Skip to content
OpenAdvisories

Archive

21 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /21 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

63 results · Feed

  • Unscored —
    CVE-2023-39750 EPSS 14%

    D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vu…

  • Unscored —
    CVE-2023-39807

    N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd paramete…

  • Unscored —
    CVE-2023-39094

    Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code v…

  • Unscored —
    CVE-2023-39785

    Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list funct…

  • Unscored —
    CVE-2023-39061

    Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileg…

  • High 8.8
    CVE-2023-39106

    Nacos Spring vulnerable to Unsafe Deserialization

    An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.

    com.alibaba.nacos:nacos-spring-context Maven
  • Unscored —
    CVE-2023-39748

    An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service…

  • High —
    CVE-2023-39660

    pandasai vulnerable to prompt injection

    An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

    pandasai PyPI
  • Unscored —
    CVE-2023-39784

    Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data …

  • Unscored —
    CVE-2023-39786

    Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.

  • Unscored —
    CVE-2023-39747

    TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusS…

  • Unscored —
    CVE-2023-39745

    TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via t…

  • Unscored —
    CVE-2023-39751

    TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.

  • Unscored —
    CVE-2023-39617

    TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code exe…

  • Unscored —
    CVE-2023-39808

    N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to logi…

  • Unscored —
    CVE-2023-39749

    D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability i…

  • Unscored —
    CVE-2023-38899

    SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_f…

  • Unscored —
    CVE-2023-38836 Public exploit EPSS 76%

    File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header …

  • High 7.5
    CVE-2023-38976

    Weaviate denial of service vulnerability

    An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

    github.com/weaviate/weaviate Go
  • Unscored —
    CVE-2023-38961

    Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary …

    iotjs Ubuntu
  • Unscored —
    CVE-2023-38906

    An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C20…

  • Unscored —
    CVE-2023-31447

    user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers …

  • Unscored —
    CVE-2023-40352

    McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by …