Skip to content
OpenAdvisories

Archive

18 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /18 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.5
    CVE-2023-40173

    Unsalted passwords in fobybus/social-media-skeleton

    Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an att…

    fobybus social-media-skeleton
  • High 7.3
    CVE-2023-40175

    Inconsistent Interpretation of HTTP Requests in puma

    Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Sever…

    puma puma puma puma Debian Ubuntu RubyGems
  • High 7.5
    CVE-2023-20212

    A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of ser…

    Cisco Cisco Secure Endpoint clamav Network devices Debian
  • High 7.3
    CVE-2023-4415 Scanner template EPSS 58%

    Ruijie RG-EW1200G login improper authentication

    A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotel…

    Ruijie RG-EW1200G
  • High 7.1
    CVE-2023-32109

    WordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.

    Ignazio Scimone Albo Pretorio On line
  • High 7.1
    CVE-2023-30499

    WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions.

    foliovision FV Flowplayer Video Player
  • High 7.1
    CVE-2023-32108

    WordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.

    Ignazio Scimone Albo Pretorio On line
  • High 7.1
    CVE-2023-32107

    WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.

    Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery
  • High 7.1
    CVE-2023-32106

    WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions.

    Fahad Mahmood WP Docs
  • High 7.1
    CVE-2023-32105

    WordPress WPPizza Plugin <= 3.17.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza – A Restaurant Plugin plugin <= 3.17.1 versions.

    ollybach WPPizza – A Restaurant Plugin
  • High 7.1
    CVE-2023-31218

    WordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.6 versions.

    RealMag777 WOLF – WordPress Posts Bulk Editor and Manager Professional Web / CMS
  • High 7.1
    CVE-2023-31094

    WordPress Stock Sync for WooCommerce Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions.

    Lauri Karisola / WP Trio Stock Sync for WooCommerce Web / CMS
  • High 8.8
    CVE-2023-40072

    OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute …

    ELECOM WAB-I1750-PS WAB-M1775-PS WAB-S1167-PS
  • High 8.8
    CVE-2023-39454

    Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to exe…

    ELECOM WMC-X1800GST-B WRC-X1800GSA-B WRC-X6000QS-G
  • High 8.8
    CVE-2023-35991

    Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the …

    LOGITEC LAN-WH450N/GP LAN-WH300N/DGP LAN-W300N/DR