6 July 2023

204 results · Feed

• Medium 6.2
  CVE-2023-30642

  Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attac…

  Samsung Mobile Samsung Mobile Devices
  Jul 6, 2023
• Medium 4.3
  CVE-2023-30641

  Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restr…

  Samsung Mobile Samsung Mobile Devices
  Jul 6, 2023
• Medium 4.3
  CVE-2023-30640

  Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers t…

  Samsung Mobile Samsung Mobile Devices
  Jul 6, 2023
• Medium 5.4
  CVE-2023-3521 Scanner template

  Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

  Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.

  FOSSBilling fossbilling/fossbilling
  Jul 6, 2023
• Medium 4.3
  CVE-2023-3520

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6.

  it-novum it-novum/openitcockpit
  Jul 6, 2023
• Unscored —
  CVE-2020-21861

  File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

  Jul 6, 2023
• Unscored —
  CVE-2020-21862

  Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.

  Jul 6, 2023
• Unscored —
  CVE-2020-22336

  An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in …

  pdfcrack pdfcrack Debian Ubuntu
  Jul 6, 2023
• Critical 9.0
  CVE-2023-34192 Exploited Scanner template EPSS 77%

  Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary c…

  Jul 6, 2023

  KEV Feb 25, 2025
• Unscored —
  CVE-2023-34193

  File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and ob…

  Jul 6, 2023
• Unscored —
  CVE-2023-29656

  An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and l…

  Jul 6, 2023
• Unscored —
  CVE-2023-29382

  An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preau…

  Jul 6, 2023
• Critical 9.8
  CVE-2023-29824

  A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor a…

  scipy scipy Debian PyPI
  Jul 6, 2023
• Unscored —
  CVE-2023-29381

  An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain se…

  Jul 6, 2023
• Critical 9.8
  CVE-2023-36188

  langchain vulnerable to arbitrary code execution

  An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.

  langchain PyPI
  Jul 6, 2023
• Unscored —
  CVE-2023-36970

  A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web s…

  Jul 6, 2023
• Unscored —
  CVE-2023-36968

  A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by…

  Jul 6, 2023
• High 7.5
  CVE-2023-36189

  langchain SQL Injection vulnerability

  SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.

  langchain PyPI
  Jul 6, 2023
• Unscored —
  CVE-2023-36995

  TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs,…

  Jul 6, 2023
• Unscored —
  CVE-2023-36969 Public exploit EPSS 49%

  CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.

  Jul 6, 2023
• Unscored —
  CVE-2023-24256

  An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileg…

  Jul 6, 2023
• Unscored —
  CVE-2023-27225

  A cross-site scripting (XSS) vulnerability in User Registration & Login and User Management System with Admin Panel v3 …

  Jul 6, 2023
• Unscored —
  CVE-2023-30319

  Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine c…

  Jul 6, 2023
• Unscored —
  CVE-2023-30326

  Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine…

  Jul 6, 2023
• Unscored —
  CVE-2023-30320

  Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine …

  Jul 6, 2023
• Unscored —
  CVE-2023-30321

  Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngin…

  Jul 6, 2023
• Unscored —
  CVE-2023-30322

  Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.…

  Jul 6, 2023
• Unscored —
  CVE-2023-30323

  SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows att…

  Jul 6, 2023
• Unscored —
  CVE-2023-30325

  SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, al…

  Jul 6, 2023
• High 7.5
  CVE-2023-30195

  In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can…

  Jul 6, 2023
• Unscored —
  CVE-2023-37122

  A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts o…

  Jul 6, 2023
• Unscored —
  CVE-2023-37125

  A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attacker…

  Jul 6, 2023
• Unscored —
  CVE-2023-37454

  An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write…

  linux kernel Debian Azure Linux
  Jul 6, 2023
• Unscored —
  CVE-2023-37132

  A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to …

  Jul 6, 2023
• Unscored —
  CVE-2023-37136

  A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows atta…

  Jul 6, 2023
• Unscored —
  CVE-2023-37134

  A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to…

  Jul 6, 2023
• Unscored —
  CVE-2023-37131

  A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attacker…

  Jul 6, 2023
• Unscored —
  CVE-2023-37133

  A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to…

  Jul 6, 2023
• Unscored —
  CVE-2023-37124

  A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute …

  Jul 6, 2023
• Unscored —
  CVE-2023-37135

  A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to exec…

  Jul 6, 2023