CVEs published August 8, 2023
253 CVEs were published on August 8, 2023: 25 critical, 111 high. 1 is now in CISA KEV.
- Published
- 253
- Critical
- 25
- High
- 111
- Medium
- 68
- Low
- 4
- Unrated
- 45
- Now in CISA KEV
- 1
- Fix available
- 109
Most affected products
- Microsoft Windows
- 33
- Qualcomm Snapdragon
- 18
- Siemens Solid Edge SE2023
- 10
- Siemens Parasolid · Siemens Teamcenter Visualization
- 9
- Microsoft Exchange Server 2016 Cumulative Update · Microsof…
- 6
- Microsoft Azure HDInsight
- 5
- Zoom Video Communications Zoom Desktop Client for Windows
- 5
- Microsoft 365 Apps for Enterprise · Microsoft Office +1
- 4
- PHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4
- 4
- AMD μProf
- 3
Critical 25
- CVE-2023-39213Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticateZoom Video Communications Zoom Desktop Client for Windows a…
- CVE-2023-39216Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privZoom Video Communications Zoom Desktop Client for Windows
- CVE-2023-36534Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via nZoom Video Communications Zoom Desktop Client for Windows
- CVE-2023-21709Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-35385Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36911Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36910Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-39532SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and executionendojs endo · ses
- CVE-2023-3522SQLi in a2 License Portal Systema2 License Portal System
- CVE-2023-3386SQLi in a2 Camera Trap Tracking Systema2 Camera Trap Tracking System
- CVE-2023-3651SQLi in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software
- CVE-2023-3716SQLi in Oduyo Online Collection SoftwareOduyo Online Collection Software
- CVE-2023-3717SQLi in Farmakoms Remote Administration ConsoleFarmakom Remote Administration Console
- CVE-2023-4203Stored Cross-Site ScriptingAdvantech EKI-1524 · Advantech EKI-1522 +1
- CVE-2023-4202Stored Cross-Site ScriptingAdvantech EKI-1524 · Advantech EKI-1522 +1
- CVE-2023-37372A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4).Siemens RUGGEDCOM CROSSBOW
- CVE-2023-24845A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC,Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140
- CVE-2023-28561Buffer Copy Without Checking Size of Input in QESLQualcomm Snapdragon
- CVE-2023-21651Incorrect Type Conversion or Cast in CoreQualcomm Snapdragon
- CVE-2023-21643Untrusted Pointer Dereference in AutomotiveQualcomm Snapdragon
- CVE-2022-40510Buffer copy without checking size of input in Audio.Qualcomm Snapdragon
- CVE-2023-3898SQLi in mAyaNets E-Commerce SoftwaremAyaNet E-Commerce Software
- CVE-2023-3526PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devicesPHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX · PHOENIX CONTA… +1
- CVE-2023-3572PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panelsPHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4
- CVE-2023-37483Improper Access Control Vulnerabilities in SAP PowerDesignerSAP_SE SAP PowerDesigner
High 111
- CVE-2023-39214Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via netwoZoom Video Communications Zoom SDK's
- CVE-2023-39212 Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via locZoom Video Communications Zoom Rooms for Windows
- CVE-2023-39211Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user toZoom Video Communications Zoom Desktop Client for Windows a…
- CVE-2023-38180.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft ASP.NET Core +6
- CVE-2023-39533libp2p nodes vulnerable to attack using large RSA keysgo-libp2p · github.com/libp2p/go-libp2p
- CVE-2023-36899ASP.NET Elevation of Privilege VulnerabilityMicrosoft .NET Framework 2.0 Service Pack · Microsoft .N… +1
- CVE-2023-36873.NET Framework Spoofing VulnerabilityMicrosoft .NET Framework 3.5 and · Microsoft .NET Framework
- CVE-2023-36535Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosZoom Video Communications Zoom Clients
- CVE-2023-36533Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network accZoom Video Communications Zoom SDK's
- CVE-2023-36541Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable anZoom Video Communications Zoom Desktop Client for Windows
- CVE-2023-38154Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-38176Azure Arc-Enabled Servers Elevation of Privilege VulnerabilityMicrosoft Azure Arc-Enabled Servers
- CVE-2023-38178.NET Core and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +8
- CVE-2023-38181Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-38182Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-35390.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +1
- CVE-2023-35388Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-36897Visual Studio Tools for Office Runtime Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2023-36896Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- CVE-2023-36895Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2023-36892Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-36891Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2023-35372Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2023-35371Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2023-38167Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityMicrosoft Dynamics 365 Business Central 2023 Release Wave
- CVE-2023-38169Microsoft SQL OLE DB Remote Code Execution VulnerabilityMicrosoft ODBC Driver 17 for SQL Server on Linux · Micro… +7
- CVE-2023-38170HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2023-38172Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-38175Microsoft Windows Defender Elevation of Privilege VulnerabilityMicrosoft Windows Defender Antimalware Platform
- CVE-2023-38184Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-38185Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-38186Windows Mobile Device Management Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35387Windows Bluetooth A2DP driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35386Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35383Microsoft Message Queuing Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35382Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35381Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35380Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35379Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack
- CVE-2023-35378Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36912Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36904Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36903Windows System Assessment Tool Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36900Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36898Tablet Windows User Interface Application Core Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36882Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36876Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack
- CVE-2023-36866Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2023-36865Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2023-35368Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-35359Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29330Microsoft Teams Remote Code Execution VulnerabilityMicrosoft Teams for Android · Microsoft Teams for Desktop +2
- CVE-2023-29328Microsoft Teams Remote Code Execution VulnerabilityMicrosoft Teams for Android · Microsoft Teams for Desktop +2
- CVE-2023-36540Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalaZoom Video Communications Zoom Desktop Client for Windows
- CVE-2023-2423Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-ServiceRockwell Automation Armor PowerFlex
- CVE-2023-4219SourceCodester Doctors Appointment System login.php sql injectionSourceCodester Doctors Appointment System
- CVE-2023-38384WordPress eaSYNC Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)Syntactics eaSYNC
- CVE-2023-27627WordPress Woocommerce Email Report Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)eggemplo Woocommerce Email Report
- CVE-2023-24413WordPress wordpress vertical image slider plugin Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution WordPress vertical image slider plu…
- CVE-2023-24409WordPress WP Responsive Tabs horizontal vertical and accordion Tabs Plugin <= 1.1.15 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution WP Responsive Tabs horizontal verti…
- CVE-2023-32503WordPress GTmetrix for WordPress Plugin <= 0.4.6 is vulnerable to Cross Site Scripting (XSS)GTmetrix for WordPress
- CVE-2023-27412WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)Everest themes Mocho Blog
- CVE-2023-27421WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)Everest themes Everest News
- CVE-2023-39549A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2).Siemens Solid Edge SE2023
- CVE-2023-39419A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39269A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC,Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140
- CVE-2023-39188A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39187A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39186A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39185A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39184A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39183A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39182A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-39181A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7).Siemens Solid Edge SE2023
- CVE-2023-38683A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-38682A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), TeamcenSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2023-38681A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-38680A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-38679A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-38641A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10).Siemens SICAM TOOLBOX II
- CVE-2023-38531A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38530A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38529A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38528A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38527A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter ViSiemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38526A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38525A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-30796A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4).Siemens JT Open · Siemens JT Utilities
- CVE-2023-30795A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < Siemens JT Open · Siemens JT Utilities +1
- CVE-2023-28830A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2Siemens JT2Go · Siemens Solid Edge SE2022 +2
- CVE-2023-27411A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4).Siemens RUGGEDCOM CROSSBOW
- CVE-2022-39062A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10).Siemens SICAM TOOLBOX II
- CVE-2021-41544A vulnerability has been identified in Siemens Software Center (All versions < V3.0).Siemens Software Center
- CVE-2023-28555Buffer Over-read in AudioQualcomm Snapdragon
- CVE-2023-28537Integer Overflow or Wraparound in AudioQualcomm Snapdragon
- CVE-2023-22666Integer Overflow or Wraparound in AudioQualcomm Snapdragon
- CVE-2023-21652Key Management Errors in HLOSQualcomm Snapdragon
- CVE-2023-21626Improper Authentication in HLOS.Qualcomm Snapdragon
- CVE-2023-21625Buffer Over-read in Network ServicesQualcomm Snapdragon
- CVE-2023-4009Privilege Escalation for Project Owner and Project User Admin Roles in Ops ManagerMongoDB Ops Manager
- CVE-2023-37570Insufficient Session Expiration Vulnerability in Emagic Data Center Management SuiteESDS Emagic Data Center Management Suite
- CVE-2023-37569OS Command Injection Vulnerability in Emagic Data Center Management SuiteESDS Emagic Data Center Management Suite
- CVE-2023-3570PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panelsPHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4
- CVE-2023-3571PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panelsPHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4
- CVE-2023-3573PHOENIX CONTACT: Command Injection in WP 6xxx Web panelsPHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4
- CVE-2023-39439SAP Commerce accepts empty passphrases.SAP_SE SAP Commerce
- CVE-2023-39437Cross-Site Scripting (XSS) vulnerability in SAP Business OneSAP_SE SAP Business One
- CVE-2023-37491Improper Authorization check vulnerability in SAP Message ServerSAP_SE SAP Message Server
- CVE-2023-37490Binary hijack in SAP BusinessObjects Business Intelligence (Installer)SAP_SE SAP BusinessObjects Business Intelligence
- CVE-2023-36923Code Injection vulnerability in SAP PowerDesignerSAP_SE SAP PowerDesigner
- CVE-2023-33993SQL Injection vulnerability in SAP Business One B1i LayerSAP_SE SAP Business One
Medium, low and unrated 117
- CVE-2023-39209Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosuZoom Video Communications Zoom Desktop Client for Windows
- CVE-2023-39210Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an informaZoom Video Communications Zoom Client SDK for Windows
- CVE-2023-39951Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backendopen-telemetry opentelemetry-java-instrumentation
- CVE-2023-35391ASP.NET Core SignalR and Visual Studio Information Disclosure VulnerabilityMicrosoft .NET · Microsoft ASP.NET Core +3
- CVE-2023-39518social-media-skeleton stored Cross-site Scripting vulnerabilityfobybus social-media-skeleton
- CVE-2023-39218Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure Zoom Video Communications Zoom Clients
- CVE-2023-39217Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.Zoom Video Communications Zoom SDK's
- CVE-2023-39342Dangerzone CLI does not sanitize ANSI escape characters freedomofpress dangerzone
- CVE-2023-36532Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.Zoom Video Communications Zoom Clients
- CVE-2023-20561 AMD μProf
- CVE-2023-20556 AMD μProf
- CVE-2023-20562 AMD μProf
- CVE-2023-36894Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-36893Microsoft Outlook Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2023-36890Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Server
- CVE-2023-36881Azure Apache Ambari Spoofing VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-36877Azure Apache Oozie Spoofing VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-38188Azure Apache Hadoop Spoofing VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-35394Azure HDInsight Jupyter Notebook Spoofing VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-35393Azure Apache Hive Spoofing VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-35389Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-35384Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-35377Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-38254Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35376Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36914Windows Smart Card Resource Management Server Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36913Microsoft Message Queuing Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36909Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36908Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36907Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36906Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36905Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36889Windows Group Policy Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36869Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-20555Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attaAMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4… +13
- CVE-2023-20588Speculative LeaksAMD EPYC™ 7001 Processors · AMD Athlon™ 3000 Series Proc… +3
- CVE-2023-20586Radeon™ Software Crimson ReLive EditionAMD Radeon™ Software Crimson ReLive Edition
- CVE-2023-20589fTPM Voltage Fault Injection AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™… +19
- CVE-2023-20569 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™… +21
- CVE-2023-3894DOS in jackson-dataformats-textFasterXML jackson-dataformats-text · com.fasterxml.jackson.…
- CVE-2023-3653Stored XSS in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software
- CVE-2023-3652Reflected XSS in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software
- CVE-2023-32292WordPress Chat Button Plugin <= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS)Chat Button by GetButton.io
- CVE-2023-31221WordPress PDQ CSV Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)Ransom Christofferson PDQ CSV
- CVE-2023-28931WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)Never5 Post Connector
- CVE-2023-28934WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)Mammothology WP Full Stripe Free
- CVE-2023-28773WordPress Secondary Title Plugin <= 2.0.9.1 is vulnerable to Cross Site Scripting (XSS)Kolja Nolte Secondary Title
- CVE-2023-30482WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)VillaTheme WPBulky
- CVE-2023-25984WordPress Dovetail Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)Rigorous & Factory Pattern Dovetail
- CVE-2022-45821WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)NooTheme Noo Timetable
- CVE-2023-27415WordPress LetterPress Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)Themeqx LetterPress
- CVE-2023-25063WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)Anadnet Quick Page/Post Redirect Plugin
- CVE-2023-23829WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)Pierre JEHAN Owl Carousel
- CVE-2023-23877WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)bkmacdaddy designs Pinterest RSS Widget
- CVE-2023-23880WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)ExactMetrics
- CVE-2023-25459WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Postsnippets Post Snippets
- CVE-2023-29099WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)Elegant themes Divi
- CVE-2023-27416WordPress Decon WP SMS Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)Decon Digital Decon WP SMS
- CVE-2023-27422WordPress NS Coupon to Become Customer Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)NsThemes NS Coupon To Become Customer
- CVE-2023-36692WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Scripting (XSS)Christian Kramer & Hendrik Thole WP-Cirrus
- CVE-2023-38532A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-38524A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35Siemens Parasolid · Siemens Teamcenter Visualization
- CVE-2023-37373A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4).Siemens RUGGEDCOM CROSSBOW
- CVE-2023-28577Multiple Dmabuf Kernel Address UAF VulnerabilityQualcomm Snapdragon
- CVE-2023-28576Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel DriverQualcomm Snapdragon
- CVE-2023-28575Multiple Type Confusion VulnerabilityQualcomm Snapdragon
- CVE-2023-21650Improper Validation of Array Index in GPS HLOS DriverQualcomm Snapdragon
- CVE-2023-21649Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLANQualcomm Snapdragon
- CVE-2023-21648Integer Overflow to Buffer Overflow in RILQualcomm Snapdragon
- CVE-2023-21647Improper Input Validation in Bluetooth HOSTQualcomm Snapdragon
- CVE-2023-21627Incorrect Type Conversion or Cast in Trusted Execution EnvironmentQualcomm Snapdragon
- CVE-2023-3569PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENTPHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX · PHOENIX CONTA… +1
- CVE-2023-37486Information Disclosure vulnerability in SAP Commerce (OCC API)SAP_SE SAP Commerce
- CVE-2023-39440Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence
- CVE-2023-39436Information Disclosure in SAP Supplier Relationship ManagementSAP_SE SAP Supplier Relationship Management
- CVE-2023-37492Missing Authorization check in SAP NetWeaver AS ABAP and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2023-37488Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process IntegrationSAP_SE SAP NetWeaver Process Integration
- CVE-2023-37487Security misconfiguration vulnerability in SAP Business One (Service Layer)SAP_SE SAP Business One
- CVE-2023-37484Information Disclosure Vulnerabilities in SAP PowerDesignerSAP_SE SAP PowerDesigner
- CVE-2023-36926Information disclosure vulnerability in SAP Host AgentSAP_SE SAP Host Agent
- CVE-2023-24698Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory trav
- CVE-2023-26961Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files.
- CVE-2023-33756An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal.
- CVE-2023-36136PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker
- CVE-2023-36306A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code v
- CVE-2023-36344An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting th
- CVE-2023-36482An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82.
- CVE-2023-37646An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal.
- CVE-2023-37682Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php.
- CVE-2023-37683Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.
- CVE-2023-37684Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Adm
- CVE-2023-37685Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin
- CVE-2023-37686Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin port
- CVE-2023-37687Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in th
- CVE-2023-37688Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page.
- CVE-2023-37689Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.
- CVE-2023-37690Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page.
- CVE-2023-38758Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenswger
- CVE-2023-38759Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges viawger
- CVE-2023-38760SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters
- CVE-2023-38761Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to th
- CVE-2023-38762SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter wit
- CVE-2023-38763SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter wit
- CVE-2023-38764SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls para
- CVE-2023-38765SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter with
- CVE-2023-38766Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to th
- CVE-2023-38767SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' param
- CVE-2023-38768SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter withi
- CVE-2023-38769SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwha
- CVE-2023-38770SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the
- CVE-2023-38771SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within th
- CVE-2023-38773SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parame
- CVE-2023-39086ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
- CVE-2023-39976log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
- CVE-2023-39978ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.
- CVE-2023-40041TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so.
- CVE-2023-40042TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so.