Skip to content
OpenAdvisories

Archive

14 September 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2023-38891 Public exploit

    SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the…

  • High 7.8
    CVE-2023-36250 Public exploit

    CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via c…

  • Unscored —
    CVE-2023-40869 Public exploit

    Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute …

  • Unscored —
    CVE-2023-40868 Public exploit

    Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arb…

  • Unscored —
    CVE-2023-41011 Public exploit

    Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows …

  • Unscored —
    CVE-2023-42362 Public exploit

    An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands…

  • Unscored —
    CVE-2023-37739 Public exploit

    i-doit Pro v25 and below was discovered to be vulnerable to path traversal.

  • Unscored —
    CVE-2023-37756 Public exploit

    I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creati…

  • Unscored —
    CVE-2023-37755 Public exploit

    i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, an…