Archive

8 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /8 September 2023 →

All Critical High Medium Low Exploited only Public exploit

70 results · Clear filters · Feed

Medium 5.9

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an…

Zoom Video Communications Zoom Desktop Client for Windows Windows

Aug 8, 2023
Medium 5.5

CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user…

Zoom Video Communications Zoom Client SDK for Windows Windows

Aug 8, 2023
Medium 6.5

CVE-2023-39951

Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. OpenTelemetry Java Instrumentation prior to version 1.28.0 contains an issue related to the instrumentation of Java applications using the A…

open-telemetry opentelemetry-java-instrumentation

Aug 8, 2023
Medium 6.2

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Alpine NuGet

Aug 8, 2023
Medium 5.4

CVE-2023-39518

social-media-skeleton stored Cross-site Scripting vulnerability

social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.

fobybus social-media-skeleton

Aug 8, 2023
Medium 6.1

CVE-2023-39218

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable in…

Zoom Video Communications Zoom Clients

Aug 8, 2023
Medium 5.3

CVE-2023-39217

Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service …

Zoom Video Communications Zoom SDK's

Aug 8, 2023
Medium 5.9

CVE-2023-36532

Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via netwo…

Zoom Video Communications Zoom Clients

Aug 8, 2023
Medium —

GHSA-7vh7-fw88-wj87

Several quadratic complexity bugs may lead to denial of service in Commonmarker

## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service. The following vulnerabilities were addressed: * [CV…

commonmarker RubyGems

Aug 8, 2023
Medium 6.5

CVE-2023-36894

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Aug 8, 2023
Medium 6.5

CVE-2023-36893

Microsoft Outlook Spoofing Vulnerability

Microsoft Outlook Spoofing Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Aug 8, 2023
Medium 6.5

CVE-2023-36890

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition

Aug 8, 2023
Medium 4.5

CVE-2023-36881

Azure Apache Ambari Spoofing Vulnerability

Azure Apache Ambari Spoofing Vulnerability

Microsoft Azure HDInsight

Aug 8, 2023
Medium 4.5

CVE-2023-36877

Azure Apache Oozie Spoofing Vulnerability

Azure Apache Oozie Spoofing Vulnerability

Microsoft Azure HDInsight

Aug 8, 2023
Medium 4.5

CVE-2023-38188

Azure Apache Hadoop Spoofing Vulnerability

Azure Apache Hadoop Spoofing Vulnerability

Microsoft Azure HDInsight

Aug 8, 2023
Medium 4.5

CVE-2023-35393

Azure Apache Hive Spoofing Vulnerability

Azure Apache Hive Spoofing Vulnerability

Microsoft Azure HDInsight

Aug 8, 2023
Medium 4.6

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

Microsoft Azure HDInsight

Aug 8, 2023
Medium 6.5

CVE-2023-35389

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0

Aug 8, 2023
Medium 5.4

CVE-2023-35384

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-35377

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-35376

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-38254

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 5.5

CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-36908

Windows Hyper-V Information Disclosure Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.5

CVE-2023-36909

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 5.5

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 5.5

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 5.5

CVE-2023-36905

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 5.5

CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 8, 2023
Medium 6.3

CVE-2023-36869

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

Microsoft Azure DevOps Server Azure DevOps Server 2020.1.2 Azure DevOps Server 2019.0.1

Aug 8, 2023
Medium 5.8

CVE-2023-3894

DOS in jackson-dataformats-text

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may sup…

FasterXML jackson-dataformats-text com.fasterxml.jackson.dataformat:jackson-dataformat-toml Maven

Aug 8, 2023
Medium 5.4

CVE-2023-3653

Stored XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS. This issue affects E-Commerce Software: before 11.

Digital Ant E-Commerce Software

Aug 8, 2023
Medium 6.1

CVE-2023-3652

Reflected XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11.

Digital Ant E-Commerce Software

Aug 8, 2023
Medium 5.9

CVE-2023-32292

WordPress Chat Button Plugin <= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GetButton Chat Button by GetButton.Io plugin <= 1.8.9.4 versions.

GetButton Chat Button by GetButton.io

Aug 8, 2023
Medium 5.9

CVE-2023-31221

WordPress PDQ CSV Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ransom Christofferson PDQ CSV plugin <= 1.0.0 versions.

Ransom Christofferson PDQ CSV

Aug 8, 2023
Medium 5.9

CVE-2023-28931

WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.

Never5 Post Connector

Aug 8, 2023
Medium 5.9

CVE-2023-28934

WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.

Mammothology WP Full Stripe Free

Aug 8, 2023
Medium 6.5

CVE-2023-28773

WordPress Secondary Title Plugin <= 2.0.9.1 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kolja Nolte Secondary Title plugin <= 2.0.9.1 versions.

Kolja Nolte Secondary Title

Aug 8, 2023
Medium 6.5

CVE-2023-30482

WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <= 1.0.10 versions.

villatheme WPBulky

Aug 8, 2023