Archive
July 2023
Vulnerabilities first published in this month (UTC), newest first.
2,318 results · Feed
-
Medium 4.3
Aures Komet Kiosk Mode access control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. T…
-
Medium 5.5
Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A maliciou…
-
Medium 5.5
Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthe…
-
Medium 5.5
Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthe…
-
Medium 4.4
Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated …
-
Medium 4.9
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious…
-
Medium 4.9
Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user …
-
High 7.5
InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)
InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as ifram…
-
Low 3.5
PaulPrinting CMS cross site scripting
A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be…
-
Low 3.5
Dooblou WiFi File Explorer cross site scripting
A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The att…
-
Low 3.5
Webile HTTP POST Request cross site scripting
A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to lau…
-
High 7.8
Adobe InDesign BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…
-
Medium 5.3
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it …
-
Critical 9.8
InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability witho…
-
Medium 6.5
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-b…
-
Medium 6.4
There's a use-after-free vulnerability in grub_cmd_chainloader() function
There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-a…
-
Medium 6.7
The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such …
-
High 8.1
Out-of-bounds write when handling split HTTP headers
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a N…
-
High 8.1
Integer underflow in grub_net_recv_ip4_packets
Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a sma…
-
Unscored —
A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplyin…
-
Unscored —
ShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation of the lock opening mec…
-
Critical 9.8
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remo…
-
Unscored —
Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private"…
-
Unscored —
Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Om…
-
Unscored —
Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabili…
-
Unscored —
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, wit…
-
Unscored —CVE-2023-31753 Public exploit
SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via t…
-
Unscored —
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writ…
-
Unscored —
Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed a…
-
High 7.5
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Ad…
-
Unscored —
Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_p…
-
High 7.5
Cockpit CMS vulnerable to incorrect access control
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
-
Medium 6.1
Alkacon OpenCMS arbitrary file upload vulnerability
An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.
-
Unscored —
Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabili…
-
Unscored —CVE-2023-37728 Scanner template
IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.
-
High 8.8
Cockpit CMS Cross-Site Request Forgery vulnerability
A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.
-
Unscored —
eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/r…
-
Unscored —
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI) vulnerability via the compone…
-
Unscored —CVE-2023-37164 Public exploit
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=sh…
-
Unscored —
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to…