Skip to content
OpenAdvisories

Archive

August 2023

Vulnerabilities first published in this month (UTC), newest first.

← July 2023 2023 / August September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-41044 Public exploit

    Partial path traversal vulnerability in Support Bundle feature of Graylog

    Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature a…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 3.5
    CVE-2023-4547 Public exploit EPSS 60%

    SPA-Cart eCommerce CMS search cross site scripting

    A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out rem…

    SPA-Cart eCommerce CMS
  • Low 3.5
    CVE-2023-4382 Public exploit

    tdevs Hyip Rio Profile Settings settings cross site scripting

    A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1. Affected by this issue is some unknown functionality of the file /user/settings of the component Profile Settings. The manipulation of the argument avatar leads to cro…

    tdevs Hyip Rio
  • Low 3.5
    CVE-2023-4174 Public exploit

    mooSocial mooStore cross site scripting

    A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-23620…

    Moosocial mooStore
  • Low 3.5
    CVE-2023-4173 Public exploit

    mooSocial mooStore index cross site scripting

    A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remot…

    Moosocial mooStore