Skip to content
OpenAdvisories

Archive

25 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /25 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4542 Public exploit Scanner template EPSS 85%

    D-Link DAR-8000-10 sys1.php os command injection

    A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to…

    D-Link DAR-8000-10 Network devices
  • Medium 6.1
    CVE-2023-41080 Public exploit

    Apache Tomcat: Open redirect with FORM authentication

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  • High 7.8
    CVE-2023-40031 Public exploit

    Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are availabl…

    notepad-plus-plus notepad-plus-plus
  • Unscored —
    CVE-2023-34723 Public exploit

    An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information…

  • Unscored —
    CVE-2023-39707 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attac…