Skip to content
OpenAdvisories

Archive

4 April 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-1826 Public exploit

    SourceCodester Online Computer and Laptop Store index.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted uplo…

  • Critical 9.8
    CVE-2023-1671 Exploited Public exploit Scanner template EPSS 100%

    A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.1…

    KEV Nov 16, 2023
  • High 8.8
    CVE-2023-25355 Public exploit

    CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run com…

  • High 7.5
    CVE-2023-26976 Public exploit EPSS 16%

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting…

  • Critical 9.8
    CVE-2023-26866 Public exploit

    GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP resp…

  • Medium 6.1
    CVE-2022-47870 Public exploit

    A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows …

  • Critical 9.8
    CVE-2021-28235 Public exploit

    Etcd-io Improper Authentication vulnerability

    Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.