Skip to content
OpenAdvisories

Archive

14 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /14 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

67 results · Feed

  • Unscored —
    CVE-2023-39286

    A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an u…

  • Unscored —
    CVE-2023-38912

    SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code v…

  • Unscored —
    CVE-2023-38891 Public exploit

    SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the…

  • High 7.8
    CVE-2023-36250 Public exploit

    CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via c…

    hamster-time-tracker hamster-time-tracker Debian Ubuntu
  • Unscored —
    CVE-2023-40958

    A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fi…

  • Unscored —
    CVE-2023-40869 Public exploit

    Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute …

  • Unscored —
    CVE-2023-40957

    A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fi…

  • Unscored —
    CVE-2023-40955

    A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fi…

  • Unscored —
    CVE-2023-40779 Scanner template

    An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a craft…

  • Unscored —
    CVE-2023-40956

    A SQL injection vulnerability in Cloudroits Website Job Search v.15.0 allows a remote authenticated attacker to execute…

  • Unscored —
    CVE-2023-40868 Public exploit

    Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arb…

  • Unscored —
    CVE-2023-41160

    A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers…

  • Medium 5.4
    CVE-2023-41592

    Froala Editor Cross-site Scripting vulnerability

    Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

    froala-editor froala/wysiwyg-editor npm Packagist
  • Unscored —
    CVE-2023-41010

    Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.…

  • Unscored —
    CVE-2023-41159

    A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote …

  • Unscored —
    CVE-2023-41588

    A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scr…

  • Unscored —
    CVE-2023-41011 Public exploit

    Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows …

  • Unscored —
    CVE-2023-41156

    A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote att…

  • Unscored —
    CVE-2023-42180

    An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute ht…

  • Unscored —
    CVE-2023-42362 Public exploit

    An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands…

  • Unscored —
    CVE-2023-42405

    SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` par…

  • Unscored —
    CVE-2023-42178

    Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module.

  • Unscored —
    CVE-2023-37739 Public exploit

    i-doit Pro v25 and below was discovered to be vulnerable to path traversal.

  • Unscored —
    CVE-2023-37756 Public exploit

    I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creati…

  • Unscored —
    CVE-2023-37755 Public exploit

    i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, an…

  • Unscored —
    CVE-2022-47631

    Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privi…

  • Unscored —
    CVE-2021-28485

    In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path tra…