Archive
28 August 2023
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
Medium 6.1CVE-2023-39062 Public exploit
Spipu HTML2PDF vulnerable to cross-site scripting
Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execut…
-
Unscored —
Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted p…
-
Unscored —
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 210…
-
Unscored —CVE-2023-40752 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer …
-
Unscored —
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, wher…
-
Unscored —CVE-2023-40753 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support …
-
Unscored —
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a …
-
High 7.5
pf4j vulnerable to remote code execution via loadpluginPath parameter
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter.
-
Unscored —
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where …
-
High 7.5
pf4j vulnerable to remote code execution via the zippluginPath parameter
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter.
-
Unscored —
In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profil…
-
High 7.5
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.
-
Unscored —
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
-
Unscored —
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a…
-
Unscored —
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a …
-
Unscored —
User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a di…
-
Unscored —
Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a cr…
-
Unscored —
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where…
-
Unscored —
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, wh…
-
Unscored —CVE-2023-40751 Scanner template
PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
-
Unscored —
Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_…
-
Unscored —
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a d…
-
Unscored —CVE-2023-40748 Scanner template
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
-
Unscored —
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a d…
-
Unscored —CVE-2023-40750 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing …
-
Unscored —
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in…
-
Unscored —CVE-2023-40755 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widg…
-
Unscored —CVE-2023-40749 Scanner template
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
-
Unscored —
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a d…
-
Unscored —
User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a di…
-
Unscored —
User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a diffe…
-
Unscored —
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a diff…
-
Unscored —
SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
-
High 7.8
Command injection in pagekit
An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php
-
Unscored —
ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a c…
-
Unscored —
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may…