Skip to content
OpenAdvisories

Archive

24 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /24 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

65 results · Feed

  • Medium 5.3
    CVE-2023-4227

    ioLogik 4000 Series: Existence of an Unauthorized Service

    A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data thef…

    Moxa ioLogik 4000 Series ICS / OT
  • Critical 9.1
    CVE-2023-40573

    XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Groovy scripts. Currently, the job checks the content author of the job for programming right. However, modifyi…

    xwiki xwiki-platform com.xpn.xwiki.platform.plugins:xwiki-plugin-scheduler org.xwiki.platform:xwiki-platform-scheduler-api Maven
  • High 7.5
    CVE-2023-32559

    A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.…

    Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.1
    CVE-2023-40572

    XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-oldcore Maven
  • Unscored —
    CVE-2023-39699

    IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /cal…

  • Unscored —
    CVE-2023-39834

    PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

  • Unscored —
    CVE-2023-39700 Scanner template

    IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the colo…

  • Unscored —
    CVE-2023-39801

    A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to…

  • Unscored —
    CVE-2023-40876

    DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freel…

  • Unscored —
    CVE-2023-40875

    DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /d…

  • Unscored —
    CVE-2023-40899

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and pa…

  • Unscored —
    CVE-2023-40901

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and …

  • Unscored —
    CVE-2023-40874

    DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /d…

  • Unscored —
    CVE-2023-40895

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetV…

  • Unscored —
    CVE-2023-40900

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetN…

  • Unscored —
    CVE-2023-40877

    DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freel…

  • Unscored —
    CVE-2023-40896

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at …

  • Critical 9.8
    CVE-2023-40904

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and …

  • Unscored —
    CVE-2023-40893

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/Powe…

  • Unscored —
    CVE-2023-40892

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and s…

  • Unscored —
    CVE-2023-40898

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/…

  • Unscored —
    CVE-2023-40902

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum a…

  • Unscored —
    CVE-2023-40897

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetPa…

  • Unscored —
    CVE-2023-40894

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetS…

  • Unscored —
    CVE-2023-40891

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /gofor…