9 August 2023

102 results · Feed

• Unscored —
  CVE-2023-39002 Scanner template

  A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense Community Edition…

  Aug 9, 2023
• Unscored —
  CVE-2023-39006

  The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before…

  Aug 9, 2023
• Unscored —
  CVE-2023-39003

  OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permission…

  Aug 9, 2023
• Unscored —
  CVE-2023-39005

  Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.…

  Aug 9, 2023
• Unscored —
  CVE-2023-39007 Scanner template

  /ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 a…

  Aug 9, 2023
• Unscored —
  CVE-2023-39000

  A reflected cross-site scripting (XSS) vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community E…

  Aug 9, 2023
• Unscored —
  CVE-2023-39001

  A command injection vulnerability in the component diag_backup.php of OPNsense Community Edition before 23.7 and Busine…

  Aug 9, 2023
• Unscored —
  CVE-2023-38997

  A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Busin…

  Aug 9, 2023
• Unscored —
  CVE-2023-38998

  An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows …

  Aug 9, 2023
• Unscored —
  CVE-2023-38347

  An issue was discovered in LWsystems Benno MailArchiv 2.10.1. Attackers can cause XSS via JavaScript content to a mailb…

  Aug 9, 2023
• Unscored —
  CVE-2023-38348

  A CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1.

  Aug 9, 2023
• Unscored —
  CVE-2023-38999

  A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and…

  Aug 9, 2023
• Unscored —
  CVE-2023-32781 Public exploit EPSS 14%

  A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an a…

  Aug 9, 2023
• Unscored —
  CVE-2023-32782 EPSS 56%

  A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authen…

  Aug 9, 2023
• Unscored —
  CVE-2023-36672

  An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the…

  wireguard Ubuntu
  Aug 9, 2023
• Unscored —
  CVE-2023-36673

  An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operati…

  Aug 9, 2023
• Unscored —
  CVE-2023-36671

  An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the…

  Aug 9, 2023
• Unscored —
  CVE-2023-31452

  A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows r…

  Aug 9, 2023
• Unscored —
  CVE-2023-31450

  A path traversal vulnerability was identified in the SQL v2 sensors in PRTG 23.2.84.1566 and earlier versions where an …

  Aug 9, 2023
• Unscored —
  CVE-2023-31448

  A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an auth…

  Aug 9, 2023
• Unscored —
  CVE-2023-31449

  A path traversal vulnerability was identified in the WMI Custom sensor in PRTG 23.2.84.1566 and earlier versions where …

  Aug 9, 2023
• Unscored —
  CVE-2023-37068 Public exploit

  Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, …

  Aug 9, 2023