CVE-2023 records published in August 2023

Page three of three: records 2,001 to 2,165 of the 2,165 published in August 2023, newest first. The first page carries the figures for August 2023.

CVE-2023 records published in August 2023, newest first: records 2,001 to 2,165 of 2,165
CVE Summary CVSS EPSS Published Signals
CVE-2023-4124Missing authorization in answerdev/Answer6.5NVD v3.10.7%2023-08-03Fix
CVE-2023-4121Byzoro Smart S85F Management Platform unrestricted upload9.8v3.12.5%2023-08-03
CVE-2023-4120Byzoro Smart S85F Management Platform importhtml.php command injection9.8v3.162.3%2023-08-03
CVE-2023-4119Academy LMS courses cross-site scripting6.1v3.13.8%2023-08-03Exploit code
CVE-2023-4118Cute Http File Server Search cross-site scripting6.1v3.10.5%2023-08-03
CVE-2023-4117PHP Jabbers Rental Property Booking index.php cross-site scripting6.1v3.13.1%2023-08-03Exploit code
CVE-2023-4116PHP Jabbers Taxi Booking index.php cross-site scripting6.1v3.18.4%2023-08-03NucleiExploit code
CVE-2023-4115PHP Jabbers Cleaning Business index.php cross-site scripting6.1v3.18.4%2023-08-03NucleiEmerging ThreatsExploit code
CVE-2023-4114PHP Jabbers Night Club Booking Software index.php cross-site scripting6.1v3.18.3%2023-08-03NucleiExploit code
CVE-2023-4113PHP Jabbers Service Booking Script index.php cross-site scripting6.1v3.18.4%2023-08-03NucleiExploit code
CVE-2023-4112PHP Jabbers Shuttle Booking Software index.php cross-site scripting6.1v3.18.4%2023-08-03NucleiExploit code
CVE-2023-4111PHP Jabbers Bus Reservation System index.php cross-site scripting6.1v3.12.5%2023-08-03Nuclei
CVE-2023-4110PHP Jabbers Availability Booking Calendar index.php cross-site scripting6.1v3.11.8%2023-08-03Nuclei
CVE-2023-4078Google Chrome extensions inappropriate implementation8.8v3.10.9%2023-08-03Fix
CVE-2023-4077Google Chrome extensions improper input validation8.8v3.10.9%2023-08-03Fix
CVE-2023-4076Google Chrome WebRTC use-after-free8.8v3.10.9%2023-08-03Fix
CVE-2023-4075Google Chrome Cast use-after-free8.8v3.11.2%2023-08-03Fix
CVE-2023-4074Google Chrome Blink Task Scheduling use-after-free8.8v3.11.1%2023-08-03Fix
CVE-2023-4073Google Chrome ANGLE out-of-bounds access8.8v3.11.2%2023-08-03Fix
CVE-2023-4072Google Chrome WebGL out-of-bounds read8.8v3.11.2%2023-08-03Fix
CVE-2023-4071Google Chrome Visuals heap-based buffer overflow8.8v3.11.3%2023-08-03Fix
CVE-2023-4070Google Chrome V8 type confusion8.1v3.11.4%2023-08-03Fix
CVE-2023-4069Google Chrome V8 type confusion8.8v3.124.1%2023-08-03Fix
CVE-2023-4068Google Chrome V8 type confusion8.1v3.115.5%2023-08-03Fix
CVE-2023-4008Incorrect Ownership Assignment in GitLab5.3CNA v3.10.7%2023-08-03Fix
CVE-2023-3932Incorrect user management in GitLab5.3CNA v3.10.9%2023-08-03Fix
CVE-2023-3766Cloudflare odoh-rs Invalid Slice Split results in server panic5.9CNA v3.10.8%2023-08-03Fix
CVE-2023-3749Johnson Controls VideoEdge configuration file vulnerability7.1CNA v3.10.1%2023-08-03Fix
CVE-2023-3669CODESYS: Missing brute-force protection in CODESYS Development System3.3CNA v3.10.1%2023-08-03Fix
CVE-2023-3663CODESYS: Missing integrity check in CODESYS Development System8.8CNA v3.11.0%2023-08-03Fix
CVE-2023-3662CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries7.3CNA v3.10.2%2023-08-03Fix
CVE-2023-3348Directory traversal vulnerability in Cloudflare Wrangler5.7CNA v3.10.8%2023-08-03Fix
CVE-2023-3346Denial of service (DoS) and remote code execution vulnerability in MITSUBISHI CNC Series9.8CNA v3.12.1%2023-08-03Fix
CVE-2023-3180QEMU heap buffer overflow in virtio_crypto_sym_op_helper6.5NVD v3.10.2%2023-08-03Fix
CVE-2023-2754Plaintext transmission of DNS requests in Windows WARP client7.4CNA v3.10.9%2023-08-03Fix
CVE-2023-0956TEL-STER TelWin SCADA WebInterface path traversal7.5v3.11.0%2023-08-03Fix
CVE-2023-39114ngiflib SDLaffgif utility vulnerability5.5v3.10.3%2023-08-02
CVE-2023-39113ngiflib gif2tga utility vulnerability5.5v3.10.3%2023-08-02
CVE-2023-38990An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.4.3v3.10.6%2023-08-02
CVE-2023-38556SEIKO EPSON printer Web Config improper input validation7.5v3.10.9%2023-08-02Fix
CVE-2023-38423F5 BIG-IP undisclosed page of the cross-site scripting5.4CNA v3.10.3%2023-08-02Fix
CVE-2023-38419F5 BIG-IP and BIG-IQ iControl SOAP vulnerability4.3CNA v3.10.5%2023-08-02Fix
CVE-2023-38418F5 BIG-IP Edge Client macOS installer improper signature verification7.8CNA v3.10.1%2023-08-02Fix
CVE-2023-38330OXID-eSales eShop unrestricted file upload5.3v3.10.4%2023-08-02Fix
CVE-2023-38138F5 BIG-IP undisclosed page of the reflected cross-site scripting7.5CNA v3.10.4%2023-08-02Fix
CVE-2023-36858BIG-IP Edge Client for Windows and macOS vulnerability7.1CNA v3.10.1%2023-08-02Fix
CVE-2023-36494F5OS-A audit logging information disclosure4.4CNA v3.10.2%2023-08-02Fix
CVE-2023-36121e107 cross-site scripting5.4v3.11.2%2023-08-02
CVE-2023-36081Gatesair Flexiva Fax 150W cross-site scripting5.4v3.10.6%2023-08-02
CVE-2023-33383Shelly Pro 4PM out-of-bounds read5.3v3.14.7%2023-08-02Exploit code
CVE-2023-33257Verint Engagement Management cross-site scripting5.4v3.10.4%2023-08-02
CVE-2023-31928XSS vulnerability in Brocade Webtools6.3CNA v3.10.5%2023-08-02Fix
CVE-2023-31927An information disclosure in the web interface of Brocade Fabric OS5.3CNA v3.10.6%2023-08-02Fix
CVE-2023-31926Brocade Fabric OS arbitrary file overwrite using less command7.1CNA v3.10.2%2023-08-02Fix
CVE-2023-31432Brocade Fabric OS privilege escalation7.8CNA v3.10.2%2023-08-02Fix
CVE-2023-31431Brocade Fabric OS A buffer overflow vulnerability in diagstatus command5.5CNA v3.10.3%2023-08-02Fix
CVE-2023-31430Brocade Fabric OS buffer overflow vulnerability in secpolicydelete command5.5CNA v3.10.3%2023-08-02Fix
CVE-2023-31428Brocade Fabric OS CLI allows upload or transfer files of dangerous types5.5CNA v3.10.2%2023-08-02Fix
CVE-2023-29409Large RSA keys can cause high CPU usage in crypto/tls5.3v3.11.6%2023-08-02Exploit codeFix
CVE-2023-29408Excessive resource consumption in golang.org/x/Image/tiff6.5v3.10.9%2023-08-02Fix
CVE-2023-29407Excessive CPU consumption when decoding 0-height images in golang.org/x/Image/tiff6.5v3.10.9%2023-08-02Fix
CVE-2023-26451OX App Suite insufficient randomness7.5CNA v3.11.2%2023-08-02Fix
CVE-2023-26450OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26449OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26448OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26447OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26446OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26445OX App Suite cross-site scripting5.4CNA v3.10.7%2023-08-02Fix
CVE-2023-26443OX App Suite SQL injection5.5CNA v3.10.8%2023-08-02Fix
CVE-2023-26442OX App Suite server-side request forgery3.2CNA v3.10.4%2023-08-02Fix
CVE-2023-26441OX App Suite information disclosure5.7CNA v3.10.4%2023-08-02Fix
CVE-2023-26440OX App Suite SQL injection7.1CNA v3.10.4%2023-08-02Fix
CVE-2023-26439OX App Suite SQL injection7.6CNA v3.10.4%2023-08-02Fix
CVE-2023-26438OX App Suite server-side request forgery4.3CNA v3.10.6%2023-08-02Fix
CVE-2023-26430OX App Suite command injection3.5CNA v3.10.8%2023-08-02Fix
CVE-2023-26317Xiaomi Router external request interface has command injection7.0CNA v3.11.1%2023-08-02Fix
CVE-2023-26316Xiaomi cloud service Application cross-site scripting6.1v3.10.4%2023-08-02Fix
CVE-2023-23476IBM Robotic Process Automation information disclosure3.1CNA v3.10.5%2023-08-02Fix
CVE-2023-4067Bus Ticket Booking with Seat Reservation WordPress plugin reflected cross-site scripting6.1v3.10.4%2023-08-02Fix
CVE-2023-4016Linux Kernal heap-based buffer overflow3.3NVD v3.10.3%2023-08-02Fix
CVE-2023-4011Allocation of resources without limits or throttling in GitLab4.3CNA v3.10.8%2023-08-02Fix
CVE-2023-3994Inefficient regular expression complexity in GitLab7.5CNA v3.11.0%2023-08-02Fix
CVE-2023-3993Insertion of sensitive information into log file in GitLab4.9CNA v3.10.7%2023-08-02Fix
CVE-2023-3978Improper rendering of text nodes in golang.org/x/net/html6.1v3.10.9%2023-08-02Fix
CVE-2023-3900Improper validation of specified type of input in GitLab4.3CNA v3.10.9%2023-08-02Fix
CVE-2023-3500Improper neutralization of input during web page generation (cross-site scripting) in GitLab4.8CNA v3.10.5%2023-08-02Fix
CVE-2023-3470BIG-IP FIPS HSM password vulnerability6.0CNA v3.10.2%2023-08-02Fix
CVE-2023-3426Liferay Portal and Liferay DXP Organization Selector Does not Check User Permissions4.3CNA v3.10.6%2023-08-02Fix
CVE-2023-3401Improper control of generation of code (code injection) in GitLab4.8CNA v3.10.6%2023-08-02Fix
CVE-2023-3385Improper limitation of a pathname to a restricted directory (path traversal) in GitLab6.3CNA v3.10.9%2023-08-02Fix
CVE-2023-3364Inefficient regular expression complexity in GitLab7.5CNA v3.144.5%2023-08-02Fix
CVE-2023-3329iniNet SCADA WebServer HMI file upload feature path traversal6.5v3.11.0%2023-08-02Fix
CVE-2023-2022Missing authorization in GitLab4.3CNA v3.10.5%2023-08-02Fix
CVE-2023-1935Emerson Electric DL8000 improper authentication9.4v3.10.7%2023-08-02Fix
CVE-2023-1437Advantech WebAccess/SCADA RPC interface untrusted pointer dereference9.8v3.12.8%2023-08-02Fix
CVE-2023-1210Generation of error message containing sensitive information in GitLab3.1CNA v3.10.6%2023-08-02Fix
CVE-2023-0632Inefficient regular expression complexity in GitLab6.5CNA v3.10.9%2023-08-02Fix
CVE-2023-39147Webkul Uvdesk An arbitrary file upload7.8v3.11.2%2023-08-01Exploit code
CVE-2023-39110rConfig server-side request forgery8.8v3.13.7%2023-08-01Nuclei
CVE-2023-39109rConfig server-side request forgery8.8v3.13.4%2023-08-01Nuclei
CVE-2023-39108rConfig server-side request forgery8.8v3.13.4%2023-08-01Nuclei
CVE-2023-38560Ghostscript: Integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name5.5NVD v3.10.3%2023-08-01Fix
CVE-2023-38559Ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS5.5NVD v3.10.4%2023-08-01Fix
CVE-2023-38357Rws Worldserver insufficient entropy5.3v3.15.3%2023-08-01Exploit code
CVE-2023-37772PHPGurukul Online Shopping Portal SQL injection8.8v3.11.1%2023-08-01Exploit code
CVE-2023-37496HCL Verse is susceptible to a stored cross-site scripting (XSS)8.3CNA v3.10.4%2023-08-01Fix
CVE-2023-37478pnpm incorrectly parses tar archives relative to specification7.5CNA v3.11.2%2023-08-01Exploit codeFix
CVE-2023-36984Lavalite information disclosure7.5v3.10.7%2023-08-01Fix
CVE-2023-36983Lavalite information disclosure7.5v3.10.7%2023-08-01Fix
CVE-2023-36351Viatomtech Vihealth arbitrary code execution7.8v3.10.9%2023-08-01
CVE-2023-36211Cubiclesoft Barebones Cms cross-site scripting5.4v3.10.5%2023-08-01
CVE-2023-36210Motocms server-side template injection9.8v3.130.9%2023-08-01
CVE-2023-36118Faculty Evaluation System cross-site scripting5.4v3.10.7%2023-08-01
CVE-2023-34960Chamilo wsConvertPpt component command injection9.8v3.199.2%2023-08-01NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-34869PHP Jabbers Catering System cross-site scripting6.1v3.10.4%2023-08-01
CVE-2023-34634Getgreenshot greenshot arbitrary code execution7.8v3.17.7%2023-08-01Exploit code
CVE-2023-34552EZVIZ Cs-cv310-a0-3c2wfrl-1080p Firmware stack-based buffer overflow8.8v3.10.4%2023-08-01Fix
CVE-2023-34551EZVIZ Cs-cv310-a0-3c2wfrl-1080p Firmware out-of-bounds write8.0v3.10.5%2023-08-01Fix
CVE-2023-33564PHP Jabbers Time Slots Booking Calendar cross-site scripting6.1v3.10.5%2023-08-01
CVE-2023-33563PHP Jabbers Time Slots Booking Calendar improper authentication8.8v3.10.8%2023-08-01
CVE-2023-33562PHP Jabbers Time Slots Booking Calendar missing brute-force protection9.8v3.10.8%2023-08-01
CVE-2023-33561PHP Jabbers Time Slots Booking Calendar improper input validation9.8v3.11.0%2023-08-01
CVE-2023-33560PHP Jabbers Time Slots Booking Calendar cross-site scripting6.1v3.10.5%2023-08-01
CVE-2023-33493Ajaxmanager unrestricted file upload9.8v3.10.9%2023-08-01Fix
CVE-2023-31710TP-Link Archer AX21 out-of-bounds write9.8v3.10.7%2023-08-01
CVE-2023-31429Brocade Fabric OS multiple commands print sensitive information in the terminal5.5CNA v3.10.2%2023-08-01Fix
CVE-2023-31427Brocade Fabric OS knowledge of full path name7.8CNA v3.10.2%2023-08-01Fix
CVE-2023-31426Brocade Fabric OS scp, sftp, ftp servers passwords in supportsave6.8CNA v3.10.7%2023-08-01Fix
CVE-2023-31425Brocade Fabric OS privilege escalation via the fosexec command7.8CNA v3.10.3%2023-08-01Fix
CVE-2023-26139underscore-keypath vulnerable to prototype pollution7.5v3.10.9%2023-08-01
CVE-2023-23548Checkmk XSS in business intelligence6.1v3.10.4%2023-08-01Fix
CVE-2023-20583Software based Power side channel on AMD CPUs4.7v3.10.2%2023-08-01Fix
CVE-2023-4058Mozilla Firefox memory safety bugs9.8v3.10.8%2023-08-01Fix
CVE-2023-4057Mozilla Firefox memory safety bugs9.8v3.10.9%2023-08-01Fix
CVE-2023-4056Mozilla Firefox memory safety bugs9.8v3.10.9%2023-08-01Fix
CVE-2023-4055Mozilla Firefox buffer overflow7.5v3.10.7%2023-08-01Fix
CVE-2023-4054Mozilla Firefox and Thunderbird appref-ms file handling vulnerability5.5v3.10.2%2023-08-01Fix
CVE-2023-4053Mozilla Firefox full screen notification obscured by external program6.5v3.10.8%2023-08-01Fix
CVE-2023-4052Mozilla Firefox link following6.5v3.10.7%2023-08-01Fix
CVE-2023-4051Mozilla Firefox full screen notification obscured by file open dialog7.5v3.10.7%2023-08-01Fix
CVE-2023-4050Mozilla Firefox out-of-bounds write7.5v3.112.5%2023-08-01Fix
CVE-2023-4049Mozilla Firefox race condition5.9v3.10.6%2023-08-01Fix
CVE-2023-4048Mozilla Firefox out-of-bounds read7.5v3.10.9%2023-08-01Fix
CVE-2023-4047Mozilla Firefox cross-site request forgery8.8v3.10.6%2023-08-01Fix
CVE-2023-4046Mozilla Firefox resource exhaustion5.3v3.11.1%2023-08-01Fix
CVE-2023-4045Mozilla Firefox origin validation error5.3v3.10.6%2023-08-01Fix
CVE-2023-4033OS command injection in MLflow/MLflow7.8v3.11.3%2023-08-01Fix
CVE-2023-3740Google Chrome Themes vulnerability4.3v3.10.6%2023-08-01Fix
CVE-2023-3739Google Chrome command injection6.3v3.10.4%2023-08-01Fix
CVE-2023-3738Google Chrome Autofill inappropriate implementation4.3v3.10.5%2023-08-01Fix
CVE-2023-3737Google Chrome Notifications inappropriate implementation4.3v3.10.6%2023-08-01Fix
CVE-2023-3736Google Chrome Custom Tabs inappropriate implementation4.3v3.10.6%2023-08-01Fix
CVE-2023-3735Google Chrome Web API Permission Prompts inappropriate implementation4.3v3.10.6%2023-08-01Fix
CVE-2023-3734Google Chrome Picture In Picture inappropriate implementation4.3v3.10.6%2023-08-01Fix
CVE-2023-3733Google Chrome WebApp Installs inappropriate implementation4.3v3.10.6%2023-08-01Fix
CVE-2023-3732Google Chrome Mojo out-of-bounds access8.8v3.11.0%2023-08-01Fix
CVE-2023-3731Google Chrome Diagnostics use-after-free8.8v3.10.4%2023-08-01Fix
CVE-2023-3730Google Chrome Tab Groups use-after-free8.8v3.10.7%2023-08-01Fix
CVE-2023-3729Google Chrome Splitscreen use-after-free8.8v3.10.4%2023-08-01Fix
CVE-2023-3728Google Chrome WebRTC use-after-free8.8v3.10.7%2023-08-01Fix
CVE-2023-3727Google Chrome WebRTC use-after-free8.8v3.10.7%2023-08-01Fix
CVE-2023-3718HPE Aruba CX Switches authenticated command injection vulnerability in AOS-CX Command Line interface8.8CNA v3.11.6%2023-08-01Fix
CVE-2023-3494FreeBSD bhyve privileged guest escape via fwctl8.8v3.10.2%2023-08-01Fix
CVE-2023-3107FreeBSD remote denial of service in IPv6 fragment reassembly7.5v3.10.6%2023-08-01Fix
CVE-2023-2164Improper neutralization of input during web page generation (cross-site scripting) in GitLab5.4CNA v3.166.3%2023-08-01Fix