# CVEs published 2023-08-08

253 CVEs were published on August 8, 2023: 25 critical, 111 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-39209](https://cve.now/CVE-2023-39209.md): Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosu (CVSS 5.9, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-39214](https://cve.now/CVE-2023-39214.md): Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via netwo (CVSS 7.6, Zoom Video Communications Zoom SDK's)
- [CVE-2023-39213](https://cve.now/CVE-2023-39213.md): Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticate (CVSS 9.6, Zoom Video Communications Zoom Desktop Client for Windows a…)
- [CVE-2023-39212](https://cve.now/CVE-2023-39212.md): Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via loc (CVSS 7.9, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-39211](https://cve.now/CVE-2023-39211.md): Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to (CVSS 8.8, Zoom Video Communications Zoom Desktop Client for Windows a…)
- [CVE-2023-39210](https://cve.now/CVE-2023-39210.md): Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an informa (CVSS 5.5, Zoom Video Communications Zoom Client SDK for Windows)
- [CVE-2023-39951](https://cve.now/CVE-2023-39951.md): Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend (CVSS 6.5, open-telemetry opentelemetry-java-instrumentation)
- [CVE-2023-38180](https://cve.now/CVE-2023-38180.md): .NET and Visual Studio Denial of Service Vulnerability (CVSS 7.5, KEV, Microsoft .NET · Microsoft ASP.NET Core +6)
- [CVE-2023-35391](https://cve.now/CVE-2023-35391.md): ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVSS 6.2, Microsoft .NET · Microsoft ASP.NET Core +3)
- [CVE-2023-39533](https://cve.now/CVE-2023-39533.md): libp2p nodes vulnerable to attack using large RSA keys (CVSS 7.5, go-libp2p · github.com/libp2p/go-libp2p)
- [CVE-2023-36899](https://cve.now/CVE-2023-36899.md): ASP.NET Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft .NET Framework 2.0 Service Pack · Microsoft .N… +1)
- [CVE-2023-36873](https://cve.now/CVE-2023-36873.md): .NET Framework Spoofing Vulnerability (CVSS 7.4, Microsoft .NET Framework 3.5 and · Microsoft .NET Framework)
- [CVE-2023-39518](https://cve.now/CVE-2023-39518.md): social-media-skeleton stored Cross-site Scripting vulnerability (CVSS 5.4, fobybus social-media-skeleton)
- [CVE-2023-39218](https://cve.now/CVE-2023-39218.md): Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure (CVSS 6.1, Zoom Video Communications Zoom Clients)
- [CVE-2023-39217](https://cve.now/CVE-2023-39217.md): Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access. (CVSS 5.3, Zoom Video Communications Zoom SDK's)
- [CVE-2023-39216](https://cve.now/CVE-2023-39216.md): Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of priv (CVSS 9.6, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-36535](https://cve.now/CVE-2023-36535.md): Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclos (CVSS 7.1, Zoom Video Communications Zoom Clients)
- [CVE-2023-36534](https://cve.now/CVE-2023-36534.md): Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via n (CVSS 9.3, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-36533](https://cve.now/CVE-2023-36533.md): Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network acc (CVSS 7.1, Zoom Video Communications Zoom SDK's)
- [CVE-2023-39342](https://cve.now/CVE-2023-39342.md): Dangerzone CLI does not sanitize ANSI escape characters (CVSS 3.6, freedomofpress dangerzone)
- [CVE-2023-36532](https://cve.now/CVE-2023-36532.md): Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. (CVSS 5.9, Zoom Video Communications Zoom Clients)
- [CVE-2023-36541](https://cve.now/CVE-2023-36541.md): Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an (CVSS 8.0, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-20561](https://cve.now/CVE-2023-20561.md):  (no CVSS, AMD μProf)
- [CVE-2023-20556](https://cve.now/CVE-2023-20556.md):  (no CVSS, AMD μProf)
- [CVE-2023-20562](https://cve.now/CVE-2023-20562.md):  (no CVSS, AMD μProf)
- [CVE-2023-38154](https://cve.now/CVE-2023-38154.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-38176](https://cve.now/CVE-2023-38176.md): Azure Arc-Enabled Servers Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Azure Arc-Enabled Servers)
- [CVE-2023-38178](https://cve.now/CVE-2023-38178.md): .NET Core and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +8)
- [CVE-2023-38181](https://cve.now/CVE-2023-38181.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-38182](https://cve.now/CVE-2023-38182.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-35390](https://cve.now/CVE-2023-35390.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft .NET · Microsoft Visual Studio +1)
- [CVE-2023-35388](https://cve.now/CVE-2023-35388.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-36897](https://cve.now/CVE-2023-36897.md): Visual Studio Tools for Office Runtime Spoofing Vulnerability (CVSS 8.1, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2023-36896](https://cve.now/CVE-2023-36896.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel 2013… +2)
- [CVE-2023-36895](https://cve.now/CVE-2023-36895.md): Microsoft Outlook Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2023-36894](https://cve.now/CVE-2023-36894.md): Microsoft SharePoint Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2023-36893](https://cve.now/CVE-2023-36893.md): Microsoft Outlook Spoofing Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2023-36892](https://cve.now/CVE-2023-36892.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.0, Microsoft SharePoint Server)
- [CVE-2023-36891](https://cve.now/CVE-2023-36891.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.0, Microsoft SharePoint Server)
- [CVE-2023-36890](https://cve.now/CVE-2023-36890.md): Microsoft SharePoint Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server)
- [CVE-2023-36881](https://cve.now/CVE-2023-36881.md): Azure Apache Ambari Spoofing Vulnerability (CVSS 4.5, Microsoft Azure HDInsight)
- [CVE-2023-36877](https://cve.now/CVE-2023-36877.md): Azure Apache Oozie Spoofing Vulnerability (CVSS 4.5, Microsoft Azure HDInsight)
- [CVE-2023-35372](https://cve.now/CVE-2023-35372.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2023-35371](https://cve.now/CVE-2023-35371.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2023-21709](https://cve.now/CVE-2023-21709.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-38167](https://cve.now/CVE-2023-38167.md): Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Dynamics 365 Business Central 2023 Release Wave)
- [CVE-2023-38169](https://cve.now/CVE-2023-38169.md): Microsoft SQL OLE DB Remote Code Execution Vulnerability (CVSS 8.8, Microsoft ODBC Driver 17 for SQL Server on Linux · Micro… +7)
- [CVE-2023-38170](https://cve.now/CVE-2023-38170.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2023-38172](https://cve.now/CVE-2023-38172.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-38175](https://cve.now/CVE-2023-38175.md): Microsoft Windows Defender Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Defender Antimalware Platform)
- [CVE-2023-38184](https://cve.now/CVE-2023-38184.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-38185](https://cve.now/CVE-2023-38185.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-38186](https://cve.now/CVE-2023-38186.md): Windows Mobile Device Management Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-38188](https://cve.now/CVE-2023-38188.md): Azure Apache Hadoop Spoofing Vulnerability (CVSS 4.5, Microsoft Azure HDInsight)
- [CVE-2023-35394](https://cve.now/CVE-2023-35394.md): Azure HDInsight Jupyter Notebook Spoofing Vulnerability (CVSS 4.6, Microsoft Azure HDInsight)
- [CVE-2023-35393](https://cve.now/CVE-2023-35393.md): Azure Apache Hive Spoofing Vulnerability (CVSS 4.5, Microsoft Azure HDInsight)
- [CVE-2023-35389](https://cve.now/CVE-2023-35389.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-35387](https://cve.now/CVE-2023-35387.md): Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35386](https://cve.now/CVE-2023-35386.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35385](https://cve.now/CVE-2023-35385.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-35384](https://cve.now/CVE-2023-35384.md): Windows HTML Platforms Security Feature Bypass Vulnerability (CVSS 5.4, Microsoft Windows)
- [CVE-2023-35383](https://cve.now/CVE-2023-35383.md): Microsoft Message Queuing Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35382](https://cve.now/CVE-2023-35382.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35381](https://cve.now/CVE-2023-35381.md): Windows Fax Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35380](https://cve.now/CVE-2023-35380.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35379](https://cve.now/CVE-2023-35379.md): Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server 2008 R2 Service Pack)
- [CVE-2023-35378](https://cve.now/CVE-2023-35378.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-35377](https://cve.now/CVE-2023-35377.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-38254](https://cve.now/CVE-2023-38254.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35376](https://cve.now/CVE-2023-35376.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-36914](https://cve.now/CVE-2023-36914.md): Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-36913](https://cve.now/CVE-2023-36913.md): Microsoft Message Queuing Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-36912](https://cve.now/CVE-2023-36912.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-36911](https://cve.now/CVE-2023-36911.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-36910](https://cve.now/CVE-2023-36910.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-36909](https://cve.now/CVE-2023-36909.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-36908](https://cve.now/CVE-2023-36908.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-36907](https://cve.now/CVE-2023-36907.md): Windows Cryptographic Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-36906](https://cve.now/CVE-2023-36906.md): Windows Cryptographic Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-36905](https://cve.now/CVE-2023-36905.md): Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-36904](https://cve.now/CVE-2023-36904.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-36903](https://cve.now/CVE-2023-36903.md): Windows System Assessment Tool Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-36900](https://cve.now/CVE-2023-36900.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-36898](https://cve.now/CVE-2023-36898.md): Tablet Windows User Interface Application Core Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-36889](https://cve.now/CVE-2023-36889.md): Windows Group Policy Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-36882](https://cve.now/CVE-2023-36882.md): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-36876](https://cve.now/CVE-2023-36876.md): Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows Server 2008 R2 Service Pack)
- [CVE-2023-36869](https://cve.now/CVE-2023-36869.md): Azure DevOps Server Spoofing Vulnerability (CVSS 6.3, Microsoft Azure DevOps Server)
- [CVE-2023-36866](https://cve.now/CVE-2023-36866.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2023-36865](https://cve.now/CVE-2023-36865.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2023-35368](https://cve.now/CVE-2023-35368.md): Microsoft Exchange Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-35359](https://cve.now/CVE-2023-35359.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-29330](https://cve.now/CVE-2023-29330.md): Microsoft Teams Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Teams for Android · Microsoft Teams for Desktop +2)
- [CVE-2023-29328](https://cve.now/CVE-2023-29328.md): Microsoft Teams Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Teams for Android · Microsoft Teams for Desktop +2)
- [CVE-2023-20555](https://cve.now/CVE-2023-20555.md): Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an atta (no CVSS, AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4… +13)
- [CVE-2023-20588](https://cve.now/CVE-2023-20588.md): Speculative Leaks (no CVSS, AMD EPYC™ 7001 Processors · AMD Athlon™ 3000 Series Proc… +3)
- [CVE-2023-36540](https://cve.now/CVE-2023-36540.md): Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escala (CVSS 7.3, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-20586](https://cve.now/CVE-2023-20586.md): Radeon™ Software Crimson ReLive Edition (no CVSS, AMD Radeon™ Software Crimson ReLive Edition)
- [CVE-2023-20589](https://cve.now/CVE-2023-20589.md): fTPM Voltage Fault Injection (no CVSS, AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™… +19)
- [CVE-2023-20569](https://cve.now/CVE-2023-20569.md): A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. (no CVSS, AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™… +21)
- [CVE-2023-3894](https://cve.now/CVE-2023-3894.md): DOS in jackson-dataformats-text (CVSS 5.8, FasterXML jackson-dataformats-text · com.fasterxml.jackson.…)
- [CVE-2023-39532](https://cve.now/CVE-2023-39532.md): SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution (CVSS 9.8, endojs endo · ses)
- [CVE-2023-3522](https://cve.now/CVE-2023-3522.md): SQLi in a2 License Portal System (CVSS 9.8, a2 License Portal System)
- [CVE-2023-3386](https://cve.now/CVE-2023-3386.md): SQLi in a2 Camera Trap Tracking System (CVSS 9.8, a2 Camera Trap Tracking System)
- [CVE-2023-3653](https://cve.now/CVE-2023-3653.md): Stored XSS in Digital Ant E-Commerce Software (CVSS 5.4, Digital Ant E-Commerce Software)
- [CVE-2023-3652](https://cve.now/CVE-2023-3652.md): Reflected XSS in Digital Ant E-Commerce Software (CVSS 6.1, Digital Ant E-Commerce Software)
- [CVE-2023-3651](https://cve.now/CVE-2023-3651.md): SQLi in Digital Ant E-Commerce Software (CVSS 9.8, Digital Ant E-Commerce Software)
- [CVE-2023-2423](https://cve.now/CVE-2023-2423.md): Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service (CVSS 8.6, Rockwell Automation Armor PowerFlex)
- [CVE-2023-4219](https://cve.now/CVE-2023-4219.md): SourceCodester Doctors Appointment System login.php sql injection (CVSS 7.3, SourceCodester Doctors Appointment System)
- [CVE-2023-32292](https://cve.now/CVE-2023-32292.md): WordPress Chat Button Plugin \<= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Chat Button by GetButton.io)
- [CVE-2023-31221](https://cve.now/CVE-2023-31221.md): WordPress PDQ CSV Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ransom Christofferson PDQ CSV)
- [CVE-2023-28931](https://cve.now/CVE-2023-28931.md): WordPress Post Connector Plugin \<= 1.0.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Never5 Post Connector)
- [CVE-2023-38384](https://cve.now/CVE-2023-38384.md): WordPress eaSYNC Plugin \<= 1.3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Syntactics eaSYNC)
- [CVE-2023-28934](https://cve.now/CVE-2023-28934.md): WordPress WP Full Stripe Free Plugin \<= 1.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mammothology WP Full Stripe Free)
- [CVE-2023-28773](https://cve.now/CVE-2023-28773.md): WordPress Secondary Title Plugin \<= 2.0.9.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Kolja Nolte Secondary Title)
- [CVE-2023-30482](https://cve.now/CVE-2023-30482.md): WordPress WPBulky Plugin \< 1.0.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, VillaTheme WPBulky)
- [CVE-2023-25984](https://cve.now/CVE-2023-25984.md): WordPress Dovetail Plugin \<= 1.2.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Rigorous & Factory Pattern Dovetail)
- [CVE-2022-45821](https://cve.now/CVE-2022-45821.md): WordPress NOO Timetable Plugin \<= 2.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, NooTheme Noo Timetable)
- [CVE-2023-27415](https://cve.now/CVE-2023-27415.md): WordPress LetterPress Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Themeqx LetterPress)
- [CVE-2023-27627](https://cve.now/CVE-2023-27627.md): WordPress Woocommerce Email Report Plugin \<= 2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, eggemplo Woocommerce Email Report)
- [CVE-2023-25063](https://cve.now/CVE-2023-25063.md): WordPress Quick Page/Post Redirect Plugin \<= 5.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Anadnet Quick Page/Post Redirect Plugin)
- [CVE-2023-23829](https://cve.now/CVE-2023-23829.md): WordPress Owl Carousel Plugin \<= 0.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Pierre JEHAN Owl Carousel)
- [CVE-2023-23877](https://cve.now/CVE-2023-23877.md): WordPress Pinterest RSS Widget Plugin \<= 2.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, bkmacdaddy designs Pinterest RSS Widget)
- [CVE-2023-24413](https://cve.now/CVE-2023-24413.md): WordPress wordpress vertical image slider plugin Plugin \<= 1.2.16 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution WordPress vertical image slider plu…)
- [CVE-2023-23880](https://cve.now/CVE-2023-23880.md): WordPress ExactMetrics Plugin \<= 7.14.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, ExactMetrics)
- [CVE-2023-24409](https://cve.now/CVE-2023-24409.md): WordPress WP Responsive Tabs horizontal vertical and accordion Tabs Plugin \<= 1.1.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution WP Responsive Tabs horizontal verti…)
- [CVE-2023-25459](https://cve.now/CVE-2023-25459.md): WordPress Post Snippets Plugin \<= 4.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Postsnippets Post Snippets)
- [CVE-2023-3716](https://cve.now/CVE-2023-3716.md): SQLi in Oduyo Online Collection Software (CVSS 9.8, Oduyo Online Collection Software)
- [CVE-2023-3717](https://cve.now/CVE-2023-3717.md): SQLi in Farmakoms Remote Administration Console (CVSS 9.8, Farmakom Remote Administration Console)
- [CVE-2023-29099](https://cve.now/CVE-2023-29099.md): WordPress Divi Theme \<= 4.20.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Elegant themes Divi)
- [CVE-2023-32503](https://cve.now/CVE-2023-32503.md): WordPress GTmetrix for WordPress Plugin \<= 0.4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, GTmetrix for WordPress)
- [CVE-2023-27412](https://cve.now/CVE-2023-27412.md): WordPress Mocho Blog Theme \<= 1.0.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest themes Mocho Blog)
- [CVE-2023-27421](https://cve.now/CVE-2023-27421.md): WordPress Everest News Theme \<= 1.1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest themes Everest News)
- [CVE-2023-4203](https://cve.now/CVE-2023-4203.md): Stored Cross-Site Scripting (CVSS 9.0, Advantech EKI-1524 · Advantech EKI-1522 +1)
- [CVE-2023-27416](https://cve.now/CVE-2023-27416.md): WordPress Decon WP SMS Plugin \<= 1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Decon Digital Decon WP SMS)
- [CVE-2023-4202](https://cve.now/CVE-2023-4202.md): Stored Cross-Site Scripting (CVSS 9.0, Advantech EKI-1524 · Advantech EKI-1522 +1)
- [CVE-2023-27422](https://cve.now/CVE-2023-27422.md): WordPress NS Coupon to Become Customer Plugin \<= 1.2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, NsThemes NS Coupon To Become Customer)
- [CVE-2023-36692](https://cve.now/CVE-2023-36692.md): WordPress WP-Cirrus Plugin \<= 0.6.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Christian Kramer & Hendrik Thole WP-Cirrus)
- [CVE-2023-39549](https://cve.now/CVE-2023-39549.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 2). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39419](https://cve.now/CVE-2023-39419.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39269](https://cve.now/CVE-2023-39269.md): A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, (CVSS 7.5, Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140)
- [CVE-2023-39188](https://cve.now/CVE-2023-39188.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39187](https://cve.now/CVE-2023-39187.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39186](https://cve.now/CVE-2023-39186.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39185](https://cve.now/CVE-2023-39185.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39184](https://cve.now/CVE-2023-39184.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39183](https://cve.now/CVE-2023-39183.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39182](https://cve.now/CVE-2023-39182.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-39181](https://cve.now/CVE-2023-39181.md): A vulnerability has been identified in Solid Edge SE2023 (All versions \< V223.0 Update 7). (CVSS 7.8, Siemens Solid Edge SE2023)
- [CVE-2023-38683](https://cve.now/CVE-2023-38683.md): A vulnerability has been identified in JT2Go (All versions \< V14.2.0.5), Teamcenter Visualization V13.2 (All versions \< V13.2.0.14), Teamcen (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2023-38682](https://cve.now/CVE-2023-38682.md): A vulnerability has been identified in JT2Go (All versions \< V14.2.0.5), Teamcenter Visualization V13.2 (All versions \< V13.2.0.14), Teamcen (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2023-38681](https://cve.now/CVE-2023-38681.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-38680](https://cve.now/CVE-2023-38680.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-38679](https://cve.now/CVE-2023-38679.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-38641](https://cve.now/CVE-2023-38641.md): A vulnerability has been identified in SICAM TOOLBOX II (All versions \< V07.10). (CVSS 7.8, Siemens SICAM TOOLBOX II)
- [CVE-2023-38532](https://cve.now/CVE-2023-38532.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 3.3, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38531](https://cve.now/CVE-2023-38531.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38530](https://cve.now/CVE-2023-38530.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38529](https://cve.now/CVE-2023-38529.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38528](https://cve.now/CVE-2023-38528.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38527](https://cve.now/CVE-2023-38527.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Teamcenter Vi (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38526](https://cve.now/CVE-2023-38526.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38525](https://cve.now/CVE-2023-38525.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-38524](https://cve.now/CVE-2023-38524.md): A vulnerability has been identified in Parasolid V34.1 (All versions \< V34.1.258), Parasolid V35.0 (All versions \< V35.0.254), Parasolid V35 (CVSS 3.3, Siemens Parasolid · Siemens Teamcenter Visualization)
- [CVE-2023-37373](https://cve.now/CVE-2023-37373.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.4). (CVSS 5.3, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-37372](https://cve.now/CVE-2023-37372.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.4). (CVSS 9.8, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-30796](https://cve.now/CVE-2023-30796.md): A vulnerability has been identified in JT Open (All versions \< V11.4), JT Utilities (All versions \< V13.4). (CVSS 7.8, Siemens JT Open · Siemens JT Utilities)
- [CVE-2023-30795](https://cve.now/CVE-2023-30795.md): A vulnerability has been identified in JT Open (All versions \< V11.4), JT Utilities (All versions \< V13.4), Parasolid V34.0 (All versions \< (CVSS 7.8, Siemens JT Open · Siemens JT Utilities +1)
- [CVE-2023-28830](https://cve.now/CVE-2023-28830.md): A vulnerability has been identified in JT2Go (All versions \< V14.2.0.5), Solid Edge SE2022 (All versions \< V222.0 Update 13), Solid Edge SE2 (CVSS 7.8, Siemens JT2Go · Siemens Solid Edge SE2022 +2)
- [CVE-2023-27411](https://cve.now/CVE-2023-27411.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.4). (CVSS 8.8, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-24845](https://cve.now/CVE-2023-24845.md): A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, (CVSS 9.1, Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140)
- [CVE-2022-39062](https://cve.now/CVE-2022-39062.md): A vulnerability has been identified in SICAM TOOLBOX II (All versions \< V07.10). (CVSS 7.8, Siemens SICAM TOOLBOX II)
- [CVE-2021-41544](https://cve.now/CVE-2021-41544.md): A vulnerability has been identified in Siemens Software Center (All versions \< V3.0). (CVSS 7.8, Siemens Software Center)
- [CVE-2023-28577](https://cve.now/CVE-2023-28577.md): Multiple Dmabuf Kernel Address UAF Vulnerability (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-28576](https://cve.now/CVE-2023-28576.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver (CVSS 6.4, Qualcomm Snapdragon)
- [CVE-2023-28575](https://cve.now/CVE-2023-28575.md): Multiple Type Confusion Vulnerability (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-28561](https://cve.now/CVE-2023-28561.md): Buffer Copy Without Checking Size of Input in QESL (CVSS 9.8, Qualcomm Snapdragon)
- [CVE-2023-28555](https://cve.now/CVE-2023-28555.md): Buffer Over-read in Audio (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-28537](https://cve.now/CVE-2023-28537.md): Integer Overflow or Wraparound in Audio (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-22666](https://cve.now/CVE-2023-22666.md): Integer Overflow or Wraparound in Audio (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-21652](https://cve.now/CVE-2023-21652.md): Key Management Errors in HLOS (CVSS 7.7, Qualcomm Snapdragon)
- [CVE-2023-21651](https://cve.now/CVE-2023-21651.md): Incorrect Type Conversion or Cast in Core (CVSS 9.3, Qualcomm Snapdragon)
- [CVE-2023-21650](https://cve.now/CVE-2023-21650.md): Improper Validation of Array Index in GPS HLOS Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21649](https://cve.now/CVE-2023-21649.md): Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in WLAN (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21648](https://cve.now/CVE-2023-21648.md): Integer Overflow to Buffer Overflow in RIL (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21647](https://cve.now/CVE-2023-21647.md): Improper Input Validation in Bluetooth HOST (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2023-21643](https://cve.now/CVE-2023-21643.md): Untrusted Pointer Dereference in Automotive (CVSS 9.1, Qualcomm Snapdragon)
- [CVE-2023-21627](https://cve.now/CVE-2023-21627.md): Incorrect Type Conversion or Cast in Trusted Execution Environment (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21626](https://cve.now/CVE-2023-21626.md): Improper Authentication in HLOS. (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2023-21625](https://cve.now/CVE-2023-21625.md): Buffer Over-read in Network Services (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2022-40510](https://cve.now/CVE-2022-40510.md): Buffer copy without checking size of input in Audio. (CVSS 9.8, Qualcomm Snapdragon)
- [CVE-2023-3898](https://cve.now/CVE-2023-3898.md): SQLi in mAyaNets E-Commerce Software (CVSS 9.8, mAyaNet E-Commerce Software)
- [CVE-2023-4009](https://cve.now/CVE-2023-4009.md): Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager (CVSS 7.2, MongoDB Ops Manager)
- [CVE-2023-37570](https://cve.now/CVE-2023-37570.md): Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite (CVSS 7.2, ESDS Emagic Data Center Management Suite)
- [CVE-2023-37569](https://cve.now/CVE-2023-37569.md): OS Command Injection Vulnerability in Emagic Data Center Management Suite (CVSS 8.8, ESDS Emagic Data Center Management Suite)
- [CVE-2023-3569](https://cve.now/CVE-2023-3569.md): PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT (CVSS 4.9, PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX · PHOENIX CONTA… +1)
- [CVE-2023-3526](https://cve.now/CVE-2023-3526.md): PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices (CVSS 9.6, PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX · PHOENIX CONTA… +1)
- [CVE-2023-3570](https://cve.now/CVE-2023-3570.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 8.8, PHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4)
- [CVE-2023-3572](https://cve.now/CVE-2023-3572.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 10.0, PHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4)
- [CVE-2023-3571](https://cve.now/CVE-2023-3571.md): PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels (CVSS 8.8, PHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4)
- [CVE-2023-3573](https://cve.now/CVE-2023-3573.md): PHOENIX CONTACT: Command Injection in WP 6xxx Web panels (CVSS 8.8, PHOENIX CONTACT WP 6070-WVPS · PHOENIX CONTACT WP 6101-W… +4)
- [CVE-2023-37486](https://cve.now/CVE-2023-37486.md): Information Disclosure vulnerability in SAP Commerce (OCC API) (CVSS 5.9, SAP\_SE SAP Commerce)
- [CVE-2023-39440](https://cve.now/CVE-2023-39440.md): Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 4.4, SAP\_SE SAP BusinessObjects Business Intelligence)
- [CVE-2023-39439](https://cve.now/CVE-2023-39439.md): SAP Commerce accepts empty passphrases. (CVSS 8.8, SAP\_SE SAP Commerce)
- [CVE-2023-39437](https://cve.now/CVE-2023-39437.md): Cross-Site Scripting (XSS) vulnerability in SAP Business One (CVSS 7.6, SAP\_SE SAP Business One)
- [CVE-2023-39436](https://cve.now/CVE-2023-39436.md): Information Disclosure in SAP Supplier Relationship Management (CVSS 5.8, SAP\_SE SAP Supplier Relationship Management)
- [CVE-2023-37492](https://cve.now/CVE-2023-37492.md): Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform (CVSS 4.9, SAP\_SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2023-37491](https://cve.now/CVE-2023-37491.md): Improper Authorization check vulnerability in SAP Message Server (CVSS 7.5, SAP\_SE SAP Message Server)
- [CVE-2023-37490](https://cve.now/CVE-2023-37490.md): Binary hijack in SAP BusinessObjects Business Intelligence (Installer) (CVSS 7.6, SAP\_SE SAP BusinessObjects Business Intelligence)
- [CVE-2023-37488](https://cve.now/CVE-2023-37488.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process Integration (CVSS 6.1, SAP\_SE SAP NetWeaver Process Integration)
- [CVE-2023-37487](https://cve.now/CVE-2023-37487.md): Security misconfiguration vulnerability in SAP Business One (Service Layer) (CVSS 5.3, SAP\_SE SAP Business One)
- [CVE-2023-37484](https://cve.now/CVE-2023-37484.md): Information Disclosure Vulnerabilities in SAP PowerDesigner (CVSS 5.3, SAP\_SE SAP PowerDesigner)
- [CVE-2023-37483](https://cve.now/CVE-2023-37483.md): Improper Access Control Vulnerabilities in SAP PowerDesigner (CVSS 9.8, SAP\_SE SAP PowerDesigner)
- [CVE-2023-36926](https://cve.now/CVE-2023-36926.md): Information disclosure vulnerability in SAP Host Agent (CVSS 3.7, SAP\_SE SAP Host Agent)
- [CVE-2023-36923](https://cve.now/CVE-2023-36923.md): Code Injection vulnerability in SAP PowerDesigner (CVSS 7.8, SAP\_SE SAP PowerDesigner)
- [CVE-2023-33993](https://cve.now/CVE-2023-33993.md): SQL Injection vulnerability in SAP Business One B1i Layer (CVSS 7.1, SAP\_SE SAP Business One)
- [CVE-2023-24698](https://cve.now/CVE-2023-24698.md): Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory trav (no CVSS)
- [CVE-2023-26961](https://cve.now/CVE-2023-26961.md): Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. (no CVSS)
- [CVE-2023-33756](https://cve.now/CVE-2023-33756.md): An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal. (no CVSS)
- [CVE-2023-36136](https://cve.now/CVE-2023-36136.md): PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker (no CVSS)
- [CVE-2023-36306](https://cve.now/CVE-2023-36306.md): A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code v (no CVSS)
- [CVE-2023-36344](https://cve.now/CVE-2023-36344.md): An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting th (no CVSS)
- [CVE-2023-36482](https://cve.now/CVE-2023-36482.md): An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. (no CVSS)
- [CVE-2023-37646](https://cve.now/CVE-2023-37646.md): An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal. (no CVSS)
- [CVE-2023-37682](https://cve.now/CVE-2023-37682.md): Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php. (no CVSS)
- [CVE-2023-37683](https://cve.now/CVE-2023-37683.md): Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin. (no CVSS)
- [CVE-2023-37684](https://cve.now/CVE-2023-37684.md): Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Adm (no CVSS)
- [CVE-2023-37685](https://cve.now/CVE-2023-37685.md): Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin (no CVSS)
- [CVE-2023-37686](https://cve.now/CVE-2023-37686.md): Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin port (no CVSS)
- [CVE-2023-37687](https://cve.now/CVE-2023-37687.md): Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in th (no CVSS)
- [CVE-2023-37688](https://cve.now/CVE-2023-37688.md): Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page. (no CVSS)
- [CVE-2023-37689](https://cve.now/CVE-2023-37689.md): Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page. (no CVSS)
- [CVE-2023-37690](https://cve.now/CVE-2023-37690.md): Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page. (no CVSS)
- [CVE-2023-38758](https://cve.now/CVE-2023-38758.md): Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licens (no CVSS, wger)
- [CVE-2023-38759](https://cve.now/CVE-2023-38759.md): Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via (no CVSS, wger)
- [CVE-2023-38760](https://cve.now/CVE-2023-38760.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters (no CVSS)
- [CVE-2023-38761](https://cve.now/CVE-2023-38761.md): Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to th (no CVSS)
- [CVE-2023-38762](https://cve.now/CVE-2023-38762.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter wit (no CVSS)
- [CVE-2023-38763](https://cve.now/CVE-2023-38763.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter wit (no CVSS)
- [CVE-2023-38764](https://cve.now/CVE-2023-38764.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls para (no CVSS)
- [CVE-2023-38765](https://cve.now/CVE-2023-38765.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter with (no CVSS)
- [CVE-2023-38766](https://cve.now/CVE-2023-38766.md): Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to th (no CVSS)
- [CVE-2023-38767](https://cve.now/CVE-2023-38767.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' param (no CVSS)
- [CVE-2023-38768](https://cve.now/CVE-2023-38768.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter withi (no CVSS)
- [CVE-2023-38769](https://cve.now/CVE-2023-38769.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwha (no CVSS)
- [CVE-2023-38770](https://cve.now/CVE-2023-38770.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the (no CVSS)
- [CVE-2023-38771](https://cve.now/CVE-2023-38771.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within th (no CVSS)
- [CVE-2023-38773](https://cve.now/CVE-2023-38773.md): SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parame (no CVSS)
- [CVE-2023-39086](https://cve.now/CVE-2023-39086.md): ASUS RT-AC66U B1 3.0.0.4.286\_51665 was discovered to transmit sensitive information in cleartext. (no CVSS)
- [CVE-2023-39976](https://cve.now/CVE-2023-39976.md): log\_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. (no CVSS)
- [CVE-2023-39978](https://cve.now/CVE-2023-39978.md): ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw. (no CVSS)
- [CVE-2023-40041](https://cve.now/CVE-2023-40041.md): TOTOLINK T10\_v2 5.9c.5061\_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste\_modules/wps.so. (no CVSS)
- [CVE-2023-40042](https://cve.now/CVE-2023-40042.md): TOTOLINK T10\_v2 5.9c.5061\_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste\_modules/lan.so. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.