Skip to content
OpenAdvisories

Archive

8 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /8 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2023-39320 Public exploit

    Arbitrary code execution via go.mod toolchain directive in cmd/go

    The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the…

    Go toolchain cmd/go go metrics-server Alpine Wolfi Go
  • Unscored —
    CVE-2014-5329 Public exploit

    GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user opera…

    TripodWorks GIGAPOD 2010 / GIGAPOD 3 Appliance model GIGAPOD OFFICEHARD Appliance model GIGAPOD 2010 / GIGAPOD 3 Software model
  • Unscored —
    CVE-2023-39712 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows att…

  • Unscored —
    CVE-2023-40924 Public exploit Scanner template

    SolarView Compact < 6.00 is vulnerable to Directory Traversal.

  • Unscored —
    CVE-2023-41575 Public exploit

    Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 …

  • Medium 6.1
    CVE-2023-41564 Public exploit

    Cockpit CMS arbitrary file upload vulnerability

    An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.

    cockpit-hq/cockpit Packagist
  • Unscored —
    CVE-2023-37759 Public exploit

    Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthentica…