Skip to content
OpenAdvisories

Archive

18 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /18 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

59 results · Feed

  • Unscored —
    CVE-2023-39415

    Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Editi…

    North Grid Proself Gateway Edition Proself Enterprise/Standard Edition Proself Mail Sanitize Edition
  • Medium 5.9
    CVE-2023-30875

    WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versions.

    All My Web Needs Logo Scheduler
  • Medium 5.3
    CVE-2023-4040

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due t…

    WebToffee Stripe Payment Plugin for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-39667

    D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in…

  • Unscored —
    CVE-2023-39670

    Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.

  • Unscored —
    CVE-2023-39668

    D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in…

  • Unscored —
    CVE-2023-39671

    D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68.

  • Unscored —
    CVE-2023-39669

    D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824.

  • Unscored —
    CVE-2023-39674

    D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets.

  • Unscored —
    CVE-2023-39666

    D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function…

  • Unscored —
    CVE-2023-39672

    Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.

  • Unscored —
    CVE-2023-39665

    D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.

  • Unscored —
    CVE-2023-39673

    Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().

  • Unscored —
    CVE-2023-38890 Public exploit

    Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form…

  • Unscored —
    CVE-2023-38911

    A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted pa…

  • Unscored —
    CVE-2023-38910

    CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or H…

  • Unscored —
    CVE-2023-38839

    SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theI…

  • Unscored —
    CVE-2023-27576

    An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data o…

  • Unscored —
    CVE-2023-27471

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect …