CVEs published August 20, 2023
14 CVEs were published on August 20, 2023: 0 critical, 1 high.
- Published
- 14
- Critical
- 0
- High
- 1
- Medium
- 8
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- SourceCodester Inventory Management System
- 3
- hamza417/inure
- 2
- SourceCodester Free Hospital Management System for Small Pr…
- 2
- cockpit-hq/cockpit
- 1
- SourceCodester Card Holder Management System
- 1
High 1
Medium, low and unrated 13
- CVE-2023-4441SourceCodester Free Hospital Management System for Small Practices appointment.php sql injectionSourceCodester Free Hospital Management System for Small Pr…
- CVE-2023-4440SourceCodester Free Hospital Management System for Small Practices appointment.php sql injectionSourceCodester Free Hospital Management System for Small Pr…
- CVE-2023-4439SourceCodester Card Holder Management System Minus Value unknown vulnerabilitySourceCodester Card Holder Management System
- CVE-2023-4438SourceCodester Inventory Management System search_sales_report.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4437SourceCodester Inventory Management System search_sell_paymen_report.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4436SourceCodester Inventory Management System edit_update.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4451Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpitcockpit-hq/cockpit
- CVE-2023-4434Missing Authorization in hamza417/inurehamza417/inure
- CVE-2022-24989TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for
- CVE-2023-36674An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1.
- CVE-2023-37250Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User"
- CVE-2023-37369In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a cr
- CVE-2023-40711Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attacker