Archive
August 2023
Vulnerabilities first published in this month (UTC), newest first.
121 results · Clear filters · Feed
-
Low 3.3CVE-2023-41044 Public exploit
Partial path traversal vulnerability in Support Bundle feature of Graylog
Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature a…
-
Medium 5.3CVE-2023-4683 Public exploit
NULL Pointer Dereference in gpac/gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
-
High 8.8CVE-2022-45451 Public exploit
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: …
-
Unscored —CVE-2023-41717 Public exploit
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file down…
-
Critical 9.8
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible…
-
Unscored —CVE-2023-31714 Public exploit
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.
-
Critical 9.8
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key …
-
Critical 9.6
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and ea…
KEV Dec 7, 2023 -
Unscored —CVE-2023-41362 Public exploit
MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use…
-
Unscored —CVE-2021-3262 Public exploit
TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs…
-
Unscored —CVE-2023-39709 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows att…
-
Unscored —CVE-2023-39708 Public exploit
A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attac…
-
Medium 6.1CVE-2023-39062 Public exploit
Spipu HTML2PDF vulnerable to cross-site scripting
Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.
-
Medium 6.3
SPA-Cart eCommerce CMS GET Parameter search sql injection
A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …
-
Low 3.5
SPA-Cart eCommerce CMS search cross site scripting
A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out rem…
-
Medium 6.3
D-Link DAR-8000-10 sys1.php os command injection
A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to…
-
Medium 6.1CVE-2023-41080 Public exploit
Apache Tomcat: Open redirect with FORM authentication
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…
-
High 7.8CVE-2023-40031 Public exploit
Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are availabl…
-
Unscored —CVE-2023-34723 Public exploit
An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information…
-
Unscored —CVE-2023-39707 Public exploit
A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attac…
-
Medium 5.3CVE-2023-34040 Public exploit
Java Deserialization vulnerability in Spring-Kafka When Improperly Configured
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the dese…
-
High 7.8
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within …
KEV Aug 24, 2023 -
Unscored —
Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out …
-
Medium 6.4CVE-2023-24517 Public exploit
Remote Code Execution via Unrestricted File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 v…
-
Unscored —CVE-2023-34853 Public exploit
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow vi…
-
High 7.5CVE-2023-39141 Public exploit
webui-aria2 Path Traversal vulnerability
webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.
-
Unscored —
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker …
-
Critical 9.8CVE-2023-36281 Public exploit
langchain vulnerable to arbitrary code execution
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.
-
Unscored —CVE-2022-48565 Public exploit
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…
-
Unscored —CVE-2022-44215 Public exploit
There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.
-
Critical 9.8
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…
KEV Aug 22, 2023 -
Medium 6.3
jeecgboot JimuReport Template injection
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remo…
-
Unscored —
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header …
-
Unscored —CVE-2023-37250 Public exploit
Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was in…
-
Unscored —
TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and disks…
-
Medium 6.5CVE-2023-40037 Public exploit
Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass…
-
Medium 6.3CVE-2023-4407 Public exploit
Codecanyon Credit Lite POST Request account_statement sql injection
A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument …
-
Unscored —CVE-2023-38890 Public exploit
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form…
-
Medium 5.3
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…
KEV Nov 13, 2023 -
Critical 9.8
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …
KEV Nov 13, 2023