Archive
3 August 2023
Vulnerabilities first published on this day (UTC), newest first.
150 results · Feed
-
Medium 4.1
Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
-
High 8.8
Weak Password Requirements in answerdev/answer
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
-
High 8.1
Missing Authorization in answerdev/answer
Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.
-
Low 3.5CVE-2023-4110 Scanner template
PHP Jabbers Availability Booking Calendar index.php cross site scripting
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument session_id leads to cross site s…
-
Unscored —
Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially…
-
Unscored —
Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potential…
-
Unscored —
Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…
-
Unscored —
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to poten…
-
Unscored —
Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…
-
Unscored —
Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…
-
Unscored —
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…
-
Unscored —
Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially explo…
-
Unscored —CVE-2023-4068 EPSS 16%
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…
-
Unscored —CVE-2023-4069 EPSS 25%
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap cor…
-
Unscored —
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary co…
-
Unscored —
In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial o…
-
Unscored —
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to ex…
-
Unscored —
An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the m…
-
Unscored —
Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session token…
-
Unscored —
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to …
-
Unscored —
ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component …
-
Unscored —
A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary…
-
Unscored —
Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to u…
-
Unscored —
ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.p…
-
Unscored —
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbi…
-
Unscored —
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetc…
-
Unscored —CVE-2023-39121 Scanner template
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.
-
Unscored —
WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
-
Unscored —
WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and …
-
Unscored —
Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) …
-
Unscored —CVE-2023-39144 Public exploit
Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext.
-
Unscored —
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntim…
-
Unscored —
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arb…
-
Unscored —
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
-
High 7.5
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbi…
KEV May 19, 2025 -
Unscored —
django-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability via the component ssp…
-
Unscored —
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files …
-
Unscored —
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open t…
-
Unscored —
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrat…