Archive
August 2023
Vulnerabilities first published in this month (UTC), newest first.
2,514 results · Feed
-
Unscored —
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, wher…
-
Unscored —CVE-2023-40753 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support …
-
Unscored —
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a …
-
High 7.5
pf4j vulnerable to remote code execution via loadpluginPath parameter
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter.
-
Unscored —
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where …
-
High 7.5
pf4j vulnerable to remote code execution via the zippluginPath parameter
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter.
-
Unscored —
In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profil…
-
High 7.5
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.
-
Unscored —
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
-
Unscored —
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a…
-
Unscored —
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a …
-
Unscored —
User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a di…
-
Unscored —
Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a cr…
-
Unscored —
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where…
-
Unscored —
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, wh…
-
Unscored —CVE-2023-40751 Scanner template
PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
-
Unscored —
Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_…
-
Unscored —
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a d…
-
Unscored —CVE-2023-40748 Scanner template
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
-
Unscored —
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a d…
-
Unscored —CVE-2023-40750 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing …
-
Unscored —
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in…
-
Unscored —CVE-2023-40755 Scanner template
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widg…
-
Unscored —CVE-2023-40749 Scanner template
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
-
Unscored —
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a d…
-
Unscored —
User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a di…
-
Unscored —
User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a diffe…
-
Unscored —
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a diff…
-
Unscored —
SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
-
High 7.8
Command injection in pagekit
An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php
-
Unscored —
ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a c…
-
Unscored —
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may…
-
High 7.5
IBM Security Guardium information disclosure
IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895.
-
High 7.6
IBM Security Guardium SQL injection
IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 257614.
-
Medium 4.6
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
-
High 7.2
IBM Security Guardium command execution
IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901.
-
Medium 6.3
Bettershop LaikeTui POST Request unrestricted upload
A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads …
-
Medium 6.3
SourceCodester Inventory Management System staff_data.php sql injection
A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_data.php. The manipulation of the argument columns[0][data] leads to sql injection…
-
Medium 5.3
IBM Security Guardium information disclosure
IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293.
-
Medium 5.5
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a …