Security Vulnerabilities - CVEs Published In August 2023
Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVSS Score
8.0
EPSS Score
0.008
Published
2023-08-31
Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths.
See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details.
This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000.
CVSS Score
7.4
EPSS Score
0.0
Published
2023-08-31
A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator.
See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.
This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.
CVSS Score
8.2
EPSS Score
0.001
Published
2023-08-31
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions.
CVSS Score
5.5
EPSS Score
0.001
Published
2023-08-31
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979.
CVSS Score
8.8
EPSS Score
0.0
Published
2023-08-31
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
CVSS Score
7.8
EPSS Score
0.0
Published
2023-08-31
Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.1
EPSS Score
0.0
Published
2023-08-31
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.1
EPSS Score
0.0
Published
2023-08-31
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.9
EPSS Score
0.0
Published
2023-08-31
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-08-31