Archive
11 September 2023
Vulnerabilities first published on this day (UTC), newest first.
118 results · Feed
-
Unscored —
Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows auth…
-
Unscored —
An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted pa…
-
Unscored —
An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowin…
-
Unscored —
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
-
Unscored —
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
-
Unscored —
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file us…
-
High 7.8CVE-2023-39063 Public exploit
Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server n…
-
High 8.8
On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…
KEV Jun 2, 2025 -
Unscored —
Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80…
-
Unscored —
An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Act…
-
Unscored —
Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a cr…
-
Unscored —
An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter i…
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a re…
-
Unscored —CVE-2023-38829 Public exploit
An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and trace…
-
High 7.2
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
-
Unscored —
An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of…
-
Unscored —
In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain acc…
-
Unscored —
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casi…
-
High 7.8CVE-2023-31468 Public exploit
An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\…
-
Unscored —CVE-2023-31067 Public exploit
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on s…
-
Unscored —CVE-2023-31068 Public exploit
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on s…
-
Unscored —CVE-2023-31069 Public exploit
An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML …
-
Unscored —CVE-2023-27470 Public exploit
BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a p…
-
Unscored —
novel-plus 3.6.2 is vulnerable to SQL Injection.
-
Unscored —
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.
-
Unscored —
An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attack…
-
Unscored —
Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetail…
-
Unscored —
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
-
Unscored —
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi networ…
-
Unscored —
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
-
Unscored —CVE-2023-41593 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow…
-
Unscored —
GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder…
-
Unscored —
An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim u…
-
Unscored —
Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store …
-
Unscored —
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate…
-
Unscored —CVE-2023-42470 Public exploit
The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a craf…
-
Unscored —CVE-2023-42471 Public exploit
The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript cod…
-
High 8.1
Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through…