Skip to content
OpenAdvisories

Archive

25 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /25 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-38501 Public exploit Scanner template

    copyparty vulnerable to reflected cross-site scripting via k304 parameter

    copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case outcome of this is being able to move or delete existing files on the server, o…

    9001 copyparty copyparty PyPI
  • High 8.1
    CVE-2023-37460 Public exploit

    Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver

    Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file c…

    codehaus-plexus plexus-archiver javapackages-bootstrap org.codehaus.plexus:plexus-archiver Ubuntu Azure Linux Maven
  • Medium 4.8
    CVE-2023-3897 Public exploit

    Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

    Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version

    Onpremise SureMDM Solution SureMDM Onpremise
  • Critical 10.0
    CVE-2023-35078 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…

    ivanti Endpoint Manager Mobile Network devices
    KEV Jul 25, 2023
  • Medium 6.3
    CVE-2023-3881 Public exploit

    Campcodes Beauty Salon Management System forgot-password.php sql injection

    A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql inject…

    Campcodes Beauty Salon Management System