# CVEs published 2023-08-07

114 CVEs were published on August 7, 2023: 3 critical, 11 high. Days are UTC.

- [CVE-2023-39523](https://cve.now/CVE-2023-39523.md): ScanCode.io command injection in docker image fetch process (CVSS 6.8, nexB scancode.io · scancodeio)
- [CVE-2023-39530](https://cve.now/CVE-2023-39530.md): PrestaShop vulnerable to file deletion via CustomerMessage (CVSS 6.5, PrestaShop · prestashop/prestashop)
- [CVE-2023-39529](https://cve.now/CVE-2023-39529.md): PrestaShop vulnerable to file deletion via attachment API (CVSS 6.7, PrestaShop · prestashop/prestashop)
- [CVE-2023-39528](https://cve.now/CVE-2023-39528.md): PrestaShop vulnerable to file reading through path traversal (CVSS 6.8, PrestaShop · prestashop/prestashop)
- [CVE-2023-39527](https://cve.now/CVE-2023-39527.md): PrestaShop XSS vulnerability through Validate::isCleanHTML method (CVSS 8.3, PrestaShop · prestashop/prestashop)
- [CVE-2023-39526](https://cve.now/CVE-2023-39526.md): PrestaShopSQL manager vulnerability (potential RCE) (CVSS 9.1, PrestaShop · prestashop/prestashop)
- [CVE-2023-39525](https://cve.now/CVE-2023-39525.md): PrestaShop vulnerable to path traversal (CVSS 6.5, PrestaShop · prestashop/prestashop)
- [CVE-2023-39524](https://cve.now/CVE-2023-39524.md): PrestaShop vulnerable to boolean SQL injection in search product in BO (CVSS 6.7, PrestaShop · prestashop/prestashop)
- [CVE-2023-39520](https://cve.now/CVE-2023-39520.md): Cryptomator vulnerable to Local Elevation of Privileges (CVSS 5.5, cryptomator)
- [CVE-2023-4201](https://cve.now/CVE-2023-4201.md): SourceCodester Inventory Management System ex\_catagory\_data.php sql injection (CVSS 6.3, SourceCodester Inventory Management System)
- [CVE-2023-38704](https://cve.now/CVE-2023-38704.md): import-in-the-middle allows unsanitized user controlled input in module generation (CVSS 8.1, DataDog import-in-the-middle · import-in-the-middle)
- [CVE-2023-39363](https://cve.now/CVE-2023-39363.md): Vyper incorrectly allocated named re-entrancy locks (CVSS 9.1, vyperlang vyper · vyper)
- [CVE-2023-4200](https://cve.now/CVE-2023-4200.md): SourceCodester Inventory Management System product\_data.php. sql injection (CVSS 6.3, SourceCodester Inventory Management System)
- [CVE-2023-39349](https://cve.now/CVE-2023-39349.md): Sentry vulnerable to privilege escalation via ApiTokensEndpoint (CVSS 8.1, getsentry sentry · sentry)
- [CVE-2023-4199](https://cve.now/CVE-2023-4199.md): SourceCodester Inventory Management System catagory\_data.php sql injection (CVSS 6.3, SourceCodester Inventory Management System)
- [CVE-2023-4012](https://cve.now/CVE-2023-4012.md): Incomplete Internal State Distinction in ntpsec (CVSS 7.5, ntpsec)
- [CVE-2023-38157](https://cve.now/CVE-2023-38157.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2023-38044](https://cve.now/CVE-2023-38044.md): Extension - hikashop.com - SQLi in HikaShop component for Joomla \<= 4.7.2 (no CVSS, hikashop.com HikaShop component for Joomla)
- [CVE-2023-23758](https://cve.now/CVE-2023-23758.md): Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla \<= 2.2.0 (no CVSS, creative-solutions.net Creative Gallery component for Joomla)
- [CVE-2023-38045](https://cve.now/CVE-2023-38045.md): Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0 (no CVSS, admiror-design-studio.com Admiror Gallery component for Joo…)
- [CVE-2023-23757](https://cve.now/CVE-2023-23757.md): Extension - bestaddon.com - SQLi in BA Gallery component for Joomla \<= 1.2.0 (no CVSS, bestaddon.com BA Gallery component for Joomla)
- [CVE-2023-34476](https://cve.now/CVE-2023-34476.md): Extension - mooj.org - SQLi in Proforms Basic component for Joomla \<= 1.6.0 (no CVSS, mooj.org Proforms Basic component for Joomla)
- [CVE-2023-34477](https://cve.now/CVE-2023-34477.md): Extension - braincert.com - SQLi in Virtual Classroom component for Joomla \<= 1.6.0 (no CVSS, braincert.com Virtual Classroom component for Joomla)
- [CVE-2023-2843](https://cve.now/CVE-2023-2843.md): MultiParcels Shipping For WooCommerce \< 1.14.15 - Subscribers+ SQLi (CVSS 8.8, MultiParcels Shipping For WooCommerce)
- [CVE-2023-0604](https://cve.now/CVE-2023-0604.md): WP Food Manager \< 1.0.4 - Admin+ Stored XSS (CVSS 5.4, WP Food Manager)
- [CVE-2021-24916](https://cve.now/CVE-2021-24916.md): Qubely \< 1.8.6 - Unauthenticated Arbitrary E-mail Sending (no CVSS, Qubely)
- [CVE-2023-3524](https://cve.now/CVE-2023-3524.md): WPCode \< 2.0.13.1 - Reflected XSS (CVSS 6.1, WPCode)
- [CVE-2023-3671](https://cve.now/CVE-2023-3671.md): MultiParcels Shipping For WooCommerce \< 1.15.4 - Reflected XSS (CVSS 6.1, MultiParcels Shipping For WooCommerce)
- [CVE-2023-3365](https://cve.now/CVE-2023-3365.md): MultiParcels Shipping For WooCommerce \< 1.14.14 - Subscriber+ Arbitrary Shipment Deletion (CVSS 8.1, MultiParcels Shipping For WooCommerce)
- [CVE-2023-3575](https://cve.now/CVE-2023-3575.md): Quiz And Survey Master \< 8.1.11 - Contributor+ Stored XSS (CVSS 5.4, Quiz And Survey Master)
- [CVE-2023-3492](https://cve.now/CVE-2023-3492.md): WP Shopping Pages \<= 1.14 - Stored XSS via CSRF (no CVSS, WP Shopping Pages)
- [CVE-2023-3650](https://cve.now/CVE-2023-3650.md): Bubble Menu \< 3.0.5 - Admin+ Stored XSS (no CVSS, Bubble Menu)
- [CVE-2023-4194](https://cve.now/CVE-2023-4194.md): Kernel: tap: tap\_open(): correctly initialize socket uid next fix of i\_uid to current\_fsuid (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Virtualization)
- [CVE-2023-4147](https://cve.now/CVE-2023-4147.md): Kernel: netfilter: nf\_tables\_newrule when adding a rule with nfta\_rule\_chain\_id leads to use-after-free (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2023-38392](https://cve.now/CVE-2023-38392.md): WordPress Custom Field Template Plugin \<= 2.5.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Hiroaki Miyashita Custom Field Template)
- [CVE-2023-3896](https://cve.now/CVE-2023-3896.md): A divide by zero issue existed in vim of OpenCloudOS Stream (CVSS 7.8, OpenCloudOS Stream)
- [CVE-2023-32090](https://cve.now/CVE-2023-32090.md): Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials (CVSS 9.8, Pegasystems Pega Platform)
- [CVE-2023-0426](https://cve.now/CVE-2023-0426.md): Stack overflow in filename or in boundary (CVSS 8.6, ABB Freelance controllers AC)
- [CVE-2023-0425](https://cve.now/CVE-2023-0425.md): Buffer overflow in global memory region (CVSS 8.6, ABB Freelance controllers AC)
- [CVE-2023-20818](https://cve.now/CVE-2023-20818.md): In wlan service, there is a possible out of bounds read due to improper input validation. (CVSS 4.4, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20817](https://cve.now/CVE-2023-20817.md): In wlan service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20816](https://cve.now/CVE-2023-20816.md): In wlan service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20815](https://cve.now/CVE-2023-20815.md): In wlan service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20814](https://cve.now/CVE-2023-20814.md): In wlan service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20813](https://cve.now/CVE-2023-20813.md): In wlan service, there is a possible out of bounds read due to improper input validation. (CVSS 4.4, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-20812](https://cve.now/CVE-2023-20812.md): In wlan driver, there is a possible out of bounds write due to improper input validation. (CVSS 4.4, MediaTek MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT…)
- [CVE-2023-20811](https://cve.now/CVE-2023-20811.md): In IOMMU, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT…)
- [CVE-2023-20810](https://cve.now/CVE-2023-20810.md): In IOMMU, there is a possible information disclosure due to improper input validation. (no CVSS, MediaTek MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT…)
- [CVE-2023-20809](https://cve.now/CVE-2023-20809.md): In vdec, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT…)
- [CVE-2023-20808](https://cve.now/CVE-2023-20808.md): In OPTEE, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT9011, MT9022, MT9618, MT9649, MT9653)
- [CVE-2023-20807](https://cve.now/CVE-2023-20807.md): In dpe, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT6895, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20806](https://cve.now/CVE-2023-20806.md): In hcp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20805](https://cve.now/CVE-2023-20805.md): In imgsys, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20804](https://cve.now/CVE-2023-20804.md): In imgsys, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20803](https://cve.now/CVE-2023-20803.md): In imgsys, there is a possible memory corruption due to improper input validation. (CVSS 6.7, MediaTek MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20802](https://cve.now/CVE-2023-20802.md): In imgsys, there is a possible memory corruption due to improper input validation. (no CVSS, MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20801](https://cve.now/CVE-2023-20801.md): In imgsys, there is a possible use after free due to a race condition. (no CVSS, MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20800](https://cve.now/CVE-2023-20800.md): In imgsys, there is a possible system crash due to a mssing ptr check. (no CVSS, MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20798](https://cve.now/CVE-2023-20798.md): In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. (no CVSS, MediaTek MT2713, MT6855, MT6879, MT6886, MT6895, MT6983, MT…)
- [CVE-2023-20797](https://cve.now/CVE-2023-20797.md): In camera middleware, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8188, MT…)
- [CVE-2023-20796](https://cve.now/CVE-2023-20796.md): In power, there is a possible memory corruption due to an incorrect bounds check. (no CVSS, MediaTek MT2735, MT2737, MT6789, MT6833, MT6835, MT6853, MT…)
- [CVE-2023-20795](https://cve.now/CVE-2023-20795.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6762, MT6768, MT6769, MT6779, MT…)
- [CVE-2023-20793](https://cve.now/CVE-2023-20793.md): In apu, there is a possible memory corruption due to a missing bounds check. (no CVSS, MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, M…)
- [CVE-2023-20790](https://cve.now/CVE-2023-20790.md): In nvram, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT2735, MT2737, MT6739, MT6761, MT6762, MT…)
- [CVE-2023-20789](https://cve.now/CVE-2023-20789.md): In jpeg, there is a possible information disclosure due to a missing bounds check. (no CVSS, MediaTek MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT…)
- [CVE-2023-20788](https://cve.now/CVE-2023-20788.md): In thermal, there is a possible use after free due to a race condition. (no CVSS, MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2023-20787](https://cve.now/CVE-2023-20787.md): In thermal, there is a possible use after free due to a race condition. (no CVSS, MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2023-20786](https://cve.now/CVE-2023-20786.md): In gps, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2023-20785](https://cve.now/CVE-2023-20785.md): In audio, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, M…)
- [CVE-2023-20784](https://cve.now/CVE-2023-20784.md): In keyinstall, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20783](https://cve.now/CVE-2023-20783.md): In keyinstall, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20782](https://cve.now/CVE-2023-20782.md): In keyinstall, there is a possible information disclosure due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20781](https://cve.now/CVE-2023-20781.md): In keyinstall, there is a possible memory corruption due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20780](https://cve.now/CVE-2023-20780.md): In keyinstall, there is a possible information disclosure due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-33913](https://cve.now/CVE-2023-33913.md): In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalatio (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…)
- [CVE-2022-47351](https://cve.now/CVE-2022-47351.md): In camera driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616/T610/T618…)
- [CVE-2022-47350](https://cve.now/CVE-2022-47350.md): In camera driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-33912](https://cve.now/CVE-2023-33912.md): In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33911](https://cve.now/CVE-2023-33911.md): In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33910](https://cve.now/CVE-2023-33910.md): In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33909](https://cve.now/CVE-2023-33909.md): In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33908](https://cve.now/CVE-2023-33908.md): In ims service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T310/T60…)
- [CVE-2023-33907](https://cve.now/CVE-2023-33907.md): In Contacts Service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33906](https://cve.now/CVE-2023-33906.md): In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-4193](https://cve.now/CVE-2023-4193.md): SourceCodester Resort Reservation System view\_fee.php sql injection (CVSS 6.3, SourceCodester Resort Reservation System)
- [CVE-2022-38795](https://cve.now/CVE-2022-38795.md): In Gitea through 1.17.1, repo cloning can occur in the migration function. (no CVSS, code.gitea.io/gitea)
- [CVE-2022-48579](https://cve.now/CVE-2022-48579.md): UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains. (no CVSS)
- [CVE-2023-27373](https://cve.now/CVE-2023-27373.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 5.5)
- [CVE-2023-32783](https://cve.now/CVE-2023-32783.md): The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming us (no CVSS)
- [CVE-2023-36054](https://cve.now/CVE-2023-36054.md): lib/kadm5/kadm\_rpc\_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. (no CVSS)
- [CVE-2023-36220](https://cve.now/CVE-2023-36220.md): Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access (no CVSS)
- [CVE-2023-36499](https://cve.now/CVE-2023-36499.md): Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla\_ssid and wlg\_ssid parameters at genie\_ap\_wifi\_change (no CVSS)
- [CVE-2023-38412](https://cve.now/CVE-2023-38412.md): Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla\_ssid and wlg\_ssid parameters at ia\_ap\_setting.cgi. (no CVSS)
- [CVE-2023-38591](https://cve.now/CVE-2023-38591.md): Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla\_ssid and wla\_temp\_ssid parameters at bsw\_ssid.cgi (no CVSS)
- [CVE-2023-38921](https://cve.now/CVE-2023-38921.md): Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade\_handler fun (no CVSS)
- [CVE-2023-38922](https://cve.now/CVE-2023-38922.md): Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http\_pa (no CVSS)
- [CVE-2023-38924](https://cve.now/CVE-2023-38924.md): Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http\_password parameter at setup.cgi. (no CVSS)
- [CVE-2023-38925](https://cve.now/CVE-2023-38925.md): Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http\_passwd parameter in p (no CVSS)
- [CVE-2023-38926](https://cve.now/CVE-2023-38926.md): Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla\_temp\_ssid parameter at acosNvramConfig\_set. (no CVSS)
- [CVE-2023-38928](https://cve.now/CVE-2023-38928.md): Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb\_remote\_invite.cgi. (no CVSS)
- [CVE-2023-38929](https://cve.now/CVE-2023-38929.md): Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer. (no CVSS)
- [CVE-2023-38930](https://cve.now/CVE-2023-38930.md): Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42\_multi and FH1205 V2.0.0.7(775) were discovered to (no CVSS)
- [CVE-2023-38931](https://cve.now/CVE-2023-38931.md): Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1 (no CVSS)
- [CVE-2023-38932](https://cve.now/CVE-2023-38932.md): Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter (no CVSS)
- [CVE-2023-38933](https://cve.now/CVE-2023-38933.md): Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42\_multi, (no CVSS)
- [CVE-2023-38934](https://cve.now/CVE-2023-38934.md): Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the (no CVSS)
- [CVE-2023-38935](https://cve.now/CVE-2023-38935.md): Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42\_multi were discovere (no CVSS)
- [CVE-2023-38936](https://cve.now/CVE-2023-38936.md): Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 (no CVSS)
- [CVE-2023-38937](https://cve.now/CVE-2023-38937.md): Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, (no CVSS)
- [CVE-2023-38938](https://cve.now/CVE-2023-38938.md): Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter (no CVSS)
- [CVE-2023-38939](https://cve.now/CVE-2023-38939.md): Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit\_ssid parameter in the formWrlsafeset functi (no CVSS)
- [CVE-2023-38940](https://cve.now/CVE-2023-38940.md): Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the for (no CVSS)
- [CVE-2023-39550](https://cve.now/CVE-2023-39550.md): Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http\_pa (no CVSS)
- [CVE-2023-39903](https://cve.now/CVE-2023-39903.md): An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. (CVSS 5.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.