CVEs published August 5, 2023
26 CVEs were published on August 5, 2023: 1 critical, 5 high.
- Published
- 26
- Critical
- 1
- High
- 5
- Medium
- 12
- Low
- 3
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- instantsoft/icms2
- 3
- Chengdu Flash Flood Disaster Monitoring and Warning System
- 2
- Tongda OA
- 2
- Apache Software Foundation Apache Airflow · apache-airflow
- 1
- CartFlows Pro
- 1
- CodeBard's Patron Button and Widgets for Patreon
- 1
- David Lingren Media Library Assistant
- 1
- DedeBIZ
- 1
- Dimitar Ivanov HTTP Headers
- 1
- Joseph C Dolson My Content Management
- 1
Critical 1
High 5
- CVE-2023-30491WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)CodeBard's Patron Button and Widgets for Patreon
- CVE-2023-36686WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)CartFlows Pro
- CVE-2023-36689WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)WPFactory Helper
- CVE-2023-37873WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Scripting (XSS)WooCommerce Shipping Multiple Addresses
- CVE-2023-39508Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledgesApache Software Foundation Apache Airflow · apache-airflow
Medium, low and unrated 20
- CVE-2023-32600WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS)Rank Math SEO
- CVE-2023-4172Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx absolute path traversalChengdu Flash Flood Disaster Monitoring and Warning System
- CVE-2023-34010WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)David Lingren Media Library Assistant
- CVE-2023-34377WordPress My Content Management Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)Joseph C Dolson My Content Management
- CVE-2023-36678WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)WP-buy WP Content Copy Protection & No Right Click
- CVE-2023-37874WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Cross Site Scripting (XSS)Dimitar Ivanov HTTP Headers
- CVE-2023-4171Chengdu Flash Flood Disaster Monitoring and Warning System FileDownload.ashx path traversalChengdu Flash Flood Disaster Monitoring and Warning System
- CVE-2023-4189Cross-site Scripting (XSS) - Reflected in instantsoft/icms2instantsoft/icms2
- CVE-2023-4170DedeBIZ Article cross site scriptingDedeBIZ
- CVE-2023-4169Ruijie RG-EW1200G Administrator Password set_passwd access controlRuijie RG-EW1200G
- CVE-2023-4168Templatecookie Adlisting Redirect ad-list information disclosureTemplatecookie Adlisting
- CVE-2023-4187Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantsoft/icms2
- CVE-2023-4167Media Browser Emby Server cross site scriptingMedia Browser Emby Server
- CVE-2023-4166Tongda OA delete_log.php sql injectionTongda OA
- CVE-2023-4165Tongda OA delete_seal.php sql injectionTongda OA
- CVE-2020-23564File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php.
- CVE-2022-46782An issue was discovered in Stormshield SSL VPN Client before 3.2.0.
- CVE-2023-33367A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the
- CVE-2023-36095An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affeclangchain
- CVE-2023-38943ShuiZe_0x727 v1.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /iniFile/config.ini.