Skip to content
OpenAdvisories

Archive

28 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /28 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

91 results · Feed

  • Unscored —
    CVE-2023-38988

    An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arb…

  • Unscored —
    CVE-2023-38331

    Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

  • Critical 9.8
    CVE-2023-38992 Scanner template EPSS 73%

    SQL injection in jeecg-boot

    jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Unscored —
    CVE-2023-31937

    Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary co…

  • Unscored —
    CVE-2023-31933

    Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary co…

  • Unscored —
    CVE-2023-31934

    Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensit…

  • Unscored —
    CVE-2023-31935

    Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensit…

  • Unscored —
    CVE-2023-31936

    Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary co…

  • Unscored —
    CVE-2023-31932

    Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary co…

  • Critical 9.8
    CVE-2023-37754 EPSS 30%

    Code injection in PowerJob

    PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

    tech.powerjob:powerjob-common Maven
  • Unscored —
    CVE-2022-31454

    Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this …