Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2023

87 records · 14 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2022-39986
    69This week

    A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id p

    CriticalCVSS 9.8WeaponizedEPSS 99%

    raspap · raspapAug 1, 2023

  • CVE-2022-39987
    46Plan

    A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via t

    HighCVSS 8.8No exploitEPSS 37%

    raspap · raspapAug 1, 2023

  • CVE-2023-34634
    40Plan

    Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

    HighCVSS 7.8WeaponizedEPSS 7%

    getgreenshot · greenshotAug 1, 2023

  • CVE-2023-4050
    34Monitor

    In some cases, an untrusted input stream was copied to a stack buffer without checking its size.

    HighCVSS 7.5No exploitEPSS 12%

    mozilla · firefoxAug 1, 2023

  • CVE-2023-36210
    48Plan

    MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keywor

    CriticalCVSS 9.8No exploitEPSS 30%

    motocms · motocmsAug 1, 2023

  • CVE-2023-2164
    41Plan

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 66%

    gitlab · gitlabAug 1, 2023

  • CVE-2023-3364
    43Plan

    Inefficient Regular Expression Complexity in GitLab

    HighCVSS 7.5No exploitEPSS 44%

    gitlab · gitlabAug 1, 2023

  • CVE-2023-4068
    37Monitor

    Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML p

    HighCVSS 8.1No exploitEPSS 16%

    google · chromeAug 2, 2023

  • CVE-2023-4069
    42Plan

    Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8No exploitEPSS 24%

    google · chromeAug 2, 2023

  • CVE-2023-36212
    43Plan

    File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page fu

    HighCVSS 8.8No exploitEPSS 25%

    totalcms · total cmsAug 2, 2023

  • CVE-2023-36255
    51Plan

    An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path

    HighCVSS 8.8WeaponizedEPSS 53%

    eramba · erambaAug 2, 2023

  • CVE-2023-37679
    69This week

    A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting

    CriticalCVSS 9.8WeaponizedEPSS 99%

    nextgen · mirth connectAug 2, 2023

  • CVE-2023-4120
    58Plan

    Byzoro Smart S85F Management Platform importhtml.php command injection

    CriticalCVSS 9.8No exploitEPSS 62%

    byzoro · smart s85fAug 3, 2023

  • CVE-2023-35081
    77This week

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticat

    HighCVSS 7.2KEVWeaponizedEPSS 63%

    ivanti · endpoint manager mobileAug 3, 2023

  • CVE-2023-38950
    88Now

    A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via suppl

    HighCVSS 7.5KEVWeaponizedEPSS 92%

    zkteco · biotimeAug 3, 2023

  • CVE-2023-29689
    55Plan

    PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw.

    CriticalCVSS 9.8Proof of conceptEPSS 53%

    pyrocms · pyrocmsAug 4, 2023

  • CVE-2023-39143
    63This week

    PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.

    CriticalCVSS 9.8Proof of conceptEPSS 80%

    papercut · papercut mfAug 4, 2023

  • CVE-2023-4165
    43Plan

    Tongda OA delete_seal.php sql injection

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    tongda2000 · tongda office anywhereAug 5, 2023

  • CVE-2023-4166
    43Plan

    Tongda OA delete_log.php sql injection

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    tongda2000 · tongda office anywhereAug 5, 2023

  • CVE-2023-4168
    44Plan

    Templatecookie Adlisting Redirect ad-list information disclosure

    HighCVSS 7.5Proof of conceptEPSS 45%

    templatecookie · adlistingAug 5, 2023

  • CVE-2023-4169
    50Plan

    Ruijie RG-EW1200G Administrator Password set_passwd access control

    HighCVSS 8.8Proof of conceptEPSS 49%

    ruijie · rg-ew1200g firmwareAug 5, 2023

  • CVE-2023-4174
    27Monitor

    mooSocial mooStore cross site scripting

    MediumCVSS 6.1Proof of conceptEPSS 9%

    moosocial · moostoreAug 5, 2023

  • CVE-2023-38925
    40Plan

    Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in p

    HighCVSS 8.8No exploitEPSS 15%

    netgear · dc112a firmwareAug 7, 2023

  • CVE-2023-37569
    45Plan

    OS Command Injection Vulnerability in Emagic Data Center Management Suite

    HighCVSS 8.8Proof of conceptEPSS 33%

    esds.co · emagic data center managementAug 8, 2023

  • CVE-2023-20588
    25Monitor

    A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

    MediumCVSS 5.5No exploitEPSS 11%

    amd · epyc 7351p firmwareAug 8, 2023

  • CVE-2023-36900
    34Monitor

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 10%

    microsoft · windows 10Aug 8, 2023

  • CVE-2023-38181
    38Monitor

    Microsoft Exchange Server Spoofing Vulnerability

    HighCVSS 8.8No exploitEPSS 10%

    microsoft · exchange serverAug 8, 2023

  • CVE-2023-36899
    58Plan

    ASP.NET Elevation of Privilege Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 76%

    microsoft · .net frameworkAug 8, 2023

  • CVE-2023-38180
    64This week

    .NET and Visual Studio Denial of Service Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 14%

    microsoft · .netAug 8, 2023

  • CVE-2023-32781
    40Plan

    A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user wit

    HighCVSS 7.2WeaponizedEPSS 14%

    paessler · prtg network monitorAug 9, 2023

  • CVE-2023-32782
    45Plan

    A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wri

    HighCVSS 7.2No exploitEPSS 56%

    paessler · prtg network monitorAug 9, 2023

  • CVE-2023-30699
    39Monitor

    Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remot

    CriticalCVSS 9.8No exploitEPSS 0%

    samsung · androidAug 9, 2023

  • CVE-2023-35085
    39Monitor

    An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    ui · unifi uap firmwareAug 10, 2023

  • CVE-2023-38034
    39Monitor

    A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could

    CriticalCVSS 9.8No exploitEPSS 1%

    ui · unifi uap firmwareAug 10, 2023

  • CVE-2023-32560
    69This week

    An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary co

    CriticalCVSS 9.8WeaponizedEPSS 99%

    ivanti · avalancheAug 10, 2023

  • CVE-2023-32562
    53Plan

    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker t

    CriticalCVSS 9.8No exploitEPSS 45%

    ivanti · avalancheAug 10, 2023

  • CVE-2023-32563
    66This week

    An unauthenticated attacker could achieve the code execution through a RemoteControl server.

    CriticalCVSS 9.8Proof of conceptEPSS 89%

    ivanti · avalancheAug 10, 2023

  • CVE-2023-32564
    52Plan

    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker t

    CriticalCVSS 9.8No exploitEPSS 44%

    ivanti · avalancheAug 10, 2023

  • CVE-2023-3824
    46Plan

    Buffer overflow and overread in phar_dir_read()

    CriticalCVSS 9.8Proof of conceptEPSS 21%

    php · phpAug 11, 2023

  • CVE-2023-40303
    31Monitor

    GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin

    HighCVSS 7.8No exploitEPSS 0%

    gnu · inetutilsAug 14, 2023

  • CVE-2023-0872
    40Plan

    ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

    HighCVSS 8.0WeaponizedEPSS 3%

    opennms · horizonAug 14, 2023

  • CVE-2023-29468
    42Plan

    The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_E

    CriticalCVSS 9.8No exploitEPSS 10%

    ti · wilink8-wifi-mcp8Aug 14, 2023

  • CVE-2022-48503
    66This week

    The issue was addressed with improved bounds checks.

    HighCVSS 8.8KEVWeaponizedEPSS 3%

    apple · safariAug 14, 2023

  • CVE-2023-4347
    42Plan

    Cross-site Scripting (XSS) - Reflected in librenms/librenms

    MediumCVSS 5.4No exploitEPSS 69%

    librenms · librenmsAug 14, 2023

  • CVE-2023-2916
    28Monitor

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    MediumCVSS 5.3Proof of conceptEPSS 23%

    revmakx · infinitewp clientAug 15, 2023

  • CVE-2023-35082
    99Now

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resou

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    ivanti · endpoint manager mobileAug 15, 2023

  • CVE-2023-40028
    47Plan

    Arbitrary file read via symlinks in Ghost

    MediumCVSS 6.5Proof of conceptEPSS 68%

    ghost · ghostAug 15, 2023

  • CVE-2023-4355
    43Plan

    Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption v

    HighCVSS 8.8No exploitEPSS 27%

    google · chromeAug 15, 2023

  • CVE-2023-4357
    49Plan

    Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access re

    HighCVSS 8.8Proof of conceptEPSS 47%

    google · chromeAug 15, 2023

  • CVE-2023-4362
    41Plan

    Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process

    HighCVSS 8.8No exploitEPSS 19%

    google · chromeAug 15, 2023

  • CVE-2023-20209
    40Plan

    A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) cou

    HighCVSS 7.2Proof of conceptEPSS 40%

    cisco · telepresence video communication serverAug 16, 2023

  • CVE-2023-2914
    42Plan

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy

    HighCVSS 7.5No exploitEPSS 39%

    rockwellautomation · thinmanager thinserverAug 17, 2023

  • CVE-2023-2915
    61This week

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    CriticalCVSS 9.1WeaponizedEPSS 81%

    rockwellautomation · thinmanager thinserverAug 17, 2023

  • CVE-2023-2917
    61This week

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 72%

    rockwellautomation · thinmanager thinserverAug 17, 2023

  • CVE-2023-26469
    64This week

    In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

    CriticalCVSS 9.8WeaponizedEPSS 82%

    jorani · joraniAug 17, 2023

  • CVE-2023-40313
    35Monitor

    Disable BeanShell Interpreter Remote Server Mode

    HighCVSS 8.8No exploitEPSS 0%

    opennms · horizonAug 17, 2023

  • CVE-2023-36844
    78This week

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    MediumCVSS 5.3KEVWeaponizedEPSS 89%

    juniper · junosAug 17, 2023

  • CVE-2023-36845
    98Now

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    juniper · junosAug 17, 2023

  • CVE-2023-36846
    79This week

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    MediumCVSS 5.3KEVWeaponizedEPSS 93%

    juniper · junosAug 17, 2023

  • CVE-2023-36847
    76This week

    Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    MediumCVSS 5.3KEVWeaponizedEPSS 83%

    juniper · junosAug 17, 2023

  • CVE-2023-40315
    40Plan

    ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

    HighCVSS 8.0WeaponizedEPSS 2%

    opennms · horizonAug 17, 2023

  • CVE-2023-4415
    52Plan

    Ruijie RG-EW1200G login improper authentication

    HighCVSS 8.8Proof of conceptEPSS 58%

    ruijienetworks · rg-ew1200g firmwareAug 18, 2023

  • CVE-2022-24989
    60This week

    TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for

    CriticalCVSS 9.8WeaponizedEPSS 31%

    terra-master · terramaster operating systemAug 20, 2023

  • CVE-2023-39750
    43Plan

    D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6.

    CriticalCVSS 9.8No exploitEPSS 14%

    dlink · dap-2660 firmwareAug 20, 2023

  • CVE-2023-4450
    42Plan

    jeecgboot JimuReport Template injection

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    jeecg · jimureportAug 20, 2023

  • CVE-2023-38035
    99Now

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass a

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    ivanti · mobileiron sentryAug 21, 2023

  • CVE-2023-38836
    58Plan

    File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type c

    HighCVSS 8.8WeaponizedEPSS 76%

    boidcms · boidcmsAug 21, 2023

  • CVE-2023-37435
    26Monitor

    Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface

    MediumCVSS 6.5No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorAug 22, 2023

  • CVE-2023-37440
    21Monitor

    Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorAug 22, 2023

  • CVE-2023-39026
    35Monitor

    Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive i

    HighCVSS 7.5Proof of conceptEPSS 17%

    filemage · filemageAug 22, 2023

  • CVE-2023-4427
    47Plan

    Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read

    HighCVSS 8.1Proof of conceptEPSS 48%

    google · chromeAug 22, 2023

  • CVE-2023-4428
    35Monitor

    Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory rea

    HighCVSS 8.1No exploitEPSS 11%

    google · chromeAug 22, 2023

  • CVE-2023-38831
    91Now

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    rarlab · winrarAug 23, 2023

  • CVE-2023-40176
    45Plan

    SXSS in the user profile via the timezone displayer

    MediumCVSS 5.4No exploitEPSS 79%

    xwiki · xwikiAug 23, 2023

  • CVE-2023-41249
    41Plan

    In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step

    MediumCVSS 6.1No exploitEPSS 55%

    jetbrains · teamcityAug 25, 2023

  • CVE-2023-4542
    64This week

    D-Link DAR-8000-10 sys1.php os command injection

    CriticalCVSS 9.8Proof of conceptEPSS 84%

    dlink · dar-8000-10 firmwareAug 25, 2023

  • CVE-2023-4547
    26Monitor

    SPA-Cart eCommerce CMS search cross site scripting

    LowCVSS 2.0Proof of conceptEPSS 60%

    spa-cart · ecommerce cmsAug 26, 2023

  • CVE-2023-4548
    18Monitor

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    LowCVSS 2.1Proof of conceptEPSS 32%

    spa-cart · ecommerce cmsAug 26, 2023

  • CVE-2023-41109
    58Plan

    SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.

    CriticalCVSS 9.8Proof of conceptEPSS 64%

    patton · smartnode sn200 firmwareAug 28, 2023

  • CVE-2023-40787
    44Plan

    In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL

    CriticalCVSS 9.8No exploitEPSS 18%

    bladex · springbladeAug 29, 2023

  • CVE-2023-20890
    34Monitor

    Aria Operations for Networks contains an arbitrary file write vulnerability.

    HighCVSS 7.2No exploitEPSS 20%

    vmware · aria operations for networksAug 29, 2023

  • CVE-2023-34039
    60This week

    Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation.

    CriticalCVSS 9.8WeaponizedEPSS 67%

    vmware · aria operations for networksAug 29, 2023

  • CVE-2023-4346
    60This week

    KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and

    HighCVSS 7.5KEVWeaponizedEPSS 1%

    knx · connection authorizationAug 29, 2023

  • CVE-2023-41265
    95Now

    An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023

    CriticalCVSS 9.9KEVWeaponizedEPSS 88%

    qlik · qlik senseAug 29, 2023

  • CVE-2023-41266
    81Now

    A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 a

    MediumCVSS 6.5KEVWeaponizedEPSS 84%

    qlik · qlik senseAug 29, 2023

  • CVE-2023-4596
    43Plan

    Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    incsub · forminatorAug 29, 2023

  • CVE-2023-4481
    36Monitor

    Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

    HighCVSS 7.5No exploitEPSS 18%

    juniper · junosAug 31, 2023