Skip to content
OpenAdvisories

Archive

26 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /26 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 6.3
    CVE-2023-4548 Public exploit EPSS 29%

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …

    SPA-Cart eCommerce CMS
  • Low 3.5
    CVE-2023-4547 Public exploit Scanner template EPSS 60%

    SPA-Cart eCommerce CMS search cross site scripting

    A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out rem…

    SPA-Cart eCommerce CMS
  • Low 3.5
    CVE-2023-4546

    Byzoro Smart S85F Management Platform licence.php access control

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access co…

    Byzoro Smart S85F Management Platform
  • Medium 6.3
    CVE-2023-4545

    IBOS OA export&checkids=x sql injection

    A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The explo…

    IBOS OA
  • Medium 4.3
    CVE-2023-4544

    Byzoro Smart S85F Management Platform php.ini direct request

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated …

    Byzoro Smart S85F Management Platform
  • High 8.3
    CVE-2023-36741

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers