PowerDesigner7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-36914Microsoft Windows Smart Card Resource Management Server security feature bypass5.5CNA v3.10.6%2023-08-08Fix
CVE-2023-36913Microsoft Message Queuing information disclosure6.5CNA v3.11.7%2023-08-08Fix
CVE-2023-36912Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.1%2023-08-08Fix
CVE-2023-36911Microsoft Message Queuing (MSMQ) remote code execution9.8CNA v3.11.7%2023-08-08Fix
CVE-2023-36910Microsoft Message Queuing (MSMQ) remote code execution9.8CNA v3.12.5%2023-08-08Fix
CVE-2023-36909Microsoft Message Queuing (MSMQ) denial of service6.5CNA v3.12.1%2023-08-08Fix
CVE-2023-36908Microsoft Windows Hyper-V information disclosure6.5CNA v3.11.0%2023-08-08Fix
CVE-2023-36907Microsoft Windows Cryptographic services information disclosure5.5CNA v3.11.7%2023-08-08Fix
CVE-2023-36906Microsoft Windows Cryptographic services information disclosure5.5CNA v3.12.0%2023-08-08Fix
CVE-2023-36905Microsoft Windows Wireless Wide Area Network Service (WwanSvc) information disclosure5.5CNA v3.11.7%2023-08-08Fix
CVE-2023-36904Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.6%2023-08-08Fix
CVE-2023-36903Microsoft Windows System Assessment tool elevation of privilege7.8CNA v3.11.6%2023-08-08Fix
CVE-2023-36900Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.110.6%2023-08-08Exploit codeFix
CVE-2023-36899Microsoft .NET Framework ASP.NET elevation of privilege8.8CNA v3.176.7%2023-08-08Reported exploitedExploit codeFix
CVE-2023-36898Microsoft Tablet Windows User interface Application Core remote code execution7.8CNA v3.10.7%2023-08-08Fix
CVE-2023-36897Visual Studio tools for Office Runtime spoofing8.1CNA v3.11.7%2023-08-08Fix
CVE-2023-36896Microsoft Excel remote code execution7.8CNA v3.11.0%2023-08-08Fix
CVE-2023-36895Microsoft Outlook remote code execution7.8CNA v3.11.0%2023-08-08Fix
CVE-2023-36894Microsoft SharePoint server information disclosure6.5CNA v3.12.1%2023-08-08Fix
CVE-2023-36893Microsoft Outlook spoofing6.5CNA v3.12.2%2023-08-08Fix
CVE-2023-36892Microsoft SharePoint server spoofing8.0CNA v3.12.0%2023-08-08Fix
CVE-2023-36891Microsoft SharePoint server spoofing8.0CNA v3.12.0%2023-08-08Fix
CVE-2023-36890Microsoft SharePoint server information disclosure6.5CNA v3.11.9%2023-08-08Fix
CVE-2023-36889Microsoft Windows Group Policy security feature bypass5.5CNA v3.10.6%2023-08-08Fix
CVE-2023-36882Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.11.4%2023-08-08Fix
CVE-2023-36881Microsoft Azure Apache Ambari spoofing4.5CNA v3.11.0%2023-08-08Fix
CVE-2023-36877Microsoft Azure Apache Oozie spoofing4.5CNA v3.11.0%2023-08-08Fix
CVE-2023-36876Microsoft Windows Reliability Analysis Metrics Calculation (RacTask) elevation of privilege7.1CNA v3.10.5%2023-08-08Fix
CVE-2023-36873NET Framework spoofing7.4CNA v3.11.5%2023-08-08Fix
CVE-2023-36869Microsoft Azure DevOps Server spoofing6.3CNA v3.10.7%2023-08-08Fix
CVE-2023-36866Microsoft Office Visio remote code execution7.8CNA v3.10.8%2023-08-08Fix
CVE-2023-36865Microsoft Office Visio remote code execution7.8CNA v3.10.8%2023-08-08Fix
CVE-2023-36692WP-Cirrus WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-36541Zoom Video Communications Zoom Desktop Client insufficient verification of data authenticity8.0CNA v3.10.5%2023-08-08
CVE-2023-36540Zoom Video Communications Zoom Desktop Client installer untrusted search path7.3CNA v3.10.3%2023-08-08
CVE-2023-36535Zoom Video Communications Zoom Clients client-side enforcement of server-side security7.1CNA v3.11.2%2023-08-08
CVE-2023-36534Zoom Video Communications Zoom Desktop Client path traversal9.3CNA v3.11.6%2023-08-08
CVE-2023-36533Zoom Video Communications Zoom SDK's resource exhaustion7.1CNA v3.10.8%2023-08-08
CVE-2023-36532Zoom Video Communications Zoom Clients buffer overflow5.9CNA v3.11.5%2023-08-08
CVE-2023-36482Samsung S3NRN4V buffer overflow4.3v3.10.3%2023-08-08Fix
CVE-2023-36344Diebold Nixdorf Vynamic View uncontrolled search path7.8v3.10.4%2023-08-08Fix
CVE-2023-36306Adiscon Loganalyzer Adiscon Aiscon cross-site scripting6.1v3.15.4%2023-08-08NucleiExploit code
CVE-2023-36136PHP Jabbers Class Scheduling System cleartext storage of sensitive information6.5v3.10.3%2023-08-08
CVE-2023-35394Microsoft Azure HDInsight Jupyter Notebook spoofing4.6CNA v3.11.0%2023-08-08Fix
CVE-2023-35393Microsoft Azure Apache Hive spoofing4.5CNA v3.11.4%2023-08-08Fix
CVE-2023-35391ASP.NET Core SignalR and Visual Studio information disclosure6.2CNA v3.11.9%2023-08-08Fix
CVE-2023-35390Microsoft .NET and Visual Studio remote code execution7.8CNA v3.12.1%2023-08-08Fix
CVE-2023-35389Microsoft Dynamics 365 On-Premises remote code execution6.5CNA v3.10.8%2023-08-08Fix
CVE-2023-35388Microsoft Exchange Server remote code execution8.0CNA v3.16.8%2023-08-08Fix
CVE-2023-35387Microsoft Windows Bluetooth A2DP driver elevation of privilege8.8CNA v3.11.1%2023-08-08Fix
CVE-2023-35386Microsoft Windows Kernel elevation of privilege7.8CNA v3.15.5%2023-08-08Fix
CVE-2023-35385Microsoft Message Queuing (MSMQ) remote code execution9.8CNA v3.12.5%2023-08-08Fix
CVE-2023-35384Microsoft Windows HTML Platforms security feature bypass5.4CNA v3.11.6%2023-08-08Fix
CVE-2023-35383Microsoft Message Queuing information disclosure7.5CNA v3.13.0%2023-08-08Fix
CVE-2023-35382Microsoft Windows Kernel elevation of privilege7.8CNA v3.15.6%2023-08-08Fix
CVE-2023-35381Microsoft Windows Fax service remote code execution8.8CNA v3.11.9%2023-08-08Fix
CVE-2023-35380Microsoft Windows Kernel elevation of privilege7.8CNA v3.13.5%2023-08-08Fix
CVE-2023-35379Microsoft Windows Reliability Analysis Metrics Calculation Engine (RACEng) elevation of privilege7.8CNA v3.10.6%2023-08-08Fix
CVE-2023-35378Microsoft Windows Projected File System elevation of privilege7.0CNA v3.10.4%2023-08-08Fix
CVE-2023-35377Microsoft Message Queuing (MSMQ) denial of service6.5CNA v3.12.2%2023-08-08Fix
CVE-2023-35376Microsoft Message Queuing (MSMQ) denial of service6.5CNA v3.12.2%2023-08-08Fix
CVE-2023-35372Microsoft Office Visio remote code execution7.8CNA v3.11.0%2023-08-08Fix
CVE-2023-35371Microsoft Office remote code execution7.8CNA v3.11.0%2023-08-08Fix
CVE-2023-35368Microsoft Exchange remote code execution8.8CNA v3.12.5%2023-08-08Fix
CVE-2023-35359Microsoft Windows Kernel elevation of privilege7.8CNA v3.19.9%2023-08-08Fix
CVE-2023-33993SQL injection vulnerability in SAP Business One B1i Layer7.1CNA v3.10.6%2023-08-08Fix
CVE-2023-33756Foswiki path traversal7.5v3.11.1%2023-08-08
CVE-2023-32503GTmetrix for WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08Fix
CVE-2023-32292Chat Button WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-31221PDQ CSV WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-30796Siemens JT Open out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-30795Siemens JT Open out-of-bounds read7.8CNA v3.10.2%2023-08-08Fix
CVE-2023-30482WPBulky WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-08Fix
CVE-2023-29330Microsoft Teams remote code execution8.8CNA v3.12.0%2023-08-08Fix
CVE-2023-29328Microsoft Teams remote code execution8.8CNA v3.12.2%2023-08-08Fix
CVE-2023-29099Divi WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-08-08Fix
CVE-2023-28934WP Full Stripe Free WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-28931Post Connector WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-28830Siemens JT2Go use-after-free7.8CNA v3.10.3%2023-08-08Fix
CVE-2023-28773Secondary Title WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-08Fix
CVE-2023-28577Qualcomm Snapdragon Multiple Dmabuf Kernel Address UAF6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-28576Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera Kernel driver6.4CNA v3.10.1%2023-08-08Fix
CVE-2023-28575Qualcomm Snapdragon multiple type confusion6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-28561Qualcomm Snapdragon buffer copy without checking size of input in QESL9.8CNA v3.10.4%2023-08-08Fix
CVE-2023-28555Qualcomm Snapdragon buffer over-read in Audio7.5CNA v3.10.4%2023-08-08Fix
CVE-2023-28537Qualcomm Snapdragon integer overflow or wraparound in Audio8.4CNA v3.10.1%2023-08-08Fix
CVE-2023-27627Woocommerce Email Report WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08
CVE-2023-27422NS Coupon to Become Customer WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-27421Everest News WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08
CVE-2023-27416Decon WP SMS WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-27415LetterPress WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-27412Mocho Blog WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08
CVE-2023-27411Siemens RUGGEDCOM CROSSBOW SQL injection8.8CNA v3.10.8%2023-08-08Fix
CVE-2023-26961Alteryx Server cross-site scripting4.8v3.10.5%2023-08-08
CVE-2023-25984Dovetail WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-25459Post Snippets WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-25063Quick Page/Post Redirect WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08Fix
CVE-2023-24845Siemens RUGGEDCOM i800 incorrect behavior9.1CNA v3.10.7%2023-08-08Fix
CVE-2023-24698Foswiki path traversal7.5v3.10.8%2023-08-08Fix
CVE-2023-24413wordpress vertical image slider plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-08Fix
CVE-2023-24409WP Responsive Tabs horizontal vertical and accordion Tabs WordPress plugin cross-site scripting6.1NVD v3.10.4%2023-08-08Fix
CVE-2023-23880ExactMetrics WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-08Fix
CVE-2023-23877Pinterest RSS Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-08
CVE-2023-23829Owl Carousel WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-08
CVE-2023-22666Qualcomm Snapdragon integer overflow or wraparound in Audio8.4CNA v3.10.1%2023-08-08Fix
CVE-2023-21709Microsoft Exchange Server elevation of privilege9.8CNA v3.12.0%2023-08-08Fix
CVE-2023-21652Qualcomm Snapdragon Key Management Errors in HLOS7.7CNA v3.10.1%2023-08-08Fix
CVE-2023-21651Qualcomm Snapdragon incorrect type conversion or cast in Core9.3CNA v3.10.1%2023-08-08Fix
CVE-2023-21650Qualcomm Snapdragon improper validation of array index in GPS HLOS driver6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-21649Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in WLAN6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-21648Qualcomm Snapdragon integer overflow to buffer overflow in RIL6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-21647Qualcomm Snapdragon improper input validation in Bluetooth host6.5CNA v3.10.4%2023-08-08Fix
CVE-2023-21643Qualcomm Snapdragon untrusted pointer dereference in Automotive9.1CNA v3.10.2%2023-08-08Fix
CVE-2023-21627Qualcomm Snapdragon incorrect type conversion or cast in Trusted Execution Environment6.7CNA v3.10.1%2023-08-08Fix
CVE-2023-21626Qualcomm Snapdragon improper authentication in HLOS7.1CNA v3.10.1%2023-08-08Fix
CVE-2023-21625Qualcomm Snapdragon buffer over-read in Network services8.2CNA v3.10.4%2023-08-08Fix
CVE-2023-20589AMD Ryzen™ 3000 Series Desktop Processors fTPM Voltage Fault injection6.8v3.10.6%2023-08-08Fix
CVE-2023-20588AMD processors divide-by-zero5.5v3.111.3%2023-08-08Fix
CVE-2023-20586AMD Radeon Software Crimson ReLive Edition privilege escalation9.8v3.11.0%2023-08-08Fix
CVE-2023-20569AMD Ryzen™ 3000 Series Desktop Processors observable discrepancy4.7v3.17.3%2023-08-08Fix
CVE-2023-20562AMD μProf IOCTL handler vulnerability7.8v3.11.0%2023-08-08Exploit codeFix
CVE-2023-20561AMD μProf IOCTL handler vulnerability5.5v3.10.3%2023-08-08Fix
CVE-2023-20556AMD μProf IOCTL handler vulnerability5.5v3.10.3%2023-08-08Fix
CVE-2023-20555AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 improper input validation7.8v3.10.3%2023-08-08Fix
CVE-2023-4219SourceCodester Doctors Appointment System login.php SQL injection7.5v3.10.8%2023-08-08
CVE-2023-4203Advantech EKI-1524 stored cross-site scripting5.4NVD v3.11.1%2023-08-08Fix
CVE-2023-4202Advantech EKI-1524 stored cross-site scripting5.4NVD v3.11.0%2023-08-08Fix
CVE-2023-4009Privilege escalation for Project Owner and Project User Admin Roles in Ops Manager7.2CNA v3.10.8%2023-08-08Fix
CVE-2023-3898SQLi in mAyaNets E-commerce Software9.8CNA v3.10.6%2023-08-08Fix
CVE-2023-3894DOS in jackson-dataformats-text7.5NVD v3.10.9%2023-08-08Fix
CVE-2023-3717SQLi in Farmakoms Remote Administration Console9.8CNA v3.10.6%2023-08-08Fix
CVE-2023-3716SQLi in Oduyo Online Collection Software9.8CNA v3.10.6%2023-08-08Fix
CVE-2023-3653Stored XSS in Digital Ant E-Commerce Software5.4v3.10.5%2023-08-08Fix
CVE-2023-3652Reflected XSS in Digital Ant E-Commerce Software6.1CNA v3.10.5%2023-08-08Fix
CVE-2023-3651SQLi in Digital Ant E-Commerce Software9.8v3.10.7%2023-08-08Fix
CVE-2023-3573Phoenix Contact: Command injection in WP 6xxx Web panels8.8v3.11.2%2023-08-08Fix
CVE-2023-3572Phoenix Contact: OS command injection in WP 6xxx Web panels9.9NVD v3.11.0%2023-08-08Fix
CVE-2023-3571Phoenix Contact: OS command injection in WP 6xxx Web panels8.8v3.10.6%2023-08-08Fix
CVE-2023-3570Phoenix Contact: OS command injection in WP 6xxx Web panels8.8v3.10.9%2023-08-08Fix
CVE-2023-3569Phoenix Contact CLOUD CLIENT 1101T-TX/TX XML entity expansion4.9CNA v3.11.4%2023-08-08Fix
CVE-2023-3526Phoenix Contact CLOUD CLIENT 1101T-TX/TX cross-site scripting9.6CNA v3.11.8%2023-08-08Fix
CVE-2023-3522SQLi in a2 License Portal System9.8CNA v3.10.6%2023-08-08Fix
CVE-2023-3386SQLi in a2 Camera Trap Tracking System9.8CNA v3.10.6%2023-08-08Fix
CVE-2023-2423Rockwell Automation Armor PowerFlex vulnerable to denial of service8.6CNA v3.11.2%2023-08-08Fix
CVE-2023-39903Fujitsu Software Infrastructure Manager cleartext storage of sensitive information5.0v3.10.1%2023-08-07Fix
CVE-2023-39550NETGEAR JWNR2000v2 buffer overflow8.8v3.11.1%2023-08-07Fix
CVE-2023-39530PrestaShop vulnerable to file deletion via CustomerMessage6.5CNA v3.10.9%2023-08-07Fix
CVE-2023-39529PrestaShop vulnerable to file deletion via attachment API6.7CNA v3.10.7%2023-08-07Fix
CVE-2023-39528PrestaShop vulnerable to file reading through path traversal6.8CNA v3.10.8%2023-08-07Fix
CVE-2023-39527PrestaShop XSS vulnerability through Validate::isCleanHTML method8.3CNA v3.10.5%2023-08-07Fix
CVE-2023-39526PrestaShop PrestaShopSQL manager vulnerability (potential RCE)9.1CNA v3.11.7%2023-08-07Fix
CVE-2023-39525PrestaShop vulnerable to path traversal6.5CNA v3.10.9%2023-08-07Fix
CVE-2023-39524PrestaShop vulnerable to boolean SQL injection in search product in BO6.7CNA v3.10.7%2023-08-07Fix
CVE-2023-39523ScanCode.io command injection in docker image fetch process6.8CNA v3.12.9%2023-08-07Fix
CVE-2023-39520Cryptomator vulnerable to local elevation of privileges5.5CNA v3.10.3%2023-08-07Fix
CVE-2023-39363Vyper incorrectly allocated named re-entrancy locks9.1CNA v4.00.8%2023-08-07Fix
CVE-2023-39349Sentry vulnerable to privilege escalation via ApiTokensEndpoint8.1CNA v3.11.1%2023-08-07Fix
CVE-2023-38940Tenda FH1203 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38939Tenda FH1202 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38938Tenda FH1202 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38937Tenda AC1206 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38936Tenda AC1206 out-of-bounds write9.8v3.10.9%2023-08-07
CVE-2023-38935Tenda AC1206 out-of-bounds write9.8v3.10.9%2023-08-07
CVE-2023-38934Tenda FH1203 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38933Tenda FH1203 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38932Tenda FH1202 out-of-bounds write9.8v3.11.0%2023-08-07
CVE-2023-38931Tenda AC1206 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38930Tenda FH1205 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38929Tenda 4G300 out-of-bounds write9.8v3.10.8%2023-08-07
CVE-2023-38928NETGEAR R7100LG command injection9.8v3.11.5%2023-08-07Fix
CVE-2023-38926NETGEAR EX6200 buffer overflow8.8v3.11.0%2023-08-07Fix
CVE-2023-38925NETGEAR R6300V2 buffer overflow8.8v3.115.2%2023-08-07Emerging ThreatsFix
CVE-2023-38924NETGEAR DGN3500 buffer overflow6.5v3.10.7%2023-08-07Fix
CVE-2023-38922NETGEAR JWNR2000v2 buffer overflow8.8v3.10.8%2023-08-07Fix
CVE-2023-38921NETGEAR WAG302V2 command injection8.8v3.11.6%2023-08-07Fix
CVE-2023-38704import-in-the-middle allows unsanitized user controlled input in module generation8.1CNA v3.11.0%2023-08-07Fix
CVE-2023-38591NETGEAR DG834Gv5 buffer overflow8.8v3.11.0%2023-08-07Fix
CVE-2023-38412NETGEAR R6900P buffer overflow8.8v3.11.0%2023-08-07Fix
CVE-2023-38392Custom Field Template WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-07Fix
CVE-2023-38157Microsoft Edge (Chromium-based) security feature bypass6.5CNA v3.12.5%2023-08-07Fix
CVE-2023-38045Extension Admiror-design-studio.com XSS in Admiror Gallery component for Joomla6.1NVD v3.10.4%2023-08-07
CVE-2023-38044Extension Hikashop.com SQLi in HikaShop component for Joomla9.8NVD v3.10.6%2023-08-07Fix
CVE-2023-36499NETGEAR XR300 buffer overflow8.8v3.11.0%2023-08-07Fix
CVE-2023-36220Textpattern path traversal7.2v3.13.4%2023-08-07Fix
CVE-2023-36054MIT Kerberos 5 uninitialized pointer access6.5v3.12.8%2023-08-07Fix
CVE-2023-34477Extension BrainCert.com SQLi in Virtual Classroom component for Joomla9.8NVD v3.10.6%2023-08-07
CVE-2023-34476Extension Mooj.org SQLi in Proforms Basic component for Joomla9.8NVD v3.10.6%2023-08-07
CVE-2023-33913UNISOC chipsets DRM/oemcrypto out-of-bounds write7.2v3.10.5%2023-08-07Fix
CVE-2023-33912UNISOC chipsets Contacts service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33911UNISOC chipsets vowifi service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33910UNISOC chipsets Contacts service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33909UNISOC chipsets Contacts service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33908UNISOC chipsets ims service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33907UNISOC chipsets Contacts service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-33906UNISOC chipsets Contacts service missing authorization5.5v3.10.1%2023-08-07Fix
CVE-2023-32783Zoho ManageEngine ADAudit Plus incorrect authorization7.5v3.13.9%2023-08-07
CVE-2023-32090Pegasystems Pega Platform default password9.8CNA v3.10.6%2023-08-07Fix
CVE-2023-27373InsydeH2O improper input validation5.5v3.10.2%2023-08-07Fix
CVE-2023-23758Extension creative-solutions.net SQLi in Creative Gallery component for Joomla9.8NVD v3.10.6%2023-08-07
CVE-2023-23757Extension Bestaddon.com SQLi in BA Gallery component for Joomla9.8NVD v3.10.6%2023-08-07
CVE-2023-20818MediaTek chipsets improper input validation in wlan service4.4v3.10.1%2023-08-07Fix
CVE-2023-20817MediaTek chipsets improper input validation in wlan service6.7v3.10.1%2023-08-07Fix
CVE-2023-20816MediaTek chipsets improper input validation in wlan service6.7v3.10.1%2023-08-07Fix
CVE-2023-20815MediaTek chipsets improper input validation in wlan service6.7v3.10.1%2023-08-07Fix
CVE-2023-20814MediaTek chipsets improper input validation in wlan service6.7v3.10.1%2023-08-07Fix
CVE-2023-20813MediaTek chipsets improper input validation in wlan service4.4v3.10.1%2023-08-07Fix
CVE-2023-20812MediaTek chipsets improper input validation in wlan driver4.4v3.10.1%2023-08-07Fix
CVE-2023-20811MediaTek chipsets out-of-bounds write in IOMMU6.7v3.10.1%2023-08-07Fix
CVE-2023-20810MediaTek chipsets improper input validation in IOMMU4.4v3.10.1%2023-08-07Fix
CVE-2023-20809MediaTek chipsets out-of-bounds write in vdec6.7v3.10.1%2023-08-07Fix
CVE-2023-20808MediaTek chipsets out-of-bounds write in OPTEE6.7v3.10.1%2023-08-07Fix
CVE-2023-20807MediaTek chipsets improper input validation in dpe6.7v3.10.1%2023-08-07Fix
CVE-2023-20806MediaTek chipsets write-what-where condition in hcp6.7v3.10.1%2023-08-07Fix
CVE-2023-20805MediaTek chipsets out-of-bounds write in imgsys6.7v3.10.1%2023-08-07Fix
CVE-2023-20804MediaTek chipsets out-of-bounds write in imgsys6.7v3.10.1%2023-08-07Fix
CVE-2023-20803MediaTek chipsets improper input validation in imgsys6.5v3.10.1%2023-08-07Fix
CVE-2023-20802MediaTek chipsets improper input validation in imgsys6.5v3.10.1%2023-08-07Fix
CVE-2023-20801MediaTek chipsets improper input validation in imgsys6.4v3.10.1%2023-08-07Fix
CVE-2023-20800MediaTek chipsets improper input validation in imgsys6.5v3.10.1%2023-08-07Fix
CVE-2023-20798MediaTek chipsets out-of-bounds read in pda4.4v3.10.1%2023-08-07Fix
CVE-2023-20797MediaTek chipsets out-of-bounds write in camera middleware6.7v3.10.1%2023-08-07Fix
CVE-2023-20796MediaTek chipsets improper input validation in power4.4v3.10.1%2023-08-07Fix
CVE-2023-20795MediaTek chipsets improper input validation in ril6.7v3.10.1%2023-08-07Fix
CVE-2023-20793MediaTek chipsets improper input validation in apu4.4v3.10.1%2023-08-07Fix
CVE-2023-20790MediaTek chipsets improper input validation in nvram4.4v3.10.1%2023-08-07Fix
CVE-2023-20789MediaTek chipsets improper input validation in jpeg4.4v3.10.1%2023-08-07Fix
CVE-2023-20788MediaTek chipsets time-of-check time-of-use (toctou) race condition in thermal6.4v3.10.1%2023-08-07Fix
CVE-2023-20787MediaTek chipsets time-of-check time-of-use (toctou) race condition in thermal6.4v3.10.1%2023-08-07Fix
CVE-2023-20786MediaTek chipsets improper input validation in gps6.7v3.10.1%2023-08-07Fix
CVE-2023-20785MediaTek chipsets time-of-check time-of-use (toctou) race condition in audio6.4v3.10.1%2023-08-07Fix
CVE-2023-20784MediaTek chipsets improper input validation in keyinstall6.7v3.10.1%2023-08-07Fix
CVE-2023-20783MediaTek chipsets improper input validation in keyinstall6.7v3.10.1%2023-08-07Fix
CVE-2023-20782MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-08-07Fix
CVE-2023-20781MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-08-07Fix
CVE-2023-20780MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-08-07Fix
CVE-2023-4201SourceCodester Inventory Management System ex_catagory_data.php SQL injection9.8v3.10.7%2023-08-07
CVE-2023-4200SourceCodester Inventory Management System product_data.php. SQL injection9.8v3.10.7%2023-08-07
CVE-2023-4199SourceCodester Inventory Management System catagory_data.php SQL injection7.5v3.10.6%2023-08-07
CVE-2023-4194Kernel: Tap: Tap_open: Correctly initialize socket uid next fix of i_uid to current_fsuid5.5NVD v3.10.3%2023-08-07Fix
CVE-2023-4193SourceCodester Resort Reservation System view_fee.php SQL injection9.8v3.10.7%2023-08-07
CVE-2023-4192SourceCodester Resort Reservation System manage_user.php SQL injection9.8v3.10.7%2023-08-07
CVE-2023-4147Linux kernel A use-after-free7.8NVD v3.10.6%2023-08-07Exploit codeFix
CVE-2023-4012Incomplete Internal State Distinction in NTPsec7.5CNA v3.10.5%2023-08-07Fix
CVE-2023-3896A divide by zero issue existed in Vim of OpenCloudOS Stream7.8v3.10.4%2023-08-07Fix
CVE-2023-3671MultiParcels Shipping For WooCommerce WordPress plugin reflected XSS6.1NVD v3.10.5%2023-08-07Fix
CVE-2023-3650Bubble Menu WordPress plugin Admin+ stored XSS4.8NVD v3.10.7%2023-08-07Fix
CVE-2023-3575Quiz And Survey Master WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-08-07Fix
CVE-2023-3524WPCode WordPress plugin reflected XSS6.1NVD v3.10.5%2023-08-07Fix
CVE-2023-3492WP Shopping Pages WordPress plugin stored XSS via CSRF6.8NVD v3.10.4%2023-08-07
CVE-2023-3365MultiParcels Shipping For WooCommerce WordPress plugin Subscriber+ arbitrary Shipment deletion8.1NVD v3.10.7%2023-08-07Fix
CVE-2023-2843MultiParcels Shipping For WooCommerce WordPress plugin Subscribers+ SQLi8.8NVD v3.10.9%2023-08-07Fix
CVE-2023-0604WP Food Manager WordPress plugin Admin+ stored XSS5.4NVD v3.10.5%2023-08-07Fix
CVE-2023-0426ABB Freelance controllers AC 700F stack overflow in filename or in boundary8.6CNA v3.10.5%2023-08-07Fix
CVE-2023-0425ABB Freelance controllers AC 700F buffer overflow in global memory region8.6CNA v3.10.5%2023-08-07Fix
CVE-2023-37581Apache Roller Weblog Category name improper input validation5.4v3.11.2%2023-08-06Fix
CVE-2023-32600Rank Math SEO WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-08-06Fix
CVE-2023-4196Cross-site scripting (XSS) Stored in cockpit-hq/cockpit5.4NVD v3.10.5%2023-08-06Fix
CVE-2023-4195PHP remote file inclusion in cockpit-hq/cockpit8.8NVD v3.11.1%2023-08-06Fix
CVE-2023-4191SourceCodester Resort Reservation System index.php file inclusion9.8v3.10.9%2023-08-06
CVE-2023-4190Insufficient session expiration in Admidio/Admidio6.5v3.10.6%2023-08-06Fix
CVE-2023-4186SourceCodester Pharmacy Management System manage_website.php unrestricted upload9.8v3.11.0%2023-08-06
CVE-2023-4185SourceCodester Online Hospital Management System patientlogin.php SQL injection9.8v3.10.7%2023-08-06
CVE-2023-4184SourceCodester Inventory Management System sell_return.php SQL injection9.8v3.10.6%2023-08-06
CVE-2023-4183SourceCodester Inventory Management System Password edit_update.php access control9.8v3.10.5%2023-08-06
CVE-2023-4182SourceCodester Inventory Management System edit_sell.php SQL injection9.8v3.10.6%2023-08-06
CVE-2023-4181SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow9.8v3.11.1%2023-08-06
CVE-2023-4180SourceCodester Free Hospital Management System for Small Practices login.php SQL injection9.8v3.10.9%2023-08-06
CVE-2023-4179SourceCodester Free Hospital Management System for Small Practices SQL injection9.8v3.10.8%2023-08-06
CVE-2023-4177EmpowerID Multi-Factor Authentication Code information disclosure5.7v3.10.2%2023-08-06
CVE-2023-4176SourceCodester Hospital Management System appointmentapproval.php SQL injection9.8v3.10.8%2023-08-06
CVE-2023-4175mooSocial mooTravel cross-site scripting6.1v3.10.4%2023-08-06
CVE-2023-4174mooSocial mooStore cross-site scripting6.1v3.19.1%2023-08-06NucleiExploit code
CVE-2023-4173mooSocial mooStore index cross-site scripting6.1v3.15.6%2023-08-06NucleiExploit code
CVE-2023-39508Apache Airflow: Airflow Run task feature allows execution with unnecessary priviledges8.8v3.12.6%2023-08-05Fix
CVE-2023-38943Shuize 0x727 code injection8.8v3.11.8%2023-08-05
CVE-2023-37874HTTP Headers WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-05Fix
CVE-2023-37873WooCommerce Ship to Multiple Addresses WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-05Fix
CVE-2023-36689WPFactory Helper WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-05Fix
CVE-2023-36686CartFlows Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-05Fix
CVE-2023-36678WP Content Copy Protection and No Right Click WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-05Fix
CVE-2023-36095langchain code injection9.8v3.11.2%2023-08-05Fix
CVE-2023-34377My Content Management WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-08-05Fix
CVE-2023-34010Media Library Assistant WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-08-05Fix
CVE-2023-33367ASSA ABLOY Control ID Idsecure SQL injection9.8v3.11.1%2023-08-05
CVE-2023-30491CodeBard's Patron Button and Widgets for Patreon WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-08-05Fix
CVE-2023-4189Cross-site scripting (XSS) Reflected in instantsoft/icms24.8v3.10.5%2023-08-05Fix
CVE-2023-4188SQL injection in instantsoft/icms29.1v3.10.9%2023-08-05Fix
CVE-2023-4187Cross-site scripting (XSS) Stored in instantsoft/icms24.8v3.10.5%2023-08-05Fix
CVE-2023-4172Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx absolute path traversal7.5v3.10.9%2023-08-05
CVE-2023-4171Chengdu Flash Flood Disaster Monitoring and Warning System FileDownload.ashx path traversal5.3v3.11.1%2023-08-05
CVE-2023-4170DedeBIZ Article cross-site scripting4.8v3.10.6%2023-08-05
CVE-2023-4169Ruijie RG-EW1200G Administrator Password set_passwd access control8.8v3.148.9%2023-08-05NucleiExploit codeKCV
CVE-2023-4168Templatecookie Adlisting Redirect ad-list information disclosure7.5v3.146.0%2023-08-05NucleiExploit code
CVE-2023-4167Media Browser Emby Server cross-site scripting6.1v3.10.6%2023-08-05
CVE-2023-4166Tongda OA delete_log.php SQL injection9.8v3.112.2%2023-08-05Exploit code
CVE-2023-4165Tongda OA delete_seal.php SQL injection9.8v3.112.2%2023-08-05Exploit code
CVE-2023-39551PHPGurukul Online Security Guards Hiring System SQL injection9.8v3.11.4%2023-08-04
CVE-2023-39379Fujitsu Software Infrastructure Manager Advanced Edition cleartext storage of sensitive information7.5v3.10.4%2023-08-04Fix
CVE-2023-39346Bjrjk/LinuxASMCallGraph before commit 20dba06 allows attackers to cause a RCE on the server side8.8CNA v3.11.1%2023-08-04Fix
CVE-2023-39344social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE10.0CNA v3.11.5%2023-08-04
CVE-2023-39343Sulu observable response discrepancy on Admin Login4.3CNA v3.10.6%2023-08-04Fix
CVE-2023-39143PaperCut MF path traversal9.8v3.180.3%2023-08-04NucleiEmerging ThreatsExploit codeFix
CVE-2023-39112ShopEx ECShop improper authentication6.5v3.10.7%2023-08-04
CVE-2023-39107NoMachine An arbitrary file write9.1v3.11.2%2023-08-04Fix
CVE-2023-38991Jeesite incorrect permission assignment5.4v3.10.5%2023-08-04
CVE-2023-38964Creativeitem Academy LMS cross-site scripting6.1v3.11.1%2023-08-04Nuclei
CVE-2023-38941Ehco1996 django-sspanel command injection9.8v3.11.6%2023-08-04
CVE-2023-38708Pimcore path traversal vulnerability in AssetController:importServerFilesAction6.3CNA v3.10.6%2023-08-04Fix
CVE-2023-38702Knowage Server vulnerable to path traversal via upload functionality10.0CNA v3.11.2%2023-08-04Fix
CVE-2023-38700Matrix.org matrix-appservice-irc bridged room event cache information disclosure3.5CNA v3.10.6%2023-08-04Fix
CVE-2023-38699MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue9.1CNA v3.10.3%2023-08-04Fix
CVE-2023-38698ensdomains ens-contracts .eth registrar controller can shorten the duration of registered names4.9CNA v3.10.8%2023-08-04Fix
CVE-2023-38697protocol-http1 HTTP Request/Response Smuggling vulnerability5.8CNA v3.10.8%2023-08-04Fix
CVE-2023-38695cypress-image-snapshot vulnerable to insecure snapshot file names6.5CNA v3.11.0%2023-08-04Fix
CVE-2023-38692FIT2CLOUD CloudExplorer Lite module installation OS command injection9.8CNA v3.13.4%2023-08-04Fix
CVE-2023-38691Matrix.org matrix-appservice-bridge OpenID token exchange improper authentication5.0CNA v3.10.5%2023-08-04Fix
CVE-2023-38690matrix-appservice-irc IRC command injection via admin commands containing newlines5.8CNA v3.10.9%2023-08-04Fix
CVE-2023-38689RS485 LogisticsPipes deserialization of untrusted data in network IO8.1CNA v3.11.5%2023-08-04Fix
CVE-2023-38688Xithrius twitch-tui Twitch IRC connection missing encryption7.5CNA v3.10.5%2023-08-04Fix
CVE-2023-38686Sydent does not verify email server certificates9.3CNA v3.10.3%2023-08-04Fix
CVE-2023-38497Cargo not respecting umask when extracting crate archives7.8CNA v3.10.7%2023-08-04Exploit codeFix
CVE-2023-38494The cloud version of the MeterSphere interface leaks some sensitive data without authentication5.9CNA v3.10.5%2023-08-04Fix
CVE-2023-38487HedgeDoc API allows to hide existing notes6.5CNA v3.10.8%2023-08-04Fix
CVE-2023-38332Zoho ManageEngine ADManager Plus information disclosure6.5v3.13.7%2023-08-04Fix
CVE-2023-37896Nuclei path traversal7.5CNA v3.11.0%2023-08-04Fix
CVE-2023-37470Metabase vulnerable to remote code execution via POST /API/setup/validate API endpoint10.0CNA v3.11.3%2023-08-04Fix
CVE-2023-36480Aerospike Java Client vulnerable to unsafe deserialization of server responses9.8CNA v3.11.8%2023-08-04Fix
CVE-2023-36159oretnom23 Lost and Found Information System sourcecodester cross-site scripting6.1v3.10.6%2023-08-04Exploit code
CVE-2023-36158oretnom23 Toll Tax Management System sourcecodester cross-site scripting6.1NVD v3.10.8%2023-08-04
CVE-2023-36141PHP Jabbers Cleaning Business Software missing brute-force protection5.3v3.10.6%2023-08-04
CVE-2023-36139PHP Jabbers Cleaning Business Software insufficient verification of data authenticity9.8v3.10.5%2023-08-04
CVE-2023-36138PHP Jabbers Cleaning Business Software cross-site scripting6.1v3.10.4%2023-08-04
CVE-2023-36137PHP Jabbers Class Scheduling System cross-site scripting6.1v3.10.4%2023-08-04
CVE-2023-36135PHP Jabbers Class Scheduling System missing brute-force protection7.5v3.10.6%2023-08-04
CVE-2023-36134PHP Jabbers Class Scheduling System insufficient verification of data authenticity9.8v3.10.6%2023-08-04
CVE-2023-36133PHP Jabbers Availability Booking Calendar account takeover9.8v3.10.9%2023-08-04
CVE-2023-36132PHP Jabbers Availability Booking Calendar improper access control9.8v3.10.9%2023-08-04
CVE-2023-36131PHP Jabbers Availability Booking Calendar improper input validation9.8v3.10.9%2023-08-04
CVE-2023-34038VMware Horizon Server information disclosure5.3CNA v3.10.5%2023-08-04Fix
CVE-2023-34037VMware Horizon Server HTTP request smuggling5.3CNA v3.10.5%2023-08-04Fix
CVE-2023-33665Ai-dev Ai-table SQL injection9.8v3.10.6%2023-08-04Fix
CVE-2023-33379Connected IO ER2000T-VZ-CAT1 MQTT broker vulnerability9.8v3.10.7%2023-08-04
CVE-2023-33378Connected IO argument injection9.8v3.10.8%2023-08-04
CVE-2023-33377Connected IO OS command injection9.8v3.11.5%2023-08-04
CVE-2023-33376Connected IO argument injection9.8v3.10.8%2023-08-04
CVE-2023-33375Connected IO out-of-bounds write9.8v3.10.8%2023-08-04
CVE-2023-33374Connected IO OS command injection9.8v3.11.3%2023-08-04
CVE-2023-33373Connected IO cleartext storage of sensitive information9.8v3.10.4%2023-08-04
CVE-2023-33372Connected IO hard-coded credentials9.8v3.10.8%2023-08-04
CVE-2023-30297N-able N-central arbitrary code execution7.0v3.10.2%2023-08-04
CVE-2023-30146Assmann Ht-ip211hdp cleartext storage of sensitive information7.5v3.10.7%2023-08-04Exploit code
CVE-2023-29689PyroCMS remote code execution9.8NVD v3.153.5%2023-08-04Exploit codeFix
CVE-2023-29505Zoho ManageEngine Network Configuration Manager origin validation error8.8v3.11.1%2023-08-04Fix
CVE-2023-4159Unrestricted upload of file with dangerous type in omeka/omeka-s8.8NVD v3.11.0%2023-08-04Fix
CVE-2023-4158Cross-site scripting (XSS) Stored in omeka/omeka-s5.4v3.10.5%2023-08-04Fix
CVE-2023-4157omeka/omeka-s improper input validation4.8v3.10.5%2023-08-04Fix
CVE-2023-4142WP Ultimate CSV Importer WordPress plugin authenticated (Author+) remote code execution8.8v3.11.6%2023-08-04Fix
CVE-2023-4141WP Ultimate CSV Importer WordPress plugin PHP file creation to remote code execution8.8v3.11.6%2023-08-04Fix
CVE-2023-4140WP Ultimate CSV Importer WordPress plugin privilege escalation8.8v3.10.8%2023-08-04Fix
CVE-2023-4139WP Ultimate CSV Importer WordPress plugin sensitive information exposure via directory listing7.5CNA v3.10.7%2023-08-04Fix
CVE-2023-4135qemu-kvm out-of-bounds read information disclosure6.5NVD v3.10.4%2023-08-04Fix
CVE-2023-4002Insertion of sensitive information into sent data in GitLab5.3CNA v3.10.6%2023-08-04Fix
CVE-2023-3373Mitsubishi Electric GOT2000 Series GT21 model session hijacking5.9CNA v3.11.0%2023-08-04Fix
CVE-2023-0525Mitsubishi Electric GOT2000 Series GT27 model Mitsubishi Electric Corporation weak password encoding7.5CNA v3.10.7%2023-08-04Fix
CVE-2023-0264Keycloak vulnerable to user impersonation via stolen UUID code5.0v3.11.3%2023-08-04Exploit codeFix
CVE-2023-39144Element55 Knowmore cleartext storage of sensitive information7.5NVD v3.10.5%2023-08-03
CVE-2023-39121emlog admin/user.php SQL injection7.2v3.12.5%2023-08-03Nuclei
CVE-2023-39097Webboss.io Cms cross-site scripting5.4v3.10.3%2023-08-03
CVE-2023-39096Webboss.io Cms cross-site scripting5.4v3.10.3%2023-08-03
CVE-2023-39075Renault Zoe Ev 2021 crash4.6v3.10.5%2023-08-03
CVE-2023-38958ZKTeco Bioaccess Ivs improper access control5.3v3.10.4%2023-08-03
CVE-2023-38956ZKTeco Bioaccess Ivs path traversal7.5v3.10.7%2023-08-03
CVE-2023-38955ZKTeco Bioaccess Ivs information disclosure7.5v3.10.6%2023-08-03
CVE-2023-38954ZKTeco Bioaccess Ivs SQL injection9.8v3.10.6%2023-08-03
CVE-2023-38952ZKTeco BioTime files accessible to external parties7.5v3.12.7%2023-08-03Nuclei
CVE-2023-38951ZKTeco BioTime path traversal9.8v3.13.2%2023-08-03
CVE-2023-38950ZKTeco BioTime path traversal7.5v3.192.5%2023-08-03KEVNucleiFix
CVE-2023-38949ZKTeco BioTime administrator password reset API vulnerability7.5v3.10.4%2023-08-03
CVE-2023-38948jizhiCMS arbitrary file read7.2v3.11.0%2023-08-03
CVE-2023-38947WBCE_CMS /languages/install.php component arbitrary file upload7.2v3.10.5%2023-08-03
CVE-2023-38942Dango-translator command injection9.8v3.12.0%2023-08-03
CVE-2023-38748OMRON CX-Programmer use-after-free7.8v3.10.2%2023-08-03Fix
CVE-2023-38747OMRON CX-Programmer heap-based buffer overflow7.8v3.10.2%2023-08-03Fix
CVE-2023-38746OMRON CX-Programmer out-of-bounds read7.8v3.10.2%2023-08-03Fix
CVE-2023-38744OMRON CJ2M CPU Unit improper quantity validation7.5v3.10.9%2023-08-03Fix
CVE-2023-37679Nextgen Mirth Connect remote command execution9.8v3.199.2%2023-08-03Reported exploitedNucleiMetasploitExploit code
CVE-2023-37559CODESYS improper validation of Consistency within Input in multiple products6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37558CODESYS improper validation of Consistency within Input in multiple products6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37557CODESYS heap-based buffer overflow in multiple products6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37556CODESYS improper input validation in CmpAppBP6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37555CODESYS improper input validation in CmpAppBP6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37554CODESYS improper input validation in CmpAppBP6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37553CODESYS improper input validation in CmpAppBP6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37552CODESYS improper input validation in CmpAppBP6.5v3.10.6%2023-08-03Fix
CVE-2023-37551CODESYS files or directories accessible to external parties in CmpApp6.5v3.10.5%2023-08-03Fix
CVE-2023-37550CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37549CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37548CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37547CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37546CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37545CODESYS: Improper input validation in CmpApp component6.5CNA v3.10.6%2023-08-03Fix
CVE-2023-37501A persistent cross-site scripting (XSS) vulnerability affects HCL Unica Campaign8.1CNA v3.10.4%2023-08-03Fix
CVE-2023-37500A persistent cross-site scripting (XSS) vulnerability affects HCL Unica Platform8.1CNA v3.10.4%2023-08-03Fix
CVE-2023-37499A persistent cross-site scripting (XSS) vulnerability affects HCL Unica Platform8.1CNA v3.10.4%2023-08-03Fix
CVE-2023-37498HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation8.1CNA v3.10.6%2023-08-03Fix
CVE-2023-37497An XML external entity (XXE) injection vulnerability affects HCL Unica Platform8.1CNA v3.10.5%2023-08-03Fix
CVE-2023-37364Ws-inc J Wbem XML external entity injection9.1v3.10.6%2023-08-03Fix
CVE-2023-36299Typecho A file upload8.8v3.11.8%2023-08-03Fix
CVE-2023-36298DedeCMS unrestricted file upload8.8v3.11.5%2023-08-03
CVE-2023-36255Eramba code injection8.8v3.152.8%2023-08-03MetasploitExploit code
CVE-2023-36217Xoops cross-site scripting9.0v3.11.6%2023-08-03Fix
CVE-2023-36213Motocms SQL injection9.8v3.11.4%2023-08-03
CVE-2023-36212Total Cms file upload8.8v3.125.8%2023-08-03
CVE-2023-36082Gatesair Flexiva Fax 150W insufficiently protected credentials9.8v3.11.0%2023-08-03
CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) path traversal7.2v3.163.6%2023-08-03KEVKCVFix
CVE-2023-34196Keyfactor EJBCA improper authentication8.2v3.10.4%2023-08-03Fix
CVE-2023-33666Ai-dev Aioptimizedcombinations SQL injection9.8v3.10.6%2023-08-03Fix
CVE-2023-33371ASSA ABLOY Control ID Idsecure hard-coded credentials9.8v3.10.9%2023-08-03Fix
CVE-2023-33370ASSA ABLOY Control ID Idsecure An improper error handling7.5v3.10.6%2023-08-03Fix
CVE-2023-33369ASSA ABLOY Control ID Idsecure path traversal9.1v3.10.7%2023-08-03Fix
CVE-2023-33368ASSA ABLOY Control ID Idsecure resource exposure6.5v3.10.5%2023-08-03Fix
CVE-2023-33366supremainc BioStar 2 Suprema BioStar SQL injection8.8v3.10.6%2023-08-03Fix
CVE-2023-33365supremainc BioStar 2 Suprema BioStar path traversal7.5v3.10.7%2023-08-03Fix
CVE-2023-33364supremainc BioStar 2 Suprema BioStar OS command injection8.8v3.11.6%2023-08-03Fix
CVE-2023-33363supremainc BioStar 2 Suprema BioStar authentication bypass7.5v3.10.6%2023-08-03Fix
CVE-2023-32764Fabasoft Cloud Enterprise Client privilege escalation7.8v3.10.2%2023-08-03Fix
CVE-2023-30958Palantir com.palantir.foundry:foundry-frontend DOM XSS in Developer mode dashboard4.7CNA v3.10.4%2023-08-03Fix
CVE-2023-30952Foundry Issues reporterPath phishing by parameter injection5.0CNA v3.10.4%2023-08-03Fix
CVE-2023-30951Palantir com.palantir.magritte:magritte-rest-source-bundle XML external entity injection6.3CNA v3.10.5%2023-08-03Fix
CVE-2023-30950Palantir Foundry Campaigns REST endpoint information disclosure6.5CNA v3.10.4%2023-08-03Fix
CVE-2023-28468Insyde Kernel incorrect authorization6.5v3.10.2%2023-08-03Fix
CVE-2023-26979Bluetensq improper message integrity enforcement3.1v3.10.2%2023-08-03
CVE-2023-25600Insydecrpkg out-of-bounds read7.1v3.10.2%2023-08-03Fix
CVE-2023-25524NVIDIA Omniverse Workstation Launcher sensitive query strings4.0CNA v3.10.4%2023-08-03Fix
CVE-2023-22317OMRON CX-Programmer use-after-free7.8v3.10.2%2023-08-03Fix
CVE-2023-22314OMRON CX-Programmer use-after-free7.8v3.10.2%2023-08-03Fix
CVE-2023-22277OMRON CX-Programmer use-after-free7.8v3.10.2%2023-08-03Fix
CVE-2023-21412Non-sanitized user input could lead to SQL injections in Axis License Plate Verifier7.2CNA v3.10.6%2023-08-03Fix
CVE-2023-21411Axis Communications License Plate Verifier Access Control configuration OS command injection7.2CNA v3.10.8%2023-08-03Fix
CVE-2023-21410Non-sanitized user input could lead to arbitrary code execution in Axis License Plate Verifier7.2CNA v3.10.8%2023-08-03Fix
CVE-2023-21409Axis Communications License Plate Verifier information disclosure8.4CNA v3.10.6%2023-08-03Fix
CVE-2023-21408Axis Communications License Plate Verifier third-party integration interface information disclosure8.4CNA v3.10.6%2023-08-03Fix
CVE-2023-21407Privilege escalation in Axis License Plate Verifier ACAP8.8CNA v3.10.7%2023-08-03Fix
CVE-2023-20218Cisco Small Business IP Phones cross-site scripting5.8CNA v3.10.5%2023-08-03Fix
CVE-2023-20216Cisco BroadWorks improper privilege management4.4CNA v3.10.2%2023-08-03Fix
CVE-2023-20215Cisco Secure Web Appliance information disclosure through data queries5.8CNA v3.10.6%2023-08-03Fix
CVE-2023-20214Cisco SD-WAN vManage improper authentication9.1CNA v3.10.9%2023-08-03Fix
CVE-2023-20204Cisco BroadWorks cross-site scripting5.4CNA v3.10.4%2023-08-03Fix
CVE-2023-20181Cisco Small Business IP Phones cross-site scripting6.1CNA v3.10.5%2023-08-03Fix
CVE-2023-4145Cross-site scripting (XSS) Stored in pimcore/customer-data-framework5.4v3.10.6%2023-08-03Fix
CVE-2023-4138Allocation of resources without limits or throttling in ikus060/rdiffweb6.5v3.10.4%2023-08-03Fix
CVE-2023-4136CrafterCMS improper neutralization of input during web page generation in Crafter Engine6.1NVD v3.11.4%2023-08-03NucleiFix
CVE-2023-4133Linux kernel cxgb4 driver use-after-free5.5NVD v3.10.2%2023-08-03Fix
CVE-2023-4132Linux kernel smsusb driver use-after-free5.5NVD v3.10.3%2023-08-03Fix
CVE-2023-4127Race condition within a Thread in answerdev/Answer5.9v3.10.5%2023-08-03Fix
CVE-2023-4126Insufficient session expiration in answerdev/Answer8.8v3.10.6%2023-08-03Fix
CVE-2023-4125Weak password requirements in answerdev/Answer8.8v3.10.9%2023-08-03Fix