Skip to content
OpenAdvisories

Archive

10 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /10 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Low 3.5
    CVE-2023-4879

    Cross-site Scripting (XSS) - Stored in instantsoft/icms2

    Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.

    instantsoft instantsoft/icms2
  • Medium 4.3
    CVE-2023-4878

    Server-Side Request Forgery (SSRF) in instantsoft/icms2

    Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 6.3
    CVE-2023-4873 EPSS 22%

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

    A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql …

    Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform
  • Medium 6.3
    CVE-2023-4872

    SourceCodester Contact Manager App add.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue affects some unknown processing of the file add.php. The manipulation of the argument contact/contactName leads to sql injection. The attac…

    SourceCodester Contact Manager App
  • Medium 6.3
    CVE-2023-4871

    SourceCodester Contact Manager App delete.php sql injection

    A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument contact/contactName leads to sql injection. The attack can be initiate…

    SourceCodester Contact Manager App
  • Low 3.5
    CVE-2023-4870

    SourceCodester Contact Manager App Contact Information index.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input "><s…

    SourceCodester Contact Manager App
  • Medium 4.3
    CVE-2023-4869

    SourceCodester Contact Manager App update.php cross-site request forgery

    A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launche…

    SourceCodester Contact Manager App
  • Medium 4.3
    CVE-2023-4868

    SourceCodester Contact Manager App add.php cross-site request forgery

    A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be l…

    SourceCodester Contact Manager App
  • Medium 5.5
    CVE-2023-4877

    Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92.

    hamza417 hamza417/inure
  • High 7.9
    CVE-2023-4876

    Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92.

    hamza417 hamza417/inure
  • Medium 6.3
    CVE-2023-4867

    Xintian Smart Table Integrated Management System Added Site Page AddUpdateSites.aspx sql injection

    A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unknown function of the file /SysManage/AddUpdateSites.aspx of the component Added Site Page. The manipulation of the argum…

    Xintian Smart Table Integrated Management System