31 July 2023

64 results · Feed

• Unscored —
  CVE-2023-38306

  An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file u…

  Jul 31, 2023
• Unscored —
  CVE-2023-38750

  In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and…

  Jul 31, 2023
• Unscored —
  CVE-2023-38307

  An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users …

  Jul 31, 2023
• Unscored —
  CVE-2023-38989

  An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitra…

  Jul 31, 2023
• Unscored —
  CVE-2023-38309

  An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the pac…

  Jul 31, 2023
• Unscored —
  CVE-2023-38304

  An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users …

  Jul 31, 2023
• Unscored —
  CVE-2023-38305

  An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scriptin…

  Jul 31, 2023
• Unscored —
  CVE-2023-38303

  An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote C…

  Jul 31, 2023
• Unscored —
  CVE-2023-38308

  An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel f…

  Jul 31, 2023
• Unscored —
  CVE-2023-38311

  An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System…

  Jul 31, 2023
• Unscored —
  CVE-2023-38310

  An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the config…

  Jul 31, 2023
• Critical 9.8
  CVE-2023-36091

  Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via…

  Jul 31, 2023
• High 8.8
  CVE-2023-36092

  Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via…

  Jul 31, 2023
• Unscored —
  CVE-2023-36090

  Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges vi…

  Jul 31, 2023
• Unscored —
  CVE-2023-36089

  Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated p…

  Jul 31, 2023
• Unscored —
  CVE-2023-3983 EPSS 17%

  An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenti…

  Jul 31, 2023
• Unscored —
  CVE-2023-37771 Public exploit

  Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.

  Jul 31, 2023
• Unscored —
  CVE-2023-37647

  SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php.

  Jul 31, 2023
• Medium 6.1
  CVE-2023-37580 Exploited Scanner template EPSS 49%

  Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

  Jul 31, 2023

  KEV Jul 27, 2023
• Unscored —
  CVE-2022-42183

  Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery (SSRF).

  Jul 31, 2023
• Unscored —
  CVE-2022-42182

  Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal.

  Jul 31, 2023
• Unscored —
  CVE-2021-31651

  Cross Site Scripting (XSS) vulnerability in neofarg-cms 0.2.3 allows remoate attacker to run arbitrary code via the cop…

  Jul 31, 2023
• Unscored —
  CVE-2021-31681

  Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml f…

  Jul 31, 2023
• Unscored —
  CVE-2021-31680

  Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml f…

  Jul 31, 2023