Archive
10 August 2023
Vulnerabilities first published on this day (UTC), newest first.
133 results · Feed
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creat…
-
Unscored —
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Request…
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widge…
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in P…
-
Unscored —
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause…
-
Unscored —
HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, …
-
Unscored —
MISP 2.4.174 allows XSS in app/View/Events/index.ctp.
-
Unscored —
An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate pr…
-
Unscored —CVE-2023-37625 Public exploit
A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or…
-
Unscored —
Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an atta…
-
Unscored —
Cacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a modified local_graph_id…
-
Unscored —
EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow.
-
Unscored —CVE-2022-47636 Public exploit
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user ope…