Skip to content
OpenAdvisories

Archive

5 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /5 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2023-4762 Exploited Public exploit EPSS 41%

    Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
    KEV Feb 6, 2024
  • High 7.2
    CVE-2023-39362 Public exploit EPSS 85%

    Authenticated command injection in SNMP options of a Device

    Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2023-39361 Public exploit Scanner template EPSS 89%

    Unauthenticated SQL Injection in graph_view.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are bei…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-10128 Public exploit

    SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

    SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

    SearchBlox SearchBlox
  • Medium 4.4
    CVE-2023-4636 Public exploit

    WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS
  • Low —
    CVE-2023-36308 Public exploit

    Crash when processing crafted TIFF files

    disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this …

    filebrowser github.com/disintegration/imaging golang-github-disintegration-imaging Debian Wolfi Go
  • Unscored —
    CVE-2023-41508 Public exploit

    A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

  • Unscored —
    CVE-2023-41507 Public exploit

    Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component…