Skip to content
OpenAdvisories

Archive

17 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /17 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2023-33012 Public exploit

    A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  • Unscored —
    CVE-2023-2636 Public exploit

    AN_GradeBook <= 5.0.1 - Subscriber+ SQLi

    The AN_GradeBook WordPress plugin through 5.0.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber

    Web / CMS
  • Unscored —
    CVE-2023-2579 Public exploit

    InventoryPress <= 1.7 - Author+ Stored XSS

    The InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

    Web / CMS
  • Unscored —
    CVE-2023-31851 Public exploit

    Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via …

  • Unscored —
    CVE-2023-31852 Public exploit

    Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the ifa…

  • Unscored —
    CVE-2023-31853 Public exploit

    Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parame…