CVEs published August 7, 2023
114 CVEs were published on August 7, 2023: 3 critical, 11 high.
- Published
- 114
- Critical
- 3
- High
- 11
- Medium
- 32
- Low
- 0
- Unrated
- 68
- Now in CISA KEV
- 0
- Fix available
- 21
Most affected products
- PrestaShop · prestashop/prestashop
- 7
- MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- 6
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 6
- MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- 5
- MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…
- 4
- MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…
- 3
- MultiParcels Shipping For WooCommerce
- 3
- SourceCodester Inventory Management System
- 3
- ABB Freelance controllers AC
- 2
- MediaTek MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT…
- 2
Critical 3
- CVE-2023-39526PrestaShopSQL manager vulnerability (potential RCE)PrestaShop · prestashop/prestashop
- CVE-2023-39363Vyper incorrectly allocated named re-entrancy locksvyperlang vyper · vyper
- CVE-2023-32090Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials Pegasystems Pega Platform
High 11
- CVE-2023-39527PrestaShop XSS vulnerability through Validate::isCleanHTML methodPrestaShop · prestashop/prestashop
- CVE-2023-38704import-in-the-middle allows unsanitized user controlled input in module generationDataDog import-in-the-middle · import-in-the-middle
- CVE-2023-39349Sentry vulnerable to privilege escalation via ApiTokensEndpointgetsentry sentry · sentry
- CVE-2023-4012Incomplete Internal State Distinction in ntpsecntpsec
- CVE-2023-2843MultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLiMultiParcels Shipping For WooCommerce
- CVE-2023-3365MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment DeletionMultiParcels Shipping For WooCommerce
- CVE-2023-4147Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeRed Hat Enterprise Linux
- CVE-2023-38392WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)Hiroaki Miyashita Custom Field Template
- CVE-2023-3896A divide by zero issue existed in vim of OpenCloudOS StreamOpenCloudOS Stream
- CVE-2023-0426Stack overflow in filename or in boundary ABB Freelance controllers AC
- CVE-2023-0425Buffer overflow in global memory regionABB Freelance controllers AC
Medium, low and unrated 100
- CVE-2023-39523ScanCode.io command injection in docker image fetch processnexB scancode.io · scancodeio
- CVE-2023-39530PrestaShop vulnerable to file deletion via CustomerMessagePrestaShop · prestashop/prestashop
- CVE-2023-39529PrestaShop vulnerable to file deletion via attachment APIPrestaShop · prestashop/prestashop
- CVE-2023-39528PrestaShop vulnerable to file reading through path traversalPrestaShop · prestashop/prestashop
- CVE-2023-39525PrestaShop vulnerable to path traversalPrestaShop · prestashop/prestashop
- CVE-2023-39524PrestaShop vulnerable to boolean SQL injection in search product in BOPrestaShop · prestashop/prestashop
- CVE-2023-39520Cryptomator vulnerable to Local Elevation of Privilegescryptomator
- CVE-2023-4201SourceCodester Inventory Management System ex_catagory_data.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4200SourceCodester Inventory Management System product_data.php. sql injectionSourceCodester Inventory Management System
- CVE-2023-4199SourceCodester Inventory Management System catagory_data.php sql injectionSourceCodester Inventory Management System
- CVE-2023-38157Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2023-38044Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2hikashop.com HikaShop component for Joomla
- CVE-2023-23758Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.0creative-solutions.net Creative Gallery component for Joomla
- CVE-2023-38045Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0admiror-design-studio.com Admiror Gallery component for Joo…
- CVE-2023-23757Extension - bestaddon.com - SQLi in BA Gallery component for Joomla <= 1.2.0bestaddon.com BA Gallery component for Joomla
- CVE-2023-34476Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0mooj.org Proforms Basic component for Joomla
- CVE-2023-34477Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0braincert.com Virtual Classroom component for Joomla
- CVE-2023-0604WP Food Manager < 1.0.4 - Admin+ Stored XSSWP Food Manager
- CVE-2021-24916Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail SendingQubely
- CVE-2023-3524WPCode < 2.0.13.1 - Reflected XSSWPCode
- CVE-2023-3671MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSSMultiParcels Shipping For WooCommerce
- CVE-2023-3575Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSSQuiz And Survey Master
- CVE-2023-3492WP Shopping Pages <= 1.14 - Stored XSS via CSRFWP Shopping Pages
- CVE-2023-3650Bubble Menu < 3.0.5 - Admin+ Stored XSS Bubble Menu
- CVE-2023-4194Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidRed Hat Enterprise Linux · Red Hat Virtualization
- CVE-2023-20818In wlan service, there is a possible out of bounds read due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20817In wlan service, there is a possible out of bounds write due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20816In wlan service, there is a possible out of bounds write due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20815In wlan service, there is a possible out of bounds write due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20814In wlan service, there is a possible out of bounds write due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20813In wlan service, there is a possible out of bounds read due to improper input validation.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20812In wlan driver, there is a possible out of bounds write due to improper input validation.MediaTek MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT…
- CVE-2023-20811In IOMMU, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT…
- CVE-2023-20810In IOMMU, there is a possible information disclosure due to improper input validation.MediaTek MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT…
- CVE-2023-20809In vdec, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT…
- CVE-2023-20808In OPTEE, there is a possible out of bounds write due to a missing bounds check.MediaTek MT9011, MT9022, MT9618, MT9649, MT9653
- CVE-2023-20807In dpe, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6895, MT6983, MT8188, MT8195, MT8395, MT…
- CVE-2023-20806In hcp, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…
- CVE-2023-20805In imgsys, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…
- CVE-2023-20804In imgsys, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…
- CVE-2023-20803In imgsys, there is a possible memory corruption due to improper input validation.MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…
- CVE-2023-20802In imgsys, there is a possible memory corruption due to improper input validation.MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…
- CVE-2023-20801In imgsys, there is a possible use after free due to a race condition.MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…
- CVE-2023-20800In imgsys, there is a possible system crash due to a mssing ptr check.MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…
- CVE-2023-20798In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size.MediaTek MT2713, MT6855, MT6879, MT6886, MT6895, MT6983, MT…
- CVE-2023-20797In camera middleware, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8188, MT…
- CVE-2023-20796In power, there is a possible memory corruption due to an incorrect bounds check.MediaTek MT2735, MT2737, MT6789, MT6833, MT6835, MT6853, MT…
- CVE-2023-20795In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6768, MT6769, MT6779, MT…
- CVE-2023-20793In apu, there is a possible memory corruption due to a missing bounds check.MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, M…
- CVE-2023-20790In nvram, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT2735, MT2737, MT6739, MT6761, MT6762, MT…
- CVE-2023-20789In jpeg, there is a possible information disclosure due to a missing bounds check.MediaTek MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT…
- CVE-2023-20788In thermal, there is a possible use after free due to a race condition.MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2023-20787In thermal, there is a possible use after free due to a race condition.MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2023-20786In gps, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT…
- CVE-2023-20785In audio, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, M…
- CVE-2023-20784In keyinstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20783In keyinstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20782In keyinstall, there is a possible information disclosure due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20781In keyinstall, there is a possible memory corruption due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20780In keyinstall, there is a possible information disclosure due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-33913In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalatioUnisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…
- CVE-2022-47351In camera driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…
- CVE-2022-47350In camera driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-33912In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executiUnisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-33911In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional executionUnisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-33910In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional executiUnisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-33909In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executiUnisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-33908In ims service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T310/T60…
- CVE-2023-33907In Contacts Service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-33906In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional executiUnisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-4193SourceCodester Resort Reservation System view_fee.php sql injectionSourceCodester Resort Reservation System
- CVE-2022-38795In Gitea through 1.17.1, repo cloning can occur in the migration function.code.gitea.io/gitea
- CVE-2022-48579UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.
- CVE-2023-27373An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
- CVE-2023-32783The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming us
- CVE-2023-36054lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer.
- CVE-2023-36220Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access
- CVE-2023-36499Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change
- CVE-2023-38412Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.
- CVE-2023-38591Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi
- CVE-2023-38921Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler fun
- CVE-2023-38922Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_pa
- CVE-2023-38924Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.
- CVE-2023-38925Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in p
- CVE-2023-38926Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.
- CVE-2023-38928Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi.
- CVE-2023-38929Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer.
- CVE-2023-38930Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to
- CVE-2023-38931Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1
- CVE-2023-38932Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter
- CVE-2023-38933Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi,
- CVE-2023-38934Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the
- CVE-2023-38935Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovere
- CVE-2023-38936Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9
- CVE-2023-38937Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28,
- CVE-2023-38938Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter
- CVE-2023-38939Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset functi
- CVE-2023-38940Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the for
- CVE-2023-39550Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_pa
- CVE-2023-39903An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061.