Skip to content
OpenAdvisories

Archive

3 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /3 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

150 results · Feed

  • Unscored —
    CVE-2023-38942

    Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/…

  • Unscored —
    CVE-2023-38948

    An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers …

  • Critical 9.8
    CVE-2023-38951

    ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite ar…

  • High 7.5
    CVE-2023-38952 Scanner template

    Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due…

  • Unscored —
    CVE-2023-38955

    ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices,…

  • High 7.2
    CVE-2023-38947

    An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to e…

  • Unscored —
    CVE-2023-32764

    Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

  • Unscored —
    CVE-2023-36299

    A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and op…

  • Unscored —
    CVE-2023-36141

    User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, …

  • Unscored —
    CVE-2023-36132

    PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.

  • Unscored —
    CVE-2023-36082

    An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP a…

  • Unscored —
    CVE-2023-36159 Public exploit

    Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attacker…

  • Unscored —
    CVE-2023-36212 EPSS 26%

    File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP fil…

  • Unscored —
    CVE-2023-36133

    PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.

  • Unscored —
    CVE-2023-36298

    DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).

  • Unscored —
    CVE-2023-36158 Public exploit

    Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to ru…

  • Unscored —
    CVE-2023-36255 Public exploit EPSS 53%

    An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitra…

  • Unscored —
    CVE-2023-36217

    Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the cat…

  • Unscored —
    CVE-2023-36137

    There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Schedul…

  • Unscored —
    CVE-2023-36131

    PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation…

  • Unscored —
    CVE-2023-36135

    User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, wh…

  • Unscored —
    CVE-2023-36213

    SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of…

  • Unscored —
    CVE-2023-36139

    In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on t…

  • Unscored —
    CVE-2023-36138

    PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of previe…

  • Unscored —
    CVE-2023-36134

    In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the…

  • Unscored —
    CVE-2023-30297

    An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code …

  • Unscored —
    CVE-2023-25600

    An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, lea…

  • Unscored —
    CVE-2023-37679 Public exploit Scanner template EPSS 99%

    A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary co…

  • Unscored —
    CVE-2023-37364

    In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allow…

  • Unscored —
    CVE-2023-26979

    Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in th…