Archive
13 July 2023
Vulnerabilities first published on this day (UTC), newest first.
114 results · Feed
-
High 8.8
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…
-
Unscored —
Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesys…
-
Unscored —CVE-2023-34125 EPSS 24%
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the und…
-
Critical 9.8
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…
-
Unscored —
In notification access permission dialog box, malicious application can embedded a very long service label that overflo…
-
Unscored —CVE-2023-33768 Public exploit
Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WS…
-
Unscored —
An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration …
-
High 7.5
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infini…
-
Unscored —
coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers o…
-
Unscored —
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.
-
Unscored —CVE-2023-31704 Public exploit
Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote atta…
-
Unscored —
An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive info…
-
Unscored —
An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the chann…
-
Unscored —
An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information vi…
-
Unscored —CVE-2023-31705 Public exploit
A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated…
-
Unscored —
An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the ch…
-
Unscored —
An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel acc…
-
Unscored —
An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information…
-
Unscored —
An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the cha…
-
Unscored —
A SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version 3.1.10, allows remote…
-
Medium 4.8
ImpressCMS Cross-site Scripting vulnerability
A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the smile_code parameter of the component /editprofile.php.
-
Unscored —CVE-2023-37598 Public exploit
A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial o…
-
Unscored —
A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitr…
-
Unscored —
A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute a…
-
Unscored —CVE-2023-37786 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts …
-
Unscored —
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts …
-
Unscored —
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. Th…
-
Unscored —
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compone…
-
Unscored —
An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory
-
Unscored —
An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute…
-
Unscored —
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary …
-
Unscored —
libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebi…
-
Unscored —CVE-2022-42045 Public exploit
Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zema…