# CVEs published 2023-08-22

190 CVEs were published on August 22, 2023: 1 critical, 16 high. Days are UTC.

- [CVE-2023-4431](https://cve.now/CVE-2023-4431.md): Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory r (no CVSS, Google Chrome)
- [CVE-2023-4430](https://cve.now/CVE-2023-4430.md): Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a cra (no CVSS, Google Chrome)
- [CVE-2023-4429](https://cve.now/CVE-2023-4429.md): Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a cra (no CVSS, Google Chrome)
- [CVE-2023-4428](https://cve.now/CVE-2023-4428.md): Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory rea (CVSS 8.1, Google Chrome)
- [CVE-2023-4427](https://cve.now/CVE-2023-4427.md): Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read (no CVSS, Google Chrome)
- [CVE-2023-40370](https://cve.now/CVE-2023-40370.md): IBM Robotic Process Automation information disclosure (CVSS 3.7, IBM Robotic Process Automation)
- [CVE-2023-38733](https://cve.now/CVE-2023-38733.md): IBM Robotic Process Automation information disclosure (CVSS 4.3, IBM Robotic Process Automation)
- [CVE-2023-38734](https://cve.now/CVE-2023-38734.md): IBM Robotic Process Automation privilege escalation (CVSS 6.6, IBM Robotic Process Automation)
- [CVE-2023-33850](https://cve.now/CVE-2023-33850.md): IBM GSKit-Crypto information disclosure (CVSS 7.5, IBM TXSeries for Multiplatforms · IBM CICS TX Standard +1)
- [CVE-2023-37440](https://cve.now/CVE-2023-37440.md): Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure (CVSS 5.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37439](https://cve.now/CVE-2023-37439.md): Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface (CVSS 6.1, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37438](https://cve.now/CVE-2023-37438.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37437](https://cve.now/CVE-2023-37437.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37436](https://cve.now/CVE-2023-37436.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37435](https://cve.now/CVE-2023-37435.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37434](https://cve.now/CVE-2023-37434.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37433](https://cve.now/CVE-2023-37433.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37432](https://cve.now/CVE-2023-37432.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37431](https://cve.now/CVE-2023-37431.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37430](https://cve.now/CVE-2023-37430.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37429](https://cve.now/CVE-2023-37429.md): Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface (CVSS 6.5, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37428](https://cve.now/CVE-2023-37428.md): Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37427](https://cve.now/CVE-2023-37427.md): Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37426](https://cve.now/CVE-2023-37426.md): Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator (CVSS 7.4, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37425](https://cve.now/CVE-2023-37425.md): Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 8.0, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37424](https://cve.now/CVE-2023-37424.md): Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface (CVSS 8.1, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37423](https://cve.now/CVE-2023-37423.md): Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface (CVSS 8.1, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37422](https://cve.now/CVE-2023-37422.md): Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface (CVSS 8.1, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-37421](https://cve.now/CVE-2023-37421.md): Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface (CVSS 8.1, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchest…)
- [CVE-2023-4212](https://cve.now/CVE-2023-4212.md): Trane Thermostats Injection (CVSS 6.8, ​Trane Technologies XL824 Thermostat · ​Trane Technologi… +2)
- [CVE-2022-44729](https://cve.now/CVE-2022-44729.md): Apache XML Graphics Batik: Information disclosure vulnerability (no CVSS, Apache Software Foundation Apache XML Graphics Batik · o… +2)
- [CVE-2022-44730](https://cve.now/CVE-2022-44730.md): Apache XML Graphics Batik: Information disclosure vulnerability (no CVSS, Apache Software Foundation Apache XML Graphics Batik · org.…)
- [CVE-2023-38732](https://cve.now/CVE-2023-38732.md): IBM Robotic Process Automation information disclosure (CVSS 4.3, IBM Robotic Process Automation)
- [CVE-2023-24517](https://cve.now/CVE-2023-24517.md): Remote Code Execution via Unrestricted File Upload (CVSS 6.4, Artica PFMS Pandora FMS)
- [CVE-2023-24516](https://cve.now/CVE-2023-24516.md): Stored Cross Site Scripting - Special Days Module (CVSS 5.9, Artica PFMS Pandora FMS)
- [CVE-2023-24514](https://cve.now/CVE-2023-24514.md): Stored Cross Site Scripting Vulnerability in Visual Console Module (CVSS 6.3, Artica PFMS Pandora FMS)
- [CVE-2023-24515](https://cve.now/CVE-2023-24515.md): Server side request forgery in api checker (CVSS 5.2, Artica PFMS Pandora FMS)
- [CVE-2023-4475](https://cve.now/CVE-2023-4475.md): An Arbitrary File Movement vulnerability was found on the ADM (CVSS 7.5, ASUSTOR ADM)
- [CVE-2023-3699](https://cve.now/CVE-2023-3699.md): An Improper Privilege Management vulnerability was found on the ADM (CVSS 8.7, ASUSTOR ADM)
- [CVE-2020-18232](https://cve.now/CVE-2020-18232.md): Buffer Overflow vulnerability in function H5S\_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of cr (no CVSS)
- [CVE-2020-18378](https://cve.now/CVE-2020-18378.md): A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. (CVSS 6.5)
- [CVE-2020-18382](https://cve.now/CVE-2020-18382.md): Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block\*) in Binaryen 1.38.26. (no CVSS)
- [CVE-2020-18494](https://cve.now/CVE-2020-18494.md): Buffer Overflow vulnerability in function H5S\_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of cr (no CVSS)
- [CVE-2020-18651](https://cve.now/CVE-2020-18651.md): Buffer Overflow vulnerability in function ID3\_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to caus (no CVSS)
- [CVE-2020-18652](https://cve.now/CVE-2020-18652.md): Buffer Overflow vulnerability in WEBP\_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via openi (no CVSS)
- [CVE-2020-18768](https://cve.now/CVE-2020-18768.md): There exists one heap buffer overflow in \_TIFFmemcpy in tif\_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service (no CVSS)
- [CVE-2020-18770](https://cve.now/CVE-2020-18770.md): An issue was discovered in function zzip\_disk\_entry\_to\_file\_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. (no CVSS)
- [CVE-2020-18780](https://cve.now/CVE-2020-18780.md): A Use After Free vulnerability in function new\_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via craf (no CVSS)
- [CVE-2020-18781](https://cve.now/CVE-2020-18781.md): Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, thi (no CVSS)
- [CVE-2020-18831](https://cve.now/CVE-2020-18831.md): Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service (no CVSS, exiv2)
- [CVE-2020-18839](https://cve.now/CVE-2020-18839.md): Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. (no CVSS)
- [CVE-2020-19185](https://cve.now/CVE-2020-19185.md): Buffer Overflow vulnerability in one\_one\_mapping function in progs/dump\_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denia (no CVSS)
- [CVE-2020-19186](https://cve.now/CVE-2020-19186.md): Buffer Overflow vulnerability in \_nc\_find\_entry function in tinfo/comp\_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2020-19187](https://cve.now/CVE-2020-19187.md): Buffer Overflow vulnerability in fmt\_entry function in progs/dump\_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2020-19188](https://cve.now/CVE-2020-19188.md): Buffer Overflow vulnerability in fmt\_entry function in progs/dump\_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2020-19189](https://cve.now/CVE-2020-19189.md): Buffer Overflow vulnerability in postprocess\_terminfo function in tinfo/parse\_entry.c:997 in ncurses 6.1 allows remote attackers to cause a (no CVSS)
- [CVE-2020-19190](https://cve.now/CVE-2020-19190.md): Buffer Overflow vulnerability in \_nc\_find\_entry in tinfo/comp\_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2020-19724](https://cve.now/CVE-2020-19724.md): A memory consumption issue in get\_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via cra (no CVSS)
- [CVE-2020-19725](https://cve.now/CVE-2020-19725.md): There is a use-after-free vulnerability in file pdd\_simplifier.cpp in Z3 before 4.8.8. (no CVSS)
- [CVE-2020-19726](https://cve.now/CVE-2020-19726.md): An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory o (no CVSS)
- [CVE-2020-19909](https://cve.now/CVE-2020-19909.md): Integer overflow vulnerability in tool\_operate.c in curl 7.65.2 via a large value as the retry delay. (no CVSS)
- [CVE-2020-20813](https://cve.now/CVE-2020-20813.md): Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. (no CVSS)
- [CVE-2020-21047](https://cve.now/CVE-2020-21047.md): The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused b (no CVSS)
- [CVE-2020-21426](https://cve.now/CVE-2020-21426.md): Buffer Overflow vulnerability in function C\_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code (no CVSS)
- [CVE-2020-21427](https://cve.now/CVE-2020-21427.md): Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary co (CVSS 7.8)
- [CVE-2020-21428](https://cve.now/CVE-2020-21428.md): Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cau (CVSS 3.3)
- [CVE-2020-21469](https://cve.now/CVE-2020-21469.md): An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. (no CVSS)
- [CVE-2020-21490](https://cve.now/CVE-2020-21490.md): An issue was discovered in GNU Binutils 2.34. (no CVSS)
- [CVE-2020-21528](https://cve.now/CVE-2020-21528.md): A Segmentation Fault issue discovered in in ieee\_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a d (no CVSS)
- [CVE-2020-21583](https://cve.now/CVE-2020-21583.md): An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path paramet (no CVSS)
- [CVE-2020-21679](https://cve.now/CVE-2020-21679.md): Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2020-21685](https://cve.now/CVE-2020-21685.md): Buffer Overflow vulnerability in hash\_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via c (no CVSS)
- [CVE-2020-21686](https://cve.now/CVE-2020-21686.md): A stack-use-after-scope issue discovered in expand\_mmac\_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause (no CVSS)
- [CVE-2020-21687](https://cve.now/CVE-2020-21687.md): Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted (no CVSS)
- [CVE-2020-21699](https://cve.now/CVE-2020-21699.md): The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the (no CVSS)
- [CVE-2020-21710](https://cve.now/CVE-2020-21710.md): A divide by zero issue discovered in eps\_print\_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a de (no CVSS)
- [CVE-2020-21722](https://cve.now/CVE-2020-21722.md): Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. (no CVSS)
- [CVE-2020-21723](https://cve.now/CVE-2020-21723.md): A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote (no CVSS)
- [CVE-2020-21724](https://cve.now/CVE-2020-21724.md): Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run (no CVSS)
- [CVE-2020-21890](https://cve.now/CVE-2020-21890.md): Buffer Overflow vulnerability in clj\_media\_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a (no CVSS)
- [CVE-2020-21896](https://cve.now/CVE-2020-21896.md): A Use After Free vulnerability in svg\_dev\_text\_span\_as\_paths\_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allo (no CVSS)
- [CVE-2020-22181](https://cve.now/CVE-2020-22181.md): A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bi (no CVSS)
- [CVE-2020-22217](https://cve.now/CVE-2020-22217.md): Buffer overflow vulnerability in c-ares before 1\_16\_1 thru 1\_17\_0 via function ares\_parse\_soa\_reply in ares\_parse\_soa\_reply.c. (no CVSS)
- [CVE-2020-22218](https://cve.now/CVE-2020-22218.md): An issue was discovered in function \_libssh2\_packet\_add in libssh2 1.10.0 allows attackers to access out of bounds memory. (no CVSS)
- [CVE-2020-22219](https://cve.now/CVE-2020-22219.md): Buffer Overflow vulnerability in function bitwriter\_grow\_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted inp (no CVSS)
- [CVE-2020-22524](https://cve.now/CVE-2020-22524.md): Buffer Overflow vulnerability in FreeImage\_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service vi (CVSS 6.5)
- [CVE-2020-22570](https://cve.now/CVE-2020-22570.md): Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. (no CVSS)
- [CVE-2020-22628](https://cve.now/CVE-2020-22628.md): Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\\src\\postprocessing\\aspect\_ratio.cpp. (no CVSS)
- [CVE-2020-22916](https://cve.now/CVE-2020-22916.md): An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. (CVSS 5.5)
- [CVE-2020-23793](https://cve.now/CVE-2020-23793.md): An issue was discovered in spice-server spice-server-0.14.0-6.el7\_6.1.x86\_64 of Redhat's VDI product. (no CVSS)
- [CVE-2020-23804](https://cve.now/CVE-2020-23804.md): Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. (no CVSS)
- [CVE-2020-23992](https://cve.now/CVE-2020-23992.md): Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request (no CVSS)
- [CVE-2020-24113](https://cve.now/CVE-2020-24113.md): Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive i (no CVSS)
- [CVE-2020-24292](https://cve.now/CVE-2020-24292.md): Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 \[r1859\] allows remote attackers to run arbitrary code vi (no CVSS)
- [CVE-2020-24293](https://cve.now/CVE-2020-24293.md): Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 \[r1859\] allows remote attackers to run arbitrary co (no CVSS)
- [CVE-2020-24294](https://cve.now/CVE-2020-24294.md): Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 \[r1859\] allows remote attackers to cuase (no CVSS)
- [CVE-2020-24295](https://cve.now/CVE-2020-24295.md): Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 \[r1859\] allows remote attackers to ru narbitrary code vi (no CVSS)
- [CVE-2020-25887](https://cve.now/CVE-2020-25887.md): Buffer overflow in mg\_resolve\_from\_hosts\_file in Mongoose 6.18, when reading from a crafted hosts file. (no CVSS)
- [CVE-2020-26652](https://cve.now/CVE-2020-26652.md): An issue was discovered in function nl80211\_send\_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. (no CVSS)
- [CVE-2020-26683](https://cve.now/CVE-2020-26683.md): A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information. (no CVSS)
- [CVE-2020-27418](https://cve.now/CVE-2020-27418.md): A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon\_invert\_region() (no CVSS)
- [CVE-2020-35342](https://cve.now/CVE-2020-35342.md): GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x\_print\_cond (file opcodes/tic4x-dis.c) which could allow a (no CVSS)
- [CVE-2020-35357](https://cve.now/CVE-2020-35357.md): A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 a (no CVSS)
- [CVE-2021-29390](https://cve.now/CVE-2021-29390.md): libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress\_smooth\_data in jdcoefct.c. (no CVSS)
- [CVE-2021-30047](https://cve.now/CVE-2021-30047.md): VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. (no CVSS)
- [CVE-2021-32292](https://cve.now/CVE-2021-32292.md): An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. (no CVSS, json-c)
- [CVE-2021-32420](https://cve.now/CVE-2021-32420.md): dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. (no CVSS)
- [CVE-2021-32421](https://cve.now/CVE-2021-32421.md): dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. (CVSS 7.5)
- [CVE-2021-32422](https://cve.now/CVE-2021-32422.md): dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. (no CVSS)
- [CVE-2021-33388](https://cve.now/CVE-2021-33388.md): dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y (no CVSS)
- [CVE-2021-33390](https://cve.now/CVE-2021-33390.md): dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. (no CVSS)
- [CVE-2021-34193](https://cve.now/CVE-2021-34193.md): Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. (no CVSS)
- [CVE-2021-35309](https://cve.now/CVE-2021-35309.md): An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. (no CVSS)
- [CVE-2021-40211](https://cve.now/CVE-2021-40211.md): An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. (no CVSS)
- [CVE-2021-40262](https://cve.now/CVE-2021-40262.md): A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. (no CVSS)
- [CVE-2021-40263](https://cve.now/CVE-2021-40263.md): A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp. (no CVSS)
- [CVE-2021-40264](https://cve.now/CVE-2021-40264.md): NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage\_CloneTag function inFreeImageTag.cpp. (no CVSS)
- [CVE-2021-40265](https://cve.now/CVE-2021-40265.md): A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. (no CVSS)
- [CVE-2021-40266](https://cve.now/CVE-2021-40266.md): FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. (no CVSS)
- [CVE-2021-43171](https://cve.now/CVE-2021-43171.md): Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in co (no CVSS)
- [CVE-2021-46174](https://cve.now/CVE-2021-46174.md): Heap-based Buffer Overflow in function bfd\_getl32 in Binutils objdump 3.37. (no CVSS)
- [CVE-2021-46179](https://cve.now/CVE-2021-46179.md): Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx (no CVSS)
- [CVE-2021-46310](https://cve.now/CVE-2021-46310.md): An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. (no CVSS)
- [CVE-2021-46312](https://cve.now/CVE-2021-46312.md): An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. (no CVSS)
- [CVE-2022-25024](https://cve.now/CVE-2022-25024.md): The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, (no CVSS, json2xml)
- [CVE-2022-26592](https://cve.now/CVE-2022-26592.md): Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has\_real\_parent\_ref function. (no CVSS)
- [CVE-2022-28068](https://cve.now/CVE-2022-28068.md): A heap buffer overflow in r\_sleb128 function in radare2 5.4.2 and 5.4.0. (no CVSS)
- [CVE-2022-28069](https://cve.now/CVE-2022-28069.md): A heap buffer overflow in vax\_opfunction in radare2 5.4.2 and 5.4.0. (CVSS 7.5)
- [CVE-2022-28070](https://cve.now/CVE-2022-28070.md): A null pointer deference in \_\_core\_anal\_fcn function in radare2 5.4.2 and 5.4.0. (CVSS 7.5)
- [CVE-2022-28071](https://cve.now/CVE-2022-28071.md): A use after free in r\_reg\_get\_name\_idx function in radare2 5.4.2 and 5.4.0. (no CVSS)
- [CVE-2022-28072](https://cve.now/CVE-2022-28072.md): A heap buffer overflow in r\_read\_le32 function in radare25.4.2 and 5.4.0. (no CVSS)
- [CVE-2022-28073](https://cve.now/CVE-2022-28073.md): A use after free in r\_reg\_set\_value function in radare2 5.4.2 and 5.4.0. (no CVSS)
- [CVE-2022-29654](https://cve.now/CVE-2022-29654.md): Buffer overflow vulnerability in quote\_for\_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via craf (no CVSS)
- [CVE-2022-34038](https://cve.now/CVE-2022-34038.md): Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. (no CVSS)
- [CVE-2022-35205](https://cve.now/CVE-2022-35205.md): An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display\_debug\_names allows attackers to cause a (CVSS 5.5)
- [CVE-2022-35206](https://cve.now/CVE-2022-35206.md): Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read\_and\_display\_attr\_value in file dwarf.c. (no CVSS)
- [CVE-2022-36648](https://cve.now/CVE-2022-36648.md): The hardware emulation in the of\_dpa\_cmd\_add\_l2\_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers (no CVSS)
- [CVE-2022-37050](https://cve.now/CVE-2022-37050.md): In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by craf (CVSS 6.5)
- [CVE-2022-37051](https://cve.now/CVE-2022-37051.md): An issue was discovered in Poppler 22.07.0. (no CVSS)
- [CVE-2022-37052](https://cve.now/CVE-2022-37052.md): A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. (no CVSS)
- [CVE-2022-38349](https://cve.now/CVE-2022-38349.md): An issue was discovered in Poppler 22.08.0. (no CVSS)
- [CVE-2022-40090](https://cve.now/CVE-2022-40090.md): An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF fi (no CVSS)
- [CVE-2022-41444](https://cve.now/CVE-2022-41444.md): Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs\_new.php. (no CVSS)
- [CVE-2022-43357](https://cve.now/CVE-2022-43357.md): Stack overflow vulnerability in ast\_selectors.cpp in function Sass::CompoundSelector::has\_real\_parent\_ref in libsass:3.6.5-8-g210218, which (no CVSS)
- [CVE-2022-43358](https://cve.now/CVE-2022-43358.md): Stack overflow vulnerability in ast\_selectors.cpp: in function Sass::ComplexSelector::has\_placeholder in libsass:3.6.5-8-g210218, which can (no CVSS)
- [CVE-2022-44215](https://cve.now/CVE-2022-44215.md): There is an open redirect vulnerability in Titan FTP server 19.0 and below. (no CVSS)
- [CVE-2022-44840](https://cve.now/CVE-2022-44840.md): Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find\_section\_in\_set in file readelf.c. (no CVSS)
- [CVE-2022-45582](https://cve.now/CVE-2022-45582.md): Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success\_url parameter. (no CVSS, horizon)
- [CVE-2022-45611](https://cve.now/CVE-2022-45611.md): An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via capture of user login i (no CVSS)
- [CVE-2022-45703](https://cve.now/CVE-2022-45703.md): Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display\_debug\_section in file readelf.c. (no CVSS)
- [CVE-2022-47007](https://cve.now/CVE-2022-47007.md): An issue was discovered function stab\_demangle\_v3\_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service d (no CVSS)
- [CVE-2022-47008](https://cve.now/CVE-2022-47008.md): An issue was discovered function make\_tempdir, and make\_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial (no CVSS)
- [CVE-2022-47010](https://cve.now/CVE-2022-47010.md): An issue was discovered function pr\_function\_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due t (no CVSS)
- [CVE-2022-47011](https://cve.now/CVE-2022-47011.md): An issue was discovered function parse\_stab\_struct\_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of servi (no CVSS)
- [CVE-2022-47022](https://cve.now/CVE-2022-47022.md): An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset (no CVSS)
- [CVE-2022-47069](https://cve.now/CVE-2022-47069.md): p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/ (no CVSS)
- [CVE-2022-47673](https://cve.now/CVE-2022-47673.md): An issue was discovered in Binutils addr2line before 2.39.3, function parse\_module contains multiple out of bound reads which may cause a de (no CVSS)
- [CVE-2022-47695](https://cve.now/CVE-2022-47695.md): An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via functi (no CVSS)
- [CVE-2022-47696](https://cve.now/CVE-2022-47696.md): An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via functi (no CVSS)
- [CVE-2022-48063](https://cve.now/CVE-2022-48063.md): GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load\_separate\_debug\_files (no CVSS)
- [CVE-2022-48064](https://cve.now/CVE-2022-48064.md): GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd\_dwarf2\_find\_nearest\_li (no CVSS)
- [CVE-2022-48065](https://cve.now/CVE-2022-48065.md): GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find\_abstract\_instance in dwarf2.c. (no CVSS)
- [CVE-2022-48174](https://cve.now/CVE-2022-48174.md): There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. (no CVSS)
- [CVE-2022-48522](https://cve.now/CVE-2022-48522.md): In Perl 5.34.0, function S\_find\_uninit\_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalat (no CVSS)
- [CVE-2022-48538](https://cve.now/CVE-2022-48538.md): In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti\_ldap (no CVSS)
- [CVE-2022-48541](https://cve.now/CVE-2022-48541.md): A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command (no CVSS)
- [CVE-2022-48545](https://cve.now/CVE-2022-48545.md): An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. (no CVSS)
- [CVE-2022-48547](https://cve.now/CVE-2022-48547.md): A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary (no CVSS)
- [CVE-2022-48554](https://cve.now/CVE-2022-48554.md): File before 5.43 has an stack-based buffer over-read in file\_copystr in funcs.c. (no CVSS)
- [CVE-2022-48560](https://cve.now/CVE-2022-48560.md): A use-after-free exists in Python through 3.9 via heappushpop in heapq. (no CVSS, libpython · python +1)
- [CVE-2022-48564](https://cve.now/CVE-2022-48564.md): read\_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malforme (no CVSS)
- [CVE-2022-48565](https://cve.now/CVE-2022-48565.md): An XML External Entity (XXE) issue was discovered in Python through 3.9.1. (no CVSS)
- [CVE-2022-48566](https://cve.now/CVE-2022-48566.md): An issue was discovered in compare\_digest in Lib/hmac.py in Python through 3.9.1. (no CVSS)
- [CVE-2022-48570](https://cve.now/CVE-2022-48570.md): Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. (no CVSS)
- [CVE-2022-48571](https://cve.now/CVE-2022-48571.md): memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. (no CVSS)
- [CVE-2023-23563](https://cve.now/CVE-2023-23563.md): An issue was discovered in Geomatika IsiGeo Web 6.0. (no CVSS)
- [CVE-2023-23564](https://cve.now/CVE-2023-23564.md): An issue was discovered in Geomatika IsiGeo Web 6.0. (no CVSS)
- [CVE-2023-23565](https://cve.now/CVE-2023-23565.md): An issue was discovered in Geomatika IsiGeo Web 6.0. (no CVSS)
- [CVE-2023-34853](https://cve.now/CVE-2023-34853.md): Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of Smc (no CVSS)
- [CVE-2023-36281](https://cve.now/CVE-2023-36281.md): An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load\_prompt. (CVSS 9.8, langchain)
- [CVE-2023-38665](https://cve.now/CVE-2023-38665.md): Null pointer dereference in ieee\_write\_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). (no CVSS)
- [CVE-2023-38666](https://cve.now/CVE-2023-38666.md): Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4\_Processor::ProcessFragments function in mp4encrypt. (no CVSS)
- [CVE-2023-38667](https://cve.now/CVE-2023-38667.md): Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service. (no CVSS)
- [CVE-2023-38668](https://cve.now/CVE-2023-38668.md): Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash). (no CVSS)
- [CVE-2023-38908](https://cve.now/CVE-2023-38908.md): An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application (no CVSS)
- [CVE-2023-38909](https://cve.now/CVE-2023-38909.md): An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application (no CVSS)
- [CVE-2023-38996](https://cve.now/CVE-2023-38996.md): An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command. (no CVSS)
- [CVE-2023-39026](https://cve.now/CVE-2023-39026.md): Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive i (no CVSS)
- [CVE-2023-39141](https://cve.now/CVE-2023-39141.md): webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability. (no CVSS, webui-aria2)
- [CVE-2023-39599](https://cve.now/CVE-2023-39599.md): Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.