Skip to content
OpenAdvisories

Archive

3 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /3 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4745

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection

    A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation lea…

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform
  • Medium 6.3
    CVE-2023-4742

    IBOS OA export&uid=X sql injection

    A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been d…

    IBOS OA
  • Medium 6.3
    CVE-2023-4741 Public exploit

    IBOS OA Delete Logs del sql injection

    A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated rem…

    IBOS OA
  • Medium 6.3
    CVE-2023-4740

    IBOS OA Delete Draft delDraft&archiveId=0 sql injection

    A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiat…

    IBOS OA
  • Medium 6.3
    CVE-2023-4739

    Byzoro Smart S85F Management Platform updateos.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload…

    Byzoro Smart S85F Management Platform
  • Medium 4.8
    CVE-2023-37222

    Farsight Tech Nordic AB ProVide

    Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege.

    Farsight Tech Nordic AB ProVide
  • Medium 5.9
    CVE-2023-38476

    WordPress Client Portal : SuiteDash Direct Login Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin <= 1.7.6 versions.

    SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login
  • Medium 5.9
    CVE-2023-38482

    WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versions.

    QualityUnit Post Affiliate Pro
  • Medium 6.5
    CVE-2023-38516

    WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.

    WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate
  • Medium 5.9
    CVE-2023-38517

    WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Realwebcare WRC Pricing Tables plugin <= 2.3.7 versions.

    Realwebcare WRC Pricing Tables
  • Medium 5.9
    CVE-2023-38518

    WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Visualmodo Borderless plugin <= 1.4.8 versions.

    visualmodo Borderless
  • Medium 5.9
    CVE-2023-38387

    WordPress Elastic Email Sender Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Elastic Email Sender plugin <= 1.2.6 versions.

    Elastic Email Sender Elastic Email Sender
  • Medium 5.9
    CVE-2023-38521

    WordPress Exifography Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Exifography plugin <= 1.3.1 versions.

    Exifography Exifography