CVEs published August 14, 2023
135 CVEs were published on August 14, 2023: 9 critical, 19 high. 1 is now in CISA KEV.
- Published
- 135
- Critical
- 9
- High
- 19
- Medium
- 22
- Low
- 1
- Unrated
- 84
- Now in CISA KEV
- 1
- Fix available
- 39
Most affected products
- Google Android
- 40
- Apple macOS
- 11
- Dataprobe iBoot PDU
- 6
- Apple macOS · Apple iOS and iPadOS
- 3
- CyberPower PowerPanel Enterprise
- 3
- The OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- 3
- Apple iOS and iPadOS
- 2
- Ultimate Addons for Contact Form
- 2
- a3rev Software a3 Portfolio
- 1
- AdFoxly – Ad Manager, AdSense Ads & Ads.txt
- 1
Critical 9
- CVE-2023-20965In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code.Google Android
- CVE-2023-40020Improper Authentication in PrivateUploaderPrivateUploader
- CVE-2023-3267When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field.CyberPower PowerPanel Enterprise
- CVE-2023-3266A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checkCyberPower PowerPanel Enterprise
- CVE-2023-3265An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an atCyberPower PowerPanel Enterprise
- CVE-2023-3259The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass.Dataprobe iBoot PDU
- CVE-2023-29468The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_E
- CVE-2023-39292A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious ac
- CVE-2023-39293A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a maliciou
High 19
- CVE-2022-48503The issue was addressed with improved bounds checks.Apple macOS · Apple tvOS +3
- CVE-2023-21265In multiple locations, there are root CA certificates which need to be disabled.Google Android
- CVE-2023-40013Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in external-svg-loadershubhamjain svg-loader · external-svg-loader
- CVE-2023-38721IBM i privilege escalationIBM i
- CVE-2023-0872ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/usersThe OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- CVE-2023-38741IBM TXSeries for Multiplatforms denial of serviceIBM TXSeries for Multiplatforms
- CVE-2023-33013A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an auZyxel NBG6604 firmware
- CVE-2023-4322Heap-based Buffer Overflow in radareorg/radare2radareorg/radare2
- CVE-2023-28535WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)Paytm Payment Donation
- CVE-2023-30754WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)AdFoxly – Ad Manager, AdSense Ads & Ads.txt
- CVE-2023-30489WordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution Email Subscription Popup
- CVE-2023-30475WordPress Coupon Affiliates Plugin <= 5.4.5 is vulnerable to Cross Site Scripting (XSS)Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coup…
- CVE-2023-30483WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)Kiboko Labs Watu Quiz
- CVE-2023-4321Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpitcockpit-hq/cockpit
- CVE-2023-3160Local privilege escalation in security products for WindowsESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +7
- CVE-2023-3263The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the Dataprobe iBoot PDU
- CVE-2023-3261The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 liDataprobe iBoot PDU
- CVE-2023-3260The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parametDataprobe iBoot PDU
- CVE-2023-40283An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.
Medium, low and unrated 107
- CVE-2023-27948An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2020-36615An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2022-22646This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2022-46706A type confusion issue was addressed with improved state handling.Apple macOS · Apple Security Update - Catalina
- CVE-2022-32876A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2023-27939An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2023-28199An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple macOS
- CVE-2023-28198A use-after-free issue was addressed with improved memory management.Apple macOS · Apple iOS and iPadOS
- CVE-2022-22655An access issue was addressed with improvements to the sandbox.Apple macOS · Apple iOS and iPadOS
- CVE-2022-42828The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-26699A logic issue was addressed with improved state management.Apple macOS
- CVE-2022-46722A logic issue was addressed with improved checks.Apple macOS
- CVE-2023-28179The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-46725A spoofing issue existed in the handling of URLs.Apple iOS and iPadOS
- CVE-2023-32358A type confusion issue was addressed with improved checks.Apple macOS · Apple iOS and iPadOS
- CVE-2022-46724This issue was addressed by restricting options offered on a locked device.Apple iOS and iPadOS
- CVE-2023-27947An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2023-21229In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PenGoogle Android
- CVE-2023-21230In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi accesGoogle Android
- CVE-2023-21231In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-pGoogle Android
- CVE-2023-21232In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.Google Android
- CVE-2023-21233In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data.Google Android
- CVE-2023-21234In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PGoogle Android
- CVE-2023-21235In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permisGoogle Android
- CVE-2023-35689In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure deGoogle Android
- CVE-2023-21292In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confusedGoogle Android
- CVE-2023-21290In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition.Google Android
- CVE-2023-21289In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy.Google Android
- CVE-2023-21288In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check.Google Android
- CVE-2023-21287In multiple locations, there is a possible code execution due to type confusion.Google Android
- CVE-2023-21286In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check.Google Android
- CVE-2023-21285In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-21284In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper inGoogle Android
- CVE-2023-21283In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy.Google Android
- CVE-2023-21282In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21281In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the codGoogle Android
- CVE-2023-21280In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion.Google Android
- CVE-2023-21279In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy.Google Android
- CVE-2023-21278In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code.Google Android
- CVE-2023-21277In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check.Google Android
- CVE-2023-21276In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data.Google Android
- CVE-2023-21275In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections duGoogle Android
- CVE-2023-21274In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-21273In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21272In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation.Google Android
- CVE-2023-21271In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2023-21269In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL byGoogle Android
- CVE-2023-21268In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error.Google Android
- CVE-2023-21267In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic errorGoogle Android
- CVE-2023-21264In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place.Google Android
- CVE-2023-21242In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in theGoogle Android
- CVE-2023-21140In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission checkGoogle Android
- CVE-2023-21134In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission checkGoogle Android
- CVE-2023-21133In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission checkGoogle Android
- CVE-2023-21132In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission checkGoogle Android
- CVE-2023-38687Execution of arbitrary JavaScript from Svelecte item namesmskocik svelecte · svelecte
- CVE-2023-39950Insufficient input validation in efibootguardsiemens efibootguard
- CVE-2023-40023Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Readingyaklang · github.com/yaklang/yaklang
- CVE-2023-40024Reflected Cross-Site Scripting (XSS) in scancode.io license endpointnexB scancode.io · scancodeio
- CVE-2023-2606WP Brutal AI < 2.06 - Admin+ Stored XSSWP Brutal AI
- CVE-2023-3328Custom Field For WP Job Manager < 1.2 - Admin+ Stored XSSCustom Field For WP Job Manager
- CVE-2023-3601Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDORSimple Author Box
- CVE-2023-2802Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSSUltimate Addons for Contact Form
- CVE-2023-3435User Activity Log < 1.6.5 - Unauthenticated SQLiUser Activity Log
- CVE-2022-4953Elementor < 3.5.5 - Iframe InjectionElementor Website Builder
- CVE-2023-2803Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSSUltimate Addons for Contact Form
- CVE-2023-3645Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSSContact Form Builder by Bit Form
- CVE-2023-3721WP-EMail < 2.69.1 - Admin+ Stored Cross-Site ScriptingWP-EMail
- CVE-2023-40312Reflected XSS in multiple JSP files in opennms/opennmsThe OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- CVE-2023-40311Stored XSS in multiple JSP files in opennms/opennmsThe OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- CVE-2023-28768Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firZyxel XGS2220-30 firmware · Zyxel XMG1930-30 firmware +1
- CVE-2023-30752WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)Silvia Pfeiffer and Andrew Nimmo External Videos
- CVE-2023-30751WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)iControlWP Article Directory Redux
- CVE-2023-30749WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)ihomefinder Optima Express + MarketBoost IDX Plugin
- CVE-2023-30477WordPress AFFILIATE Solution Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Essitco AFFILIATE Solution
- CVE-2023-29097WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)a3rev Software a3 Portfolio
- CVE-2023-3264The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internalDataprobe iBoot PDU
- CVE-2023-3262The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internalDataprobe iBoot PDU
- CVE-2023-28480An issue was discovered in Tigergraph Enterprise 3.7.0.
- CVE-2023-28481An issue was discovered in Tigergraph Enterprise 3.7.0.
- CVE-2023-28482An issue was discovered in Tigergraph Enterprise 3.7.0.
- CVE-2023-28483An issue was discovered in Tigergraph Enterprise 3.7.0.
- CVE-2023-30186A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted
- CVE-2023-30187An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code
- CVE-2023-30188Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via c
- CVE-2023-31041An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.
- CVE-2023-32748The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with interna
- CVE-2023-37070Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-37847novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.
- CVE-2023-39827Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.
- CVE-2023-39828Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
- CVE-2023-39829Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.
- CVE-2023-39908The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata.
- CVE-2023-40274An issue was discovered in zola 0.13.0 through 0.17.2.zola
- CVE-2023-40291Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name
- CVE-2023-40292Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.
- CVE-2023-40293Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.
- CVE-2023-40294libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c.
- CVE-2023-40295libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.
- CVE-2023-40296async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP
- CVE-2023-40303GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin
- CVE-2023-40305GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
- CVE-2023-40354An issue was discovered in MariaDB MaxScale before 23.02.3.
- CVE-2023-40359xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor un
- CVE-2023-40360QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance gr
- CVE-2023-40453Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially
- CVE-2023-40518LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.