Skip to content
OpenAdvisories

Archive

27 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /27 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • High 7.5
    CVE-2022-43904

    IBM Security Guardium information disclosure

    IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895.

    IBM Security Guardium
  • High 7.6
    CVE-2023-33852

    IBM Security Guardium SQL injection

    IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 257614.

    IBM Security Guardium
  • Medium 4.6
    CVE-2022-43909

    IBM Security Guardium cross-site scripting

    IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…

    IBM Security Guardium
  • High 7.2
    CVE-2022-43907

    IBM Security Guardium command execution

    IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901.

    IBM Security Guardium
  • Medium 6.3
    CVE-2023-4559

    Bettershop LaikeTui POST Request unrestricted upload

    A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads …

    Bettershop LaikeTui
  • Medium 6.3
    CVE-2023-4558

    SourceCodester Inventory Management System staff_data.php sql injection

    A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_data.php. The manipulation of the argument columns[0][data] leads to sql injection…

    SourceCodester Inventory Management System
  • Medium 5.3
    CVE-2023-30437

    IBM Security Guardium information disclosure

    IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293.

    IBM Security Guardium
  • Medium 5.5
    CVE-2023-30436

    IBM Security Guardium cross-site scripting

    IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a …

    IBM Security Guardium
  • High 8.9
    CVE-2023-30435

    IBM Security Guardium cross-site scripting

    IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi…

    IBM Security Guardium
  • Medium 5.9
    CVE-2023-38730

    IBM Spectrum Copy Data Management information disclosure

    IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.

    IBM Spectrum Copy Data Management
  • Medium 6.3
    CVE-2023-4557

    SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen_report.php. The manipulation of the argument customer leads to sql injection. …

    SourceCodester Inventory Management System
  • Medium 6.3
    CVE-2023-4556

    SourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injection

    A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqli_query of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be …

    SourceCodester Online Graduate Tracer System
  • Low 3.5
    CVE-2023-4555

    SourceCodester Inventory Management System suppliar_data.php cross site scripting

    A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliar_data.php. The manipulation of the argument name/company leads to cr…

    SourceCodester Inventory Management System